$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: S6yUSw/Fh3f5ef2rytGBLj29NiJYhd/fe8G/MtVgBv0= Subject key identifier: E9:52:52:05:3F:24:15:B6:9E:55:2F:66:B0:C1:CD:D4:04:0E:13:A7 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0CF7 Signing time: Wed 20 May 2026 18:16:20 +0000 Manifest this update: Wed 20 May 2026 18:16:20 +0000 Manifest next update: Wed 27 May 2026 18:16:20 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: P7Yy6FOy/kRxtLz/VCGiiuJNmkezbIdjwqrmlHV2SPE=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: May 20 18:16:20 2026 GMT Not After : May 27 18:16:20 2026 GMT Subject: CN=6a0dfa74-c634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:1e:73:81:3a:45:e8:41:78:06:51:cb:6a: 7e:04:de:62:76:52:3b:9a:b1:48:d3:53:22:3f:52: ac:4e:82:fc:2e:4a:80:95:2d:9b:0e:fa:8a:af:5b: 2e:89:ad:0e:fa:9b:b3:b9:61:38:1a:2a:1c:ea:f7: 0e:e5:75:ff:9f:99:72:02:34:30:28:0a:9e:55:0a: 42:01:c3:d5:ef:8a:45:e8:70:4e:b8:54:d7:09:82: a9:6d:23:72:61:d7:99:de:01:b4:41:c4:97:26:fc: bd:6e:ee:7f:46:d3:2b:b8:2c:c8:a1:6c:b9:9c:06: 2e:e7:06:e8:20:f7:d6:a7:8e:b7:0e:c9:02:91:84: a5:b1:80:93:ca:c3:8d:24:e5:f9:53:d7:58:b3:df: 2d:d2:a5:7f:e4:c7:ab:5b:7a:b2:ab:b5:80:a3:83: f4:49:5d:a0:f7:32:ea:ca:fb:6e:2c:14:c4:ad:59: ad:ac:80:c2:a1:23:ae:7f:1c:cb:a9:78:9e:2a:fe: 86:4b:44:86:c9:c5:b6:95:7e:b0:bb:d2:e3:1d:60: ae:84:37:3b:13:59:2d:5d:b4:74:6d:31:12:ad:e0: c1:5f:c0:16:ab:88:6a:45:bb:24:c0:79:c8:b7:90: 22:82:a1:2f:22:08:ce:8e:58:3b:3d:7a:92:49:d4: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:52:52:05:3F:24:15:B6:9E:55:2F:66:B0:C1:CD:D4:04:0E:13:A7 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:59:c8:b0:60:c4:48:cf:10:75:1d:2e:d0:9b:05:94:f9: db:f2:10:34:a7:62:22:24:b6:64:6a:a3:eb:10:c7:94:df:f5: 76:63:ad:20:ec:cf:60:00:31:dd:c4:42:27:3c:31:54:42:14: 9a:96:18:a4:ec:f0:e3:f8:c5:17:63:30:da:5a:ce:3c:86:fd: 65:c2:19:b4:ff:ae:67:66:c9:d7:de:63:4b:80:90:53:23:ac: 04:f0:e4:77:38:59:3f:22:c9:c1:33:64:b6:d1:eb:44:13:d3: 94:ea:d3:ca:97:6f:36:6c:0d:9a:07:0c:15:d4:e1:75:71:89: a5:09:1d:5e:a2:24:dd:47:20:2a:f9:ba:18:a8:47:bb:8c:45: f4:88:c4:f6:f3:23:b5:73:d6:b5:db:2d:d5:1a:15:02:4c:a6: 0f:91:66:7a:ea:f7:dd:de:3e:9d:4b:4b:f5:5c:d6:c8:59:a6: 61:78:a2:9f:fd:a5:fd:06:2c:ae:cd:98:54:13:5f:2c:a2:e2: 3a:7c:d7:6a:db:6c:c4:fa:93:a0:8f:a8:91:04:ce:cc:53:cc: 4b:f1:f0:07:97:d2:ce:dc:14:85:1f:de:ab:16:3c:59:4d:02: 81:83:bc:6f:84:96:43:6f:25:c0:3c:5e:42:aa:bb:32:14:28: df:2e:8c:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjYwNTIwMTgxNjIwWhcNMjYwNTI3MTgxNjIwWjAYMRYwFAYD VQQDEw02YTBkZmE3NC1jNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA150ec4E6RehBeAZRy2p+BN5idlI7mrFI01MiP1KsToL8LkqAlS2bDvqKr1su ia0O+puzuWE4Gioc6vcO5XX/n5lyAjQwKAqeVQpCAcPV74pF6HBOuFTXCYKpbSNy YdeZ3gG0QcSXJvy9bu5/RtMruCzIoWy5nAYu5wboIPfWp463DskCkYSlsYCTysON JOX5U9dYs98t0qV/5MerW3qyq7WAo4P0SV2g9zLqyvtuLBTErVmtrIDCoSOufxzL qXieKv6GS0SGycW2lX6wu9LjHWCuhDc7E1ktXbR0bTESreDBX8AWq4hqRbskwHnI t5AigqEvIgjOjlg7PXqSSdQSbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlSUgU/ JBW2nlUvZrDBzdQEDhOnMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqpZyLBgxEjPEHUdLtCbBZT52/IQNKdiIiS2ZGqj6xDHlN/1dmOtIOzPYAAx 3cRCJzwxVEIUmpYYpOzw4/jFF2Mw2lrOPIb9ZcIZtP+uZ2bJ195jS4CQUyOsBPDk dzhZPyLJwTNkttHrRBPTlOrTypdvNmwNmgcMFdThdXGJpQkdXqIk3UcgKvm6GKhH u4xF9IjE9vMjtXPWtdst1RoVAkymD5Fmeur33d4+nUtL9VzWyFmmYXiin/2l/QYs rs2YVBNfLKLiOnzXattsxPqToI+okQTOzFPMS/HwB5fSztwUhR/eqxY8WU0CgYO8 b4SWQ28lwDxeQqq7MhQo3y6MyA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:07 2026 by rpki-client