$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: 5FO8mlOGFKDps/5bYwG8lQ6VPgI44a1tztsFbMabF4k= Subject key identifier: 69:10:D2:73:92:1D:31:34:BC:E7:B6:29:71:76:11:31:A1:88:F4:E2 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 0242 Signing time: Sat 05 Sep 2026 02:33:01 +0000 Manifest this update: Sat 05 Sep 2026 02:33:00 +0000 Manifest next update: Sat 12 Sep 2026 02:33:00 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: B6gg2aMLa2v/dk4A82qTvuDMHevvrs1lyZZLe0gn1OE=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: TlPZUMDag0+nbHWC7VeEq/uQgXojgN3hKUwwE1rmyAE=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: JQYmKsWXoSm0lfyUAQDHWsNMbQA1U6oOzIeZnxZREpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Sep 5 02:33:00 2026 GMT Not After : Sep 12 02:33:00 2026 GMT Subject: CN=6a9b7f5d-30ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:8a:a6:0f:73:45:51:79:d3:0b:8c:7c:18: 77:67:0b:c3:31:47:ce:51:d8:19:df:c2:98:66:38: 9b:b2:e5:42:f2:85:24:d2:4b:69:2e:ad:65:96:3c: e2:f1:7e:5a:1f:76:0e:08:c7:b6:b7:51:41:07:e8: 49:56:ee:1b:ba:0c:3f:5e:fd:9a:c9:19:33:13:d7: 0e:41:bb:3a:e5:5e:e5:df:d6:81:c3:e7:10:f3:58: a3:a1:6e:39:07:ff:a5:2e:0e:f5:aa:e7:04:f4:59: 8c:e7:cf:4f:56:09:e7:d7:da:b9:14:3f:5d:f9:02: 0d:9b:0e:92:7d:e1:bd:10:36:a7:6b:8a:a4:e0:ab: a6:7b:35:7f:bb:33:4c:7b:70:55:c3:d8:4e:fb:f5: 2a:29:14:44:37:60:ea:ae:2b:fa:cb:6f:1c:2b:c0: e8:e1:34:d2:af:22:16:6c:43:b1:c1:03:65:8e:4c: d9:1f:8c:b2:e4:39:4f:a9:c0:da:7f:aa:e8:f8:5a: a5:b7:ce:c9:10:da:7c:8a:db:40:49:aa:b0:47:2a: 11:ff:06:e3:e5:f7:78:28:a3:23:18:47:44:33:6d: 6e:89:73:0a:aa:e2:c8:de:98:2c:b3:cf:36:50:ad: 2a:84:14:c9:a2:4f:70:88:72:93:2e:6d:51:45:55: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:10:D2:73:92:1D:31:34:BC:E7:B6:29:71:76:11:31:A1:88:F4:E2 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:05:00:6f:a5:16:96:78:00:42:98:8d:3f:e1:e4:ab:69:44: cb:46:02:89:6e:f5:a8:4a:78:96:41:10:c0:b9:b0:9c:39:71: e1:eb:d1:4c:51:55:14:17:41:85:24:f1:ba:8d:cc:aa:9c:d4: 66:b1:0c:08:df:fb:0c:61:97:53:94:59:6d:a9:a5:c8:b5:16: e1:80:53:96:d4:9b:21:4c:d9:3f:aa:51:88:df:ac:17:70:8e: 30:6f:ef:44:ac:48:21:36:61:00:b6:26:5d:55:d3:ac:fb:67: 24:79:ab:ba:88:29:00:d1:08:ed:9a:ac:1c:d5:e4:1b:22:9a: 5f:4f:c8:de:be:00:e3:92:07:4c:50:d8:bc:e3:38:24:d9:2c: 72:56:5f:e6:5e:25:fe:a4:bd:41:ef:77:02:42:58:8b:40:da: 82:4e:c7:67:70:02:8a:39:8c:3c:1b:27:18:1d:0e:02:64:ed: 06:59:cc:b3:bb:ff:88:f1:94:4d:6b:62:b6:aa:7d:9d:18:ea: f8:00:42:bb:6d:ab:ae:0c:5a:b0:91:4c:10:ff:6d:fc:14:e7: 54:d0:03:15:c0:cd:d2:d9:99:b2:95:d0:52:c6:04:75:2e:d4: 22:70:b0:00:16:87:90:4f:f3:cb:61:3f:07:b1:0d:b5:a0:3f: c1:37:d8:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjYwOTA1MDIzMzAwWhcNMjYwOTEyMDIzMzAwWjAYMRYwFAYD VQQDEw02YTliN2Y1ZC0zMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIGKpg9zRVF50wuMfBh3ZwvDMUfOUdgZ38KYZjibsuVC8oUk0ktpLq1lljzi 8X5aH3YOCMe2t1FBB+hJVu4bugw/Xv2ayRkzE9cOQbs65V7l39aBw+cQ81ijoW45 B/+lLg71qucE9FmM589PVgnn19q5FD9d+QINmw6SfeG9EDana4qk4KumezV/uzNM e3BVw9hO+/UqKRREN2Dqriv6y28cK8Do4TTSryIWbEOxwQNljkzZH4yy5DlPqcDa f6ro+Fqlt87JENp8ittASaqwRyoR/wbj5fd4KKMjGEdEM21uiXMKquLI3pgss882 UK0qhBTJok9wiHKTLm1RRVXmQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkQ0nOS HTE0vOe2KXF2ETGhiPTiMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASQUAb6UWlngAQpiNP+Hkq2lEy0YCiW71qEp4lkEQwLmwnDlx4evRTFFVFBdB hSTxuo3MqpzUZrEMCN/7DGGXU5RZbamlyLUW4YBTltSbIUzZP6pRiN+sF3COMG/v RKxIITZhALYmXVXTrPtnJHmruogpANEI7ZqsHNXkGyKaX0/I3r4A45IHTFDYvOM4 JNksclZf5l4l/qS9Qe93AkJYi0Dagk7HZ3ACijmMPBsnGB0OAmTtBlnMs7v/iPGU TWtitqp9nRjq+ABCu22rrgxasJFMEP9t/BTnVNADFcDN0tmZspXQUsYEdS7UInCw ABaHkE/zy2E/B7ENtaA/wTfYfA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:34:59 2026 by rpki-client