$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: rv4d6EBimQVRV4h+5Yzy5rSmEMYS/mJO8WXMw5CSmpc= Subject key identifier: 9C:C1:C7:0F:8C:7F:F6:C2:14:FF:E8:AB:41:93:E9:27:A8:49:F7:74 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1425 Signing time: Tue 18 Aug 2026 17:04:43 +0000 Manifest this update: Tue 18 Aug 2026 17:04:42 +0000 Manifest next update: Tue 25 Aug 2026 17:04:42 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: dSfK3uzv3H0fI7dJG7vdhxjVOoSG2TVPQvVlpWXgGzQ=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: vzjzm42ih0JuLqajby6+Lr3dFdD3i/kb+bMCNKPWSA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5168 (0x1430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Aug 18 17:04:42 2026 GMT Not After : Aug 25 17:04:42 2026 GMT Subject: CN=6a8490ab-e463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:a9:01:77:8a:fd:e8:cc:3c:c2:9a:d5:ef: 39:6f:ea:38:32:72:fe:76:34:3e:2c:18:58:41:72: 31:0b:e4:11:27:a8:37:61:f1:de:5a:39:2f:03:95: 7c:20:73:d5:da:78:35:3c:e2:a5:90:b1:95:f7:00: 1b:f7:6b:b0:ec:61:b9:e9:00:9c:07:d4:8c:db:88: 22:ac:3f:06:f0:6e:cf:de:2e:fc:d1:4e:ff:5c:24: 76:ae:93:0b:e1:78:5e:ab:23:0d:d6:be:e2:e4:c8: b1:a4:01:02:3d:a7:30:c5:d4:d8:ca:67:3f:47:7c: 64:da:45:15:6d:39:f1:e4:95:29:be:be:0b:43:9e: 68:ca:7c:12:28:72:10:f9:95:d7:76:a7:52:d2:11: 0c:d7:23:10:15:ac:d0:9e:82:2e:3d:80:04:22:24: 64:9d:a5:7f:8f:cc:57:cf:01:dc:f6:4a:28:3c:f4: 0e:d6:1c:63:d2:30:f1:b8:21:a8:93:b8:86:ac:aa: 07:7d:4e:6f:a8:a6:fd:eb:6a:8b:15:49:86:7a:84: 09:97:95:7e:a8:61:47:8b:57:e9:94:84:c5:33:12: ee:a2:92:02:12:99:90:bf:bc:fa:5c:9b:c5:6d:3e: 1e:17:03:76:64:fd:ac:da:86:18:46:65:29:20:48: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:C7:0F:8C:7F:F6:C2:14:FF:E8:AB:41:93:E9:27:A8:49:F7:74 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:13:2b:bd:c5:e2:03:43:a0:3b:8b:5b:2c:99:9a:cf:e6:86: 11:aa:1f:9b:ac:c5:30:fb:81:71:55:56:ff:d4:83:e9:19:48: c3:2c:65:1f:ed:05:dd:51:45:b9:bd:9b:73:31:c3:44:1f:fe: 3a:a7:75:bd:f7:94:0c:7e:02:bf:fb:6a:04:2e:a7:5b:58:d1: 60:51:97:f3:e2:a4:b0:9a:07:ae:56:cc:d0:39:b6:39:02:2a: 83:b0:14:c6:0b:25:7a:d3:f2:d3:1e:30:59:70:08:da:01:12: ee:fd:82:4b:01:22:a8:20:ab:b4:23:d6:ea:85:61:76:41:c1: 23:2e:2e:d0:1b:84:50:02:19:49:79:7b:de:11:d1:1b:8c:7f: 1c:b4:8e:2e:e8:60:04:e0:47:a6:1b:46:77:65:07:b1:3e:89: 68:2b:51:ae:e5:a7:ef:26:34:09:93:df:63:06:e5:bb:1f:3f: 53:3f:02:73:3e:fc:3a:8a:70:7e:b4:7f:50:90:97:a8:bc:cc: 18:92:d3:39:ee:8e:47:a5:17:44:35:48:37:8d:dc:ad:3f:40: 46:41:9b:77:1e:ad:00:ef:9c:48:4c:df:8f:43:97:7a:e4:2d: 17:ee:46:7a:0c:b1:fd:28:0b:be:c5:73:36:e5:65:fe:80:9a: ab:ba:56:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwODE4MTcwNDQyWhcNMjYwODI1MTcwNDQyWjAYMRYwFAYD VQQDEw02YTg0OTBhYi1lNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN6pAXeK/ejMPMKa1e85b+o4MnL+djQ+LBhYQXIxC+QRJ6g3YfHeWjkvA5V8 IHPV2ng1POKlkLGV9wAb92uw7GG56QCcB9SM24girD8G8G7P3i780U7/XCR2rpML 4XheqyMN1r7i5MixpAECPacwxdTYymc/R3xk2kUVbTnx5JUpvr4LQ55oynwSKHIQ +ZXXdqdS0hEM1yMQFazQnoIuPYAEIiRknaV/j8xXzwHc9kooPPQO1hxj0jDxuCGo k7iGrKoHfU5vqKb962qLFUmGeoQJl5V+qGFHi1fplITFMxLuopICEpmQv7z6XJvF bT4eFwN2ZP2s2oYYRmUpIEgC0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzBxw+M f/bCFP/oq0GT6SeoSfd0MB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABBMrvcXiA0OgO4tbLJmaz+aGEaofm6zFMPuBcVVW/9SD6RlIwyxlH+0F3VFF ub2bczHDRB/+Oqd1vfeUDH4Cv/tqBC6nW1jRYFGX8+KksJoHrlbM0Dm2OQIqg7AU xgsletPy0x4wWXAI2gES7v2CSwEiqCCrtCPW6oVhdkHBIy4u0BuEUAIZSXl73hHR G4x/HLSOLuhgBOBHphtGd2UHsT6JaCtRruWn7yY0CZPfYwblux8/Uz8Ccz78Oopw frR/UJCXqLzMGJLTOe6OR6UXRDVIN43crT9ARkGbdx6tAO+cSEzfj0OXeuQtF+5G egyx/SgLvsVzNuVl/oCaq7pWmQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:21 2026 by rpki-client