$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: zEqaYZ7VP2pZcfmmWJWS/ZmlVwFd9Qlow0ehna3OBUA= Subject key identifier: 7E:66:E0:E6:04:50:BE:68:FE:67:1E:ED:4D:0A:83:39:5F:02:A1:3C Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 28B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 2894 Signing time: Wed 20 May 2026 15:36:32 +0000 Manifest this update: Wed 20 May 2026 15:36:31 +0000 Manifest next update: Wed 27 May 2026 15:36:31 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: KM4383KIroPdXTTMSgY5HXKXs/02oJpAZkb690xJ7pw=) 2: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: 9GVylNABRiUF/bNFB+XBrQ4aT79hVzEVLhbNM6JQTPs=) 3: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: QOUfW1TvLM3TNftLaWNGliib5JWln6/7ufAzFMko72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10424 (0x28b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: May 20 15:36:31 2026 GMT Not After : May 27 15:36:31 2026 GMT Subject: CN=6a0dd500-6ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:41:cf:92:c0:65:10:df:84:09:9b:0f:74: 37:ac:68:0f:d3:fb:6d:0e:e8:95:b2:41:04:11:db: 6e:4f:9e:5a:16:a9:24:a8:60:5a:8d:b7:b9:56:09: 4f:8c:1d:d5:6c:03:9c:97:8f:9f:fb:39:b2:7f:7a: 1f:50:03:75:a1:1d:d4:44:46:65:9a:5c:b1:81:6e: 9b:86:54:65:a0:16:22:fa:23:07:59:06:7f:1a:74: 94:e9:fd:24:db:c9:06:f9:3d:c6:dc:cf:68:09:0d: 5c:3f:9d:85:fe:3e:7f:7a:43:0b:df:30:c7:bf:56: 7d:98:a2:10:ae:79:36:91:68:1a:bd:29:93:3b:e4: 8b:e8:c9:d5:e9:6f:81:6a:0f:51:1f:cc:e2:ee:f0: e7:66:ba:f0:c9:aa:1a:28:7a:07:f9:2c:7c:88:54: 99:a1:45:13:c1:17:35:5f:52:cf:54:23:31:da:5f: 69:8a:4b:d5:af:57:e0:87:ff:fb:4f:07:79:f7:16: 0e:4d:db:72:52:eb:6a:50:ec:a1:79:c7:db:8e:5b: 33:2b:54:13:61:86:06:38:89:8c:96:5b:7f:96:4a: 28:d9:a3:11:30:3b:ea:97:c1:47:33:d0:4d:7c:3a: 4e:98:54:3d:bb:a1:e2:23:9e:2e:c8:a5:98:ad:cd: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:66:E0:E6:04:50:BE:68:FE:67:1E:ED:4D:0A:83:39:5F:02:A1:3C X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:db:20:6c:2e:f5:d3:7b:ed:8f:a5:73:a7:a9:35:9e:c2: 3c:26:e4:f1:0e:d5:8a:47:9c:7d:0a:3d:ce:91:35:ba:f7:13: af:96:cc:e1:72:18:2f:71:c3:ea:c1:67:5d:29:d0:46:a2:d3: eb:0c:33:69:a4:47:fa:9d:83:e1:e0:17:27:74:ae:e4:dd:37: 11:8c:07:29:b4:9e:72:f3:ed:07:36:f2:c3:39:ee:d6:f1:6d: 31:0d:f6:00:7c:ec:8c:35:4e:d5:80:0a:10:34:87:2e:5b:41: b4:9d:94:50:d6:1a:5b:60:74:ef:4a:46:bd:9e:8f:c9:5c:bc: 56:72:e2:a3:8f:ea:50:d1:c4:76:24:31:dd:79:5a:de:c1:8e: 6b:2d:e1:61:49:7f:79:75:ec:7b:4c:8f:42:91:14:f9:5c:18: 67:41:45:a3:7e:dd:7f:ff:59:3a:71:39:ef:ad:a8:12:6f:f1: 39:c4:6f:d5:bc:f5:c8:f3:87:c5:a8:e3:7b:8f:01:19:1a:51: 7c:fe:3d:01:d7:79:9d:ef:26:81:8d:d1:94:dc:65:b8:55:bc: 70:cc:c4:9d:5f:51:b6:2f:3a:ed:4e:a8:e1:9b:22:d7:0a:a4: 20:21:15:a3:fe:2f:5c:50:26:f3:33:0e:58:54:29:d8:ef:11: dd:4f:a9:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwNTIwMTUzNjMxWhcNMjYwNTI3MTUzNjMxWjAYMRYwFAYD VQQDEw02YTBkZDUwMC02Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LFBz5LAZRDfhAmbD3Q3rGgP0/ttDuiVskEEEdtuT55aFqkkqGBajbe5VglP jB3VbAOcl4+f+zmyf3ofUAN1oR3UREZlmlyxgW6bhlRloBYi+iMHWQZ/GnSU6f0k 28kG+T3G3M9oCQ1cP52F/j5/ekML3zDHv1Z9mKIQrnk2kWgavSmTO+SL6MnV6W+B ag9RH8zi7vDnZrrwyaoaKHoH+Sx8iFSZoUUTwRc1X1LPVCMx2l9pikvVr1fgh//7 Twd59xYOTdtyUutqUOyhecfbjlszK1QTYYYGOImMllt/lkoo2aMRMDvql8FHM9BN fDpOmFQ9u6HiI54uyKWYrc0llQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5m4OYE UL5o/mce7U0KgzlfAqE8MB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPlPbIGwu9dN77Y+lc6epNZ7CPCbk8Q7VikecfQo9zpE1uvcTr5bM4XIYL3HD 6sFnXSnQRqLT6wwzaaRH+p2D4eAXJ3Su5N03EYwHKbSecvPtBzbywznu1vFtMQ32 AHzsjDVO1YAKEDSHLltBtJ2UUNYaW2B070pGvZ6PyVy8VnLio4/qUNHEdiQx3Xla 3sGOay3hYUl/eXXse0yPQpEU+VwYZ0FFo37df/9ZOnE5762oEm/xOcRv1bz1yPOH xajje48BGRpRfP49Add5ne8mgY3RlNxluFW8cMzEnV9Rti867U6o4Zsi1wqkICEV o/4vXFAm8zMOWFQp2O8R3U+pOA== -----END CERTIFICATE-----Generated at Thu May 21 10:15:55 2026 by rpki-client