$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: C2xQXoo2PT2fPG4AWHVh5Ts/OcaBU5mP/VRqvM9gHCU= Subject key identifier: E2:3A:18:6F:B7:AA:11:5B:B0:4B:9C:BD:B8:A5:4F:9B:D8:52:69:CC Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 35EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 35B3 Signing time: Fri 04 Sep 2026 14:37:06 +0000 Manifest this update: Fri 04 Sep 2026 14:37:06 +0000 Manifest next update: Fri 11 Sep 2026 14:37:06 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: LAbrBabvC8FAESNaEAbL8/uNJEcjAL/E0yOSB0mbzJo=) 2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: f1IGNhieFlad+lglHYXuxHBK/1cZW7IPzK8JCgEL25o=) 3: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: PuiDctOuJlf4lt6A2dYZ1tgkERX2Xujv7L8tOvTc9eM=) 4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: vtwMWBWJtSed875G1+wbpC+RKkrgpx2zfwNszIXKaRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13807 (0x35ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Sep 4 14:37:06 2026 GMT Not After : Sep 11 14:37:06 2026 GMT Subject: CN=6a9ad792-c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:76:71:7c:8a:04:d9:ea:14:77:c5:dd:5d: 12:bc:0c:72:59:39:8f:73:19:57:83:86:e0:fd:55: 2f:b9:cd:cd:77:97:6f:c7:b4:b7:74:ec:17:e6:59: b2:85:89:f6:76:f6:42:a7:15:90:c3:3a:59:f2:d6: 03:a5:df:12:e0:b4:bc:d4:15:8e:6c:89:77:7f:fc: 73:05:19:6e:ff:8b:13:d7:94:c7:41:eb:e2:5c:43: e0:ce:85:ce:86:fb:28:89:cf:1d:91:10:79:47:37: 8a:f9:7e:5a:a2:c9:92:58:73:65:27:8d:5a:c6:3a: 13:04:83:fe:32:ab:94:06:51:10:54:19:67:a2:74: 4e:2d:e2:67:8c:57:c9:3d:62:05:6f:e4:2d:98:61: c4:fe:1e:25:f1:1d:78:a8:92:ee:d1:58:1e:04:2b: 73:83:52:7d:52:9d:79:87:cb:e2:c9:6b:3f:ab:cb: db:43:c8:10:c9:38:79:6b:08:47:27:8a:8f:e3:58: 44:de:34:58:3a:b5:48:2a:b3:62:15:d8:f7:ef:2a: bf:54:eb:81:d4:90:88:b4:7e:a1:ae:d8:f7:e0:bf: 4a:ca:66:90:cf:36:99:ca:66:c0:84:3d:e7:a3:20: 20:47:21:7a:5f:92:2d:ff:1f:c0:16:cf:9c:ee:a8: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3A:18:6F:B7:AA:11:5B:B0:4B:9C:BD:B8:A5:4F:9B:D8:52:69:CC X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:98:26:20:9f:15:77:d3:33:7b:11:64:37:72:6c:f8:77: 9d:55:53:a4:29:c9:9a:77:48:15:97:da:0d:15:5c:34:5c:e4: f0:d7:63:43:96:93:b9:31:e3:4b:db:20:62:18:73:a0:24:e9: 22:4f:14:aa:91:d0:b2:a9:2b:ce:3b:d9:af:e4:ee:37:23:99: 5d:58:48:39:76:a9:b8:05:c8:32:be:5a:15:f5:b2:cc:dc:51: d0:18:98:79:d8:9a:63:85:c8:f4:82:9a:a1:6c:ab:4b:23:09: d6:14:fb:0f:9c:93:05:69:89:6a:00:1f:b4:19:38:41:2c:d3: 1f:8c:1f:2f:4c:b0:6e:fb:08:4a:c4:22:e6:04:cc:c3:3e:85: 28:05:5c:70:d4:ef:e3:a8:5e:b6:df:e7:d5:51:43:99:17:cb: 79:de:64:34:d9:98:f0:fb:54:c1:0b:fc:56:67:f8:c5:de:f1: bd:87:85:e9:29:80:97:92:08:34:16:a4:f8:37:48:f9:32:99: 2c:74:9f:3c:2a:be:e4:f8:c2:af:de:da:0e:2e:dc:f3:09:41: 79:69:ad:b8:22:11:03:89:93:a4:39:de:ad:ac:2f:ef:c2:ce: 6e:54:de:fc:69:e6:d3:a9:d9:00:ad:ef:56:60:42:e2:97:99: cf:17:87:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwOTA0MTQzNzA2WhcNMjYwOTExMTQzNzA2WjAYMRYwFAYD VQQDEw02YTlhZDc5Mi1jNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBB2cXyKBNnqFHfF3V0SvAxyWTmPcxlXg4bg/VUvuc3Nd5dvx7S3dOwX5lmy hYn2dvZCpxWQwzpZ8tYDpd8S4LS81BWObIl3f/xzBRlu/4sT15THQeviXEPgzoXO hvsoic8dkRB5RzeK+X5aosmSWHNlJ41axjoTBIP+MquUBlEQVBlnonROLeJnjFfJ PWIFb+QtmGHE/h4l8R14qJLu0VgeBCtzg1J9Up15h8viyWs/q8vbQ8gQyTh5awhH J4qP41hE3jRYOrVIKrNiFdj37yq/VOuB1JCItH6hrtj34L9KymaQzzaZymbAhD3n oyAgRyF6X5It/x/AFs+c7qhTywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOI6GG+3 qhFbsEucvbilT5vYUmnMMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA2SYJiCfFXfTM3sRZDdybPh3nVVTpCnJmndIFZfaDRVcNFzk8NdjQ5aTuTHj S9sgYhhzoCTpIk8UqpHQsqkrzjvZr+TuNyOZXVhIOXapuAXIMr5aFfWyzNxR0BiY ediaY4XI9IKaoWyrSyMJ1hT7D5yTBWmJagAftBk4QSzTH4wfL0ywbvsISsQi5gTM wz6FKAVccNTv46hett/n1VFDmRfLed5kNNmY8PtUwQv8Vmf4xd7xvYeF6SmAl5II NBak+DdI+TKZLHSfPCq+5PjCr97aDi7c8wlBeWmtuCIRA4mTpDnerawv78LOblTe /Gnm06nZAK3vVmBC4peZzxeHuA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:45:56 2026 by rpki-client