$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: QYWyl/Gw64VTaKqu7cbrTVduDsumDkSbxMxXFpifjto= Subject key identifier: 3E:33:B4:4B:B1:B2:F5:E3:60:69:A5:9C:F2:86:4A:F3:A4:B5:46:A6 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 02B3 Signing time: Mon 13 Jul 2026 02:23:33 +0000 Manifest this update: Mon 13 Jul 2026 02:23:33 +0000 Manifest next update: Mon 20 Jul 2026 02:23:33 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: V1yVoy379crJ7Draf8s5QcKS6kCFobSHTdwjEr/8ZSE=) 2: 232F9552F80D11F0AED4E007706F56BC.roa (hash: eD9gDioCM5S2wQWIRX8fMwbM0baYsT5u8C/4wCogM+E=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: TsRQV86ABpakyFtq/EQ6oWMagaNXmmZwXudJvyvhgkQ=) 4: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: fZlLSWyhk+jtQ34uhpkIw+sRdlD+d7ZiPx48gzF1SuI=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=) 6: 23852F72273711F1B6AB5B98AD833773.roa (hash: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 02:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Jul 13 02:23:33 2026 GMT Not After : Jul 20 02:23:33 2026 GMT Subject: CN=6a544c25-f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:09:df:2c:5f:82:61:de:83:fc:34:b3:0b: a8:a4:57:ee:da:f8:a1:85:6a:99:da:05:73:96:cf: ef:3e:2a:68:b0:9e:fb:4a:b1:c0:8a:ce:22:65:7f: b9:0b:69:d2:db:ea:c2:02:6d:c5:bc:75:42:60:8a: 6a:d9:fe:5a:93:ed:ff:6f:89:cc:7d:cc:6a:6d:84: 09:2b:a1:ae:d6:a4:83:8e:77:9e:20:8c:80:7a:a2: fa:a5:0c:3d:a9:43:69:91:c2:70:79:e0:9c:1a:a0: d5:f2:2f:17:2f:94:85:67:95:5d:f5:bb:cd:cd:e2: d8:2e:ef:60:92:5e:3e:6d:4d:73:2d:e9:b6:5f:0f: 9d:33:4d:f9:66:3f:3c:9f:8a:1f:44:33:3c:46:fb: 07:b6:5a:6b:92:5b:ef:2b:dc:92:32:5e:58:9c:59: 9d:9b:7d:cf:11:b6:32:d4:47:11:74:ee:83:96:b3: 75:cb:0c:08:b2:ce:20:87:f7:db:0c:ad:3a:c0:1d: 38:b6:74:50:8c:5a:4f:99:75:be:3b:ca:0e:68:1f: da:73:82:6a:64:7d:2d:60:7f:06:82:96:b6:20:50: b7:10:dd:c0:c3:1f:69:60:81:2a:2e:99:20:c9:d5: 41:a2:96:9e:3d:82:f0:25:c4:01:dd:e1:a3:04:c9: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:B4:4B:B1:B2:F5:E3:60:69:A5:9C:F2:86:4A:F3:A4:B5:46:A6 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:14:9c:fb:06:1a:04:92:2c:b4:f2:5e:75:1b:c1:9a:e2:0d: 8b:8f:18:3b:26:c4:3f:64:18:d5:21:b7:5f:be:a1:0d:f8:bc: ec:60:0d:eb:d4:27:ca:67:36:fc:a3:dc:3e:93:ea:22:01:86: 90:8d:ea:9c:eb:68:a5:71:ef:64:26:40:b6:c6:51:d1:22:98: 32:5a:2c:f9:32:9d:bb:4a:fa:9f:b8:4a:2b:f4:26:d4:f6:5b: b1:55:d8:ac:97:c1:05:b7:79:3d:7b:ca:3f:99:5b:46:0b:5c: c0:69:b7:e0:90:76:e3:95:45:5f:3b:c3:0b:a1:b3:47:3a:ce: bd:8d:0c:44:f2:a6:d0:e4:f9:23:09:4b:68:2b:34:e8:99:af: 5c:22:79:87:f0:b2:fc:89:f5:11:95:1a:ba:5f:09:50:a4:3a: 95:2a:ef:0e:c0:32:17:b2:18:7a:63:11:57:a2:52:72:11:23: 0b:a2:7f:0e:97:69:1c:d4:d7:8a:83:c1:e4:5c:9c:21:7f:75: 90:39:0b:8f:5c:a8:1d:83:77:65:61:c8:55:a7:08:cf:ff:d3: d7:d3:50:86:b6:31:b2:a3:63:ac:f9:1e:d2:2b:fe:d9:1f:74: 2c:e1:63:7a:36:01:b7:26:cc:c0:1f:83:73:f8:72:31:42:8b: b2:ca:04:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNzEzMDIyMzMzWhcNMjYwNzIwMDIyMzMzWjAYMRYwFAYD VQQDEw02YTU0NGMyNS1mMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrUJ3yxfgmHeg/w0swuopFfu2vihhWqZ2gVzls/vPiposJ77SrHAis4iZX+5 C2nS2+rCAm3FvHVCYIpq2f5ak+3/b4nMfcxqbYQJK6Gu1qSDjneeIIyAeqL6pQw9 qUNpkcJweeCcGqDV8i8XL5SFZ5Vd9bvNzeLYLu9gkl4+bU1zLem2Xw+dM035Zj88 n4ofRDM8RvsHtlprklvvK9ySMl5YnFmdm33PEbYy1EcRdO6DlrN1ywwIss4gh/fb DK06wB04tnRQjFpPmXW+O8oOaB/ac4JqZH0tYH8Ggpa2IFC3EN3Awx9pYIEqLpkg ydVBopaePYLwJcQB3eGjBMnSDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4ztEux svXjYGmlnPKGSvOktUamMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBSc+wYaBJIstPJedRvBmuINi48YOybEP2QY1SG3X76hDfi87GAN69Qnymc2 /KPcPpPqIgGGkI3qnOtopXHvZCZAtsZR0SKYMlos+TKdu0r6n7hKK/Qm1PZbsVXY rJfBBbd5PXvKP5lbRgtcwGm34JB245VFXzvDC6GzRzrOvY0MRPKm0OT5IwlLaCs0 6JmvXCJ5h/Cy/In1EZUaul8JUKQ6lSrvDsAyF7IYemMRV6JSchEjC6J/DpdpHNTX ioPB5FycIX91kDkLj1yoHYN3ZWHIVacIz//T19NQhrYxsqNjrPke0iv+2R90LOFj ejYBtybMwB+Dc/hyMUKLssoEBA== -----END CERTIFICATE-----Generated at Mon Jul 13 09:37:47 2026 by rpki-client