$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: aFRJ2kwYVwAeQd+9YOwNcloX3MKdZjdcbATt3bT+cTE= Subject key identifier: 3C:3D:56:2B:17:1C:46:1F:E8:4A:85:50:FE:20:D6:AF:47:17:1E:AE Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 04D7 Signing time: Wed 20 May 2026 23:54:23 +0000 Manifest this update: Wed 20 May 2026 23:54:23 +0000 Manifest next update: Wed 27 May 2026 23:54:23 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: WSwXHMDopgIL1uXpOfSuEPs2U9Q4pHa7N6ot5WIIfHw=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: May 20 23:54:23 2026 GMT Not After : May 27 23:54:23 2026 GMT Subject: CN=6a0e49af-03fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:aa:45:18:fa:17:33:da:eb:99:8e:9c:fe: 04:76:78:ac:63:f5:13:95:c5:df:bc:1d:c0:ff:fa: ed:8f:5f:f5:49:71:66:07:27:8f:c3:cc:df:b8:30: bf:b9:1e:35:de:cd:c3:cd:5b:13:c9:7b:ab:fa:20: 95:c5:11:9f:87:4b:7c:d7:13:f1:54:49:74:83:5a: 9f:af:f1:32:e0:f4:58:99:56:75:35:8c:e7:6a:39: 12:06:0c:20:a1:fd:a1:d0:51:fb:52:a0:98:70:51: a5:2b:a6:fe:f9:78:6e:c0:94:d7:14:bd:19:5b:c0: 52:69:28:e4:98:0c:70:41:c2:3f:91:29:b5:5f:d8: 3c:5f:5c:39:95:16:0e:67:4f:a0:d1:42:b4:cc:f1: ec:e5:6d:5c:9e:98:a3:97:74:3b:f2:25:1a:d9:0c: 10:03:8a:d0:b8:46:1d:eb:ff:9c:ab:5f:37:79:6e: 70:45:59:d8:bb:30:5b:69:fc:37:c2:c2:7a:37:34: b3:61:fb:ac:21:ce:a4:9b:28:08:fd:96:dc:47:a7: e1:8f:08:8c:7a:92:81:2b:39:db:81:7b:0a:31:ff: 64:75:88:f1:61:c5:cb:cf:f2:d3:ee:ea:28:12:c0: 5a:2b:f8:37:b0:f6:08:5b:43:a0:86:8a:66:e7:c7: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:56:2B:17:1C:46:1F:E8:4A:85:50:FE:20:D6:AF:47:17:1E:AE X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:36:5c:49:42:35:b2:d0:36:28:f8:d8:c3:e9:bc:72:6b:90: b4:68:59:e7:bc:b8:14:aa:c3:75:33:5d:28:91:e0:89:03:d4: db:0a:0a:5c:98:2d:e0:85:5b:9f:8f:a3:1a:c5:de:44:98:a5: 30:b1:f1:ad:4b:ba:55:f8:49:b0:3c:33:43:de:bb:8e:e6:c9: f1:7e:93:e8:d3:22:b2:1f:db:95:4a:44:a6:4c:f5:83:f5:bc: 05:4d:ce:f6:6d:43:28:15:b5:22:c7:6e:7c:8e:0a:98:30:b8: 32:1a:62:71:85:bd:7e:63:fd:75:29:45:f2:e1:03:ee:dc:2f: a5:6f:60:cc:f7:8c:ee:0e:2c:51:4a:d7:11:e8:8b:1c:f7:a5: b2:53:ba:25:ee:9b:f9:13:73:52:68:87:8b:cb:e8:e9:42:f0: e8:63:86:c0:0b:41:3f:19:c7:64:cd:ba:88:ba:25:cf:b9:74: 3a:89:e4:a0:a4:df:55:69:f9:4f:a0:a0:fd:57:22:25:17:be: 71:77:ec:b9:be:81:74:38:1b:95:15:40:a9:c8:6a:6e:5b:b8: 05:dd:6d:60:fb:38:67:78:0d:97:db:78:97:6d:c1:a4:70:f2: ce:d1:98:51:ab:9f:b6:72:4b:95:9d:b5:c9:16:86:21:28:ff: 65:22:db:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjYwNTIwMjM1NDIzWhcNMjYwNTI3MjM1NDIzWjAYMRYwFAYD VQQDEw02YTBlNDlhZi0wM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lmqRRj6FzPa65mOnP4EdnisY/UTlcXfvB3A//rtj1/1SXFmByePw8zfuDC/ uR413s3DzVsTyXur+iCVxRGfh0t81xPxVEl0g1qfr/Ey4PRYmVZ1NYznajkSBgwg of2h0FH7UqCYcFGlK6b++XhuwJTXFL0ZW8BSaSjkmAxwQcI/kSm1X9g8X1w5lRYO Z0+g0UK0zPHs5W1cnpijl3Q78iUa2QwQA4rQuEYd6/+cq183eW5wRVnYuzBbafw3 wsJ6NzSzYfusIc6kmygI/ZbcR6fhjwiMepKBKznbgXsKMf9kdYjxYcXLz/LT7uoo EsBaK/g3sPYIW0Oghopm58eOwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw9VisX HEYf6EqFUP4g1q9HFx6uMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVDZcSUI1stA2KPjYw+m8cmuQtGhZ57y4FKrDdTNdKJHgiQPU2woKXJgt4IVb n4+jGsXeRJilMLHxrUu6VfhJsDwzQ967jubJ8X6T6NMish/blUpEpkz1g/W8BU3O 9m1DKBW1IsdufI4KmDC4MhpicYW9fmP9dSlF8uED7twvpW9gzPeM7g4sUUrXEeiL HPelslO6Je6b+RNzUmiHi8vo6ULw6GOGwAtBPxnHZM26iLolz7l0OonkoKTfVWn5 T6Cg/VciJRe+cXfsub6BdDgblRVAqchqblu4Bd1tYPs4Z3gNl9t4l23BpHDyztGY UauftnJLlZ21yRaGISj/ZSLbCA== -----END CERTIFICATE-----Generated at Thu May 21 10:16:02 2026 by rpki-client