$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: my9drQdpMNf2vPp/W0BGc0HSMh96DPy/qN25q3tcBKs= Subject key identifier: 66:81:88:B1:C1:E7:71:7F:82:9A:1C:AF:70:D5:0F:38:BE:DF:50:E8 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 01C2 Signing time: Mon 01 Jun 2026 04:39:15 +0000 Manifest this update: Mon 01 Jun 2026 04:39:15 +0000 Manifest next update: Mon 08 Jun 2026 04:39:15 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: OJazznrTmeG9B08NG83Wtk/Z1Iz69a6MVZz2Kpm/brk=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: 4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 04:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Jun 1 04:39:15 2026 GMT Not After : Jun 8 04:39:15 2026 GMT Subject: CN=6a1d0cf3-3715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:a5:2e:96:05:d5:80:8b:12:05:28:f1:d4: 01:cb:d2:d6:4e:58:b4:0e:51:8c:a8:3d:49:d1:56: 2c:af:33:a3:9b:45:3d:65:50:9a:22:5b:e1:e4:e4: 83:c2:db:7a:e1:28:24:ab:f2:27:e8:a3:59:ca:98: 0a:30:5a:0c:98:0c:04:39:a4:42:44:c9:a0:35:ce: 1b:59:42:5c:7c:b1:35:62:99:87:9c:e5:cd:ed:de: 6e:b3:35:4c:e1:8d:df:a6:ee:d7:fb:ec:05:bc:2f: 35:1f:b3:b1:80:e8:6e:9c:65:17:e0:2a:2b:cd:08: 40:1f:15:bc:62:99:48:c1:b3:7a:d3:3a:1e:b9:e8: aa:d6:ca:74:27:d9:3d:1c:29:49:6b:ab:7f:cd:29: 74:93:52:84:b5:5d:91:e4:59:11:ce:0d:bf:9a:da: be:de:26:45:43:d6:4b:fc:31:88:be:c3:b3:98:59: 87:20:69:55:fb:fc:92:71:99:12:5d:ef:1f:68:e8: 03:f2:1e:e4:e2:b3:dc:47:58:55:fc:b7:35:b3:51: 3f:5e:63:ee:57:1a:3a:56:13:6a:fb:b6:5e:32:9e: e7:c8:c1:6e:4c:d9:a7:c5:a6:1f:c0:f7:f1:dc:35: 98:66:c3:d6:18:ad:ab:1d:77:04:68:f8:c0:f2:07: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:88:B1:C1:E7:71:7F:82:9A:1C:AF:70:D5:0F:38:BE:DF:50:E8 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d6:7a:76:9b:15:5e:4e:52:61:7f:bf:c2:b7:25:49:2f:9e: 2c:2f:8f:c2:8c:43:4d:ef:01:92:33:32:c3:9d:5c:98:de:58: 55:66:0b:73:aa:07:eb:be:6d:cd:41:8b:46:32:9b:df:37:2a: af:e8:7b:18:89:c8:27:d6:86:89:d5:f0:7d:ea:00:05:79:8c: 68:a1:84:77:10:8e:29:8a:24:b9:5e:cb:48:14:67:18:27:96: 4e:42:04:37:3e:7f:75:1e:03:9d:b5:7f:1e:58:a2:43:51:e2: f8:9b:18:f1:73:0c:4d:9b:e9:9d:bf:af:fb:da:be:47:5e:0f: 09:03:ca:55:61:d9:38:bc:20:db:6b:58:df:60:79:fc:f9:de: 76:cb:55:93:c2:c9:0e:25:44:39:24:5d:17:8f:bc:11:04:3d: 8e:6f:f2:af:71:74:80:9b:6e:ac:96:bb:d8:c6:75:a8:f1:e4: ee:0b:24:9b:06:95:0c:bb:48:d2:a8:fd:c2:fa:73:c7:29:da: ba:c2:4f:6b:74:7c:61:e9:6c:8a:d2:a3:d2:f2:00:f1:53:92: eb:71:2d:bf:5a:1c:02:b4:60:68:52:a4:ab:64:5d:47:3c:12: 80:85:fb:72:a7:c5:30:69:8e:d5:b9:f8:ad:37:d4:3c:f9:e9: b0:c5:9f:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjYwNjAxMDQzOTE1WhcNMjYwNjA4MDQzOTE1WjAYMRYwFAYD VQQDEw02YTFkMGNmMy0zNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmOlLpYF1YCLEgUo8dQBy9LWTli0DlGMqD1J0VYsrzOjm0U9ZVCaIlvh5OSD wtt64Sgkq/In6KNZypgKMFoMmAwEOaRCRMmgNc4bWUJcfLE1YpmHnOXN7d5uszVM 4Y3fpu7X++wFvC81H7OxgOhunGUX4CorzQhAHxW8YplIwbN60zoeueiq1sp0J9k9 HClJa6t/zSl0k1KEtV2R5FkRzg2/mtq+3iZFQ9ZL/DGIvsOzmFmHIGlV+/yScZkS Xe8faOgD8h7k4rPcR1hV/Lc1s1E/XmPuVxo6VhNq+7ZeMp7nyMFuTNmnxaYfwPfx 3DWYZsPWGK2rHXcEaPjA8gfZzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaBiLHB 53F/gpocr3DVDzi+31DoMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNZ6dpsVXk5SYX+/wrclSS+eLC+PwoxDTe8BkjMyw51cmN5YVWYLc6oH675t zUGLRjKb3zcqr+h7GInIJ9aGidXwfeoABXmMaKGEdxCOKYokuV7LSBRnGCeWTkIE Nz5/dR4DnbV/HliiQ1Hi+JsY8XMMTZvpnb+v+9q+R14PCQPKVWHZOLwg22tY32B5 /PnedstVk8LJDiVEOSRdF4+8EQQ9jm/yr3F0gJturJa72MZ1qPHk7gskmwaVDLtI 0qj9wvpzxynausJPa3R8YelsitKj0vIA8VOS63Etv1ocArRgaFKkq2RdRzwSgIX7 cqfFMGmO1bn4rTfUPPnpsMWfjQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:30:00 2026 by rpki-client