$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: F1cenqkm8G8aVwtwf+AFnDTOo3ydXmsmp1gkSTj5z4k= Subject key identifier: 77:56:93:39:16:A9:02:B9:57:98:0F:81:C9:15:EC:E8:13:4B:48:8F Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 0217 Signing time: Mon 01 Jun 2026 03:43:42 +0000 Manifest this update: Mon 01 Jun 2026 03:43:41 +0000 Manifest next update: Mon 08 Jun 2026 03:43:41 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: aPNeVvoAgSGEg1n6r7lA2Npo3SCuSS5GAZGr4m0Lfxo=) 2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Jun 1 03:43:41 2026 GMT Not After : Jun 8 03:43:41 2026 GMT Subject: CN=6a1cffed-45ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:61:92:c3:a6:46:bc:70:86:97:c6:17:dd: f2:87:b1:8f:5e:e6:1a:59:72:be:ba:b4:74:67:2d: c2:7f:72:d6:9a:b2:79:06:65:e2:4b:6f:9e:37:06: 88:ab:ad:1c:91:81:44:77:9e:02:26:45:87:97:ec: 94:b8:e6:45:36:c8:fd:80:f5:9e:d8:31:b6:cf:e4: 92:00:fd:3a:14:55:38:f0:1d:f2:c4:43:93:7a:ba: e4:34:c6:ed:a1:f6:40:58:10:1f:80:e7:e7:c1:fe: f9:d0:19:8a:cf:08:23:63:1b:ba:e5:61:5c:0f:54: 54:83:8e:69:a3:9a:23:14:5b:72:ed:0e:db:0f:a6: 9b:4e:16:7a:60:ee:c4:79:a6:30:ee:f6:51:c1:e1: 00:fc:d4:ab:3c:60:05:d1:9a:3d:be:2f:94:07:6e: 8f:8d:2b:91:64:76:ae:ee:ec:6f:c9:de:fe:ee:9f: 6f:af:50:d9:f8:a9:fa:b2:bc:41:4d:8f:96:70:c2: 52:48:5c:c7:a4:83:9d:b6:e9:bd:ff:ad:55:21:16: f6:37:1b:e1:ef:50:c1:b2:5b:d4:c4:c6:48:47:60: 76:e7:99:32:60:11:de:2f:83:8b:be:98:9c:1a:39: 97:65:94:95:98:9b:3c:ca:d7:53:01:e7:ee:73:bb: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:56:93:39:16:A9:02:B9:57:98:0F:81:C9:15:EC:E8:13:4B:48:8F X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:b7:c5:c6:a1:a8:2d:b6:d8:c4:38:db:08:0c:51:9a:2c: 2b:fe:d3:a0:70:0d:9e:33:d2:1a:d3:ca:a7:64:31:a9:80:62: c1:87:85:42:bd:15:c7:41:5a:02:0b:b3:d9:48:55:61:3b:bc: bc:61:5d:9e:6b:2e:d7:ab:b8:dd:84:99:96:e5:c9:53:61:7a: c9:be:40:7e:47:3f:f3:d3:98:9c:5c:f2:7e:71:2c:af:07:19: 91:cb:67:6e:a7:42:82:a9:11:bc:b0:3a:49:ab:de:0d:1e:cb: 53:04:85:c7:94:b6:d5:a6:f6:0f:b7:d2:63:47:a7:4c:bb:49: dd:29:24:13:6e:5f:34:09:11:50:9c:fb:f4:0e:99:8f:4c:11: a5:a3:e9:20:1c:d1:69:c8:d9:53:9d:a1:b6:bf:4c:30:0c:2e: 77:a0:14:76:a1:25:2e:e3:58:c5:7a:10:f1:81:c7:b9:b8:d0: 3f:f3:00:cc:91:be:1f:9f:8b:bf:1e:c3:81:9d:db:64:13:b2: df:21:35:ca:97:7f:5b:cc:53:1f:59:47:b4:47:21:9f:77:1c: 4a:e5:6a:54:40:53:c7:55:de:a6:74:9a:00:80:ea:0f:42:1b: 5f:03:bf:ef:07:05:de:4e:f8:46:13:fa:e6:43:f4:63:e6:75: d3:08:ba:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjYwNjAxMDM0MzQxWhcNMjYwNjA4MDM0MzQxWjAYMRYwFAYD VQQDEw02YTFjZmZlZC00NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8NhksOmRrxwhpfGF93yh7GPXuYaWXK+urR0Zy3Cf3LWmrJ5BmXiS2+eNwaI q60ckYFEd54CJkWHl+yUuOZFNsj9gPWe2DG2z+SSAP06FFU48B3yxEOTerrkNMbt ofZAWBAfgOfnwf750BmKzwgjYxu65WFcD1RUg45po5ojFFty7Q7bD6abThZ6YO7E eaYw7vZRweEA/NSrPGAF0Zo9vi+UB26PjSuRZHau7uxvyd7+7p9vr1DZ+Kn6srxB TY+WcMJSSFzHpIOdtum9/61VIRb2Nxvh71DBslvUxMZIR2B255kyYBHeL4OLvpic GjmXZZSVmJs8ytdTAefuc7s+5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdWkzkW qQK5V5gPgckV7OgTS0iPMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXq3xcahqC222MQ42wgMUZosK/7ToHANnjPSGtPKp2QxqYBiwYeFQr0Vx0Fa Aguz2UhVYTu8vGFdnmsu16u43YSZluXJU2F6yb5Afkc/89OYnFzyfnEsrwcZkctn bqdCgqkRvLA6SaveDR7LUwSFx5S21ab2D7fSY0enTLtJ3SkkE25fNAkRUJz79A6Z j0wRpaPpIBzRacjZU52htr9MMAwud6AUdqElLuNYxXoQ8YHHubjQP/MAzJG+H5+L vx7DgZ3bZBOy3yE1ypd/W8xTH1lHtEchn3ccSuVqVEBTx1XepnSaAIDqD0IbXwO/ 7wcF3k74RhP65kP0Y+Z10wi6Nw== -----END CERTIFICATE-----Generated at Tue Jun 2 22:16:28 2026 by rpki-client