$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: rd5GSQRSC9TlTyvFdD9ECOT9id8Wz1WT+D3gn33//Jg= Subject key identifier: 9B:D4:DB:D2:6C:9F:32:59:82:AE:96:AE:4D:A6:75:1A:35:C1:8D:48 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 157E Signing time: Wed 20 May 2026 18:17:26 +0000 Manifest this update: Wed 20 May 2026 18:17:25 +0000 Manifest next update: Wed 27 May 2026 18:17:25 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: V6XLNvPp8nrQ4zfoXsQQg2yQFpVob3gu+GSj872bfOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: May 20 18:17:25 2026 GMT Not After : May 27 18:17:25 2026 GMT Subject: CN=6a0dfab6-0cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:33:7b:cf:97:cf:d7:de:3a:88:19:bb:4b: 8d:7d:19:42:d7:e4:ec:a0:b5:b5:c5:1d:c5:88:1b: 19:e2:33:fd:68:e6:3f:40:98:2a:4e:62:ee:c1:ba: 0a:30:4e:4d:83:d6:3e:4f:5f:ed:cc:28:b4:9d:67: 6c:ed:17:d5:90:7c:1d:4c:19:f7:ee:a2:5e:6e:44: e0:1d:6e:0c:b8:5e:1a:05:c5:06:e1:97:38:ff:ac: 8e:b7:8e:c2:26:aa:79:23:fc:3c:7f:19:bb:04:d8: a0:16:4d:1e:94:38:a0:d2:8c:f6:03:9c:b9:56:99: f3:95:9e:50:18:f2:97:96:6f:77:8c:d6:b2:df:9d: a8:2c:a8:f5:af:d4:3d:43:49:d3:f5:24:b1:da:b9: 3c:8f:73:a8:20:47:bf:11:b6:2d:e2:2e:6e:a4:c8: 08:62:92:27:55:67:0f:dd:2c:47:3b:df:b0:12:a1: 9e:cd:2c:d6:2e:fa:b2:58:42:73:ef:7c:3b:69:1c: 07:73:c9:52:4b:36:03:3b:c8:04:6e:b9:e3:2f:53: 6f:80:d9:24:ae:4e:8b:ba:d0:5c:d2:c0:98:79:f0: 6e:22:15:b9:eb:fd:da:2d:e4:05:de:14:c1:b5:c1: ba:1b:1a:96:63:82:c1:8e:94:60:68:ad:56:56:bb: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D4:DB:D2:6C:9F:32:59:82:AE:96:AE:4D:A6:75:1A:35:C1:8D:48 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0e:e1:0c:5c:c1:d7:ff:ee:03:37:06:5a:34:a3:cd:b8:68: c7:94:3c:eb:80:5f:a6:43:13:3c:31:11:f6:0b:fd:39:ac:85: a8:7c:de:26:ed:5d:ff:ef:2e:79:89:f3:7f:d8:58:54:b6:e3: ea:1d:f7:6c:ff:b4:84:e9:01:4e:8a:21:5f:d2:4c:d9:fc:f3: 26:cc:f1:ab:6b:06:60:27:3c:a9:cd:5a:37:19:2e:c0:e6:c1: 31:e1:cf:1b:07:41:41:8a:a8:c8:f5:8a:57:e4:88:49:ac:7e: ba:88:76:96:0e:43:0b:73:f9:26:ec:9d:62:30:61:97:1d:23: 71:68:2c:98:0c:f0:91:37:58:9c:b5:34:67:0d:1f:a8:1b:04: 0c:7f:ac:32:8c:f6:7c:96:76:2f:15:fc:c1:a6:6e:78:76:5e: 78:4a:05:e6:9c:11:a0:cb:4d:20:c3:15:5f:58:ca:1e:1b:4c: 5d:ad:94:9e:88:4d:ef:6a:82:f8:ad:ac:05:db:a0:17:fd:c7: fb:ce:04:b9:86:42:4b:6d:de:69:12:98:2d:59:70:e4:2c:42: 45:8c:0d:fa:5e:3d:f2:12:0e:0a:0b:51:00:93:55:74:f0:65: 79:ce:d1:4f:46:eb:8f:05:d3:2a:73:f5:bb:56:c2:c9:15:d9: d2:14:b0:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjYwNTIwMTgxNzI1WhcNMjYwNTI3MTgxNzI1WjAYMRYwFAYD VQQDEw02YTBkZmFiNi0wY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfwze8+Xz9feOogZu0uNfRlC1+TsoLW1xR3FiBsZ4jP9aOY/QJgqTmLuwboK ME5Ng9Y+T1/tzCi0nWds7RfVkHwdTBn37qJebkTgHW4MuF4aBcUG4Zc4/6yOt47C Jqp5I/w8fxm7BNigFk0elDig0oz2A5y5VpnzlZ5QGPKXlm93jNay352oLKj1r9Q9 Q0nT9SSx2rk8j3OoIEe/EbYt4i5upMgIYpInVWcP3SxHO9+wEqGezSzWLvqyWEJz 73w7aRwHc8lSSzYDO8gEbrnjL1NvgNkkrk6LutBc0sCYefBuIhW56/3aLeQF3hTB tcG6GxqWY4LBjpRgaK1WVrsDyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvU29Js nzJZgq6Wrk2mdRo1wY1IMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeQ7hDFzB1//uAzcGWjSjzbhox5Q864BfpkMTPDER9gv9OayFqHzeJu1d/+8u eYnzf9hYVLbj6h33bP+0hOkBToohX9JM2fzzJszxq2sGYCc8qc1aNxkuwObBMeHP GwdBQYqoyPWKV+SISax+uoh2lg5DC3P5JuydYjBhlx0jcWgsmAzwkTdYnLU0Zw0f qBsEDH+sMoz2fJZ2LxX8waZueHZeeEoF5pwRoMtNIMMVX1jKHhtMXa2UnohN72qC +K2sBdugF/3H+84EuYZCS23eaRKYLVlw5CxCRYwN+l498hIOCgtRAJNVdPBlec7R T0brjwXTKnP1u1bCyRXZ0hSwSQ== -----END CERTIFICATE-----Generated at Thu May 21 09:30:24 2026 by rpki-client