$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft File: VArroLYHQFdp3kTXa34xC_VpIXI.mft (raw, json) Hash identifier: k+1UdNdb7SQWuniSfQ+xcZrDkH1qoJqNOR/5htaCFPU= Subject key identifier: 10:0A:4E:2B:41:A9:25:51:BF:EE:BE:9F:3C:89:DD:22:38:7E:30:37 Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft Manifest number: 5A Signing time: Mon 05 Oct 2026 08:35:59 +0000 Manifest this update: Mon 05 Oct 2026 08:35:58 +0000 Manifest next update: Mon 12 Oct 2026 08:35:58 +0000 Files and hashes: 1: VArroLYHQFdp3kTXa34xC_VpIXI.crl (hash: 6wkvaXQIbOgXCoty42rjnsShhP7aC2MIVwo2S8hjLmc=) 2: 74F89580380611F1BFB0A69592833773.roa (hash: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Oct 5 08:35:58 2026 GMT Not After : Oct 12 08:35:58 2026 GMT Subject: CN=6ac3616e-7379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:b1:c9:d8:bf:22:8a:60:87:3d:ef:e0:8b: 11:12:4c:68:0f:18:95:4f:81:eb:9d:98:a9:39:89: 2f:61:39:6b:2b:65:26:6a:37:42:02:ae:ab:36:90: 95:45:00:3d:01:42:a7:1c:4d:6e:63:35:1e:c0:55: 35:8d:d6:56:6a:f2:46:f3:be:4f:fc:05:96:6e:a4: 05:af:24:30:00:e0:52:a8:ef:05:b2:3f:02:42:19: de:04:a3:4a:3c:c6:d0:fa:95:c6:b5:7d:b3:43:7b: ea:c7:7f:bb:99:7f:96:e4:fb:be:93:f3:3b:88:09: 02:83:32:c0:4e:67:24:fe:8a:06:48:5a:9b:6a:a4: ac:52:7f:db:a1:67:14:9f:92:01:03:92:99:79:ca: bf:69:58:8d:28:0e:79:9c:b9:d9:64:82:33:48:3a: 31:8d:d3:6f:5a:fc:60:72:e9:55:79:bd:c5:6a:92: 9c:d4:0d:57:42:60:28:15:13:1c:3e:fa:7f:7a:0c: ed:54:0c:45:d5:08:db:4e:4f:01:7a:3d:f2:5c:a6: b0:69:bc:78:2e:89:13:92:7b:84:bd:4c:3c:38:af: 01:8f:06:5a:0c:3e:da:39:ee:02:e8:80:6f:27:7d: 3c:76:5e:5c:05:c7:7c:b4:8f:29:5a:c7:63:ca:0f: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:4E:2B:41:A9:25:51:BF:EE:BE:9F:3C:89:DD:22:38:7E:30:37 X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:60:44:76:45:48:67:2b:21:f6:4d:4b:76:60:58:84:c4:b9: fa:36:f9:7b:13:2f:f0:75:c3:a4:6a:a8:2d:98:7a:65:12:a6: f7:ae:6d:de:87:71:cc:ad:a5:97:c2:ab:06:27:2b:a5:8e:bb: 34:73:5d:26:e9:d5:c4:6e:3c:47:db:35:51:a1:48:0d:ab:e3: ca:fd:ad:f5:08:88:99:d4:fc:f1:95:e0:4d:dc:e2:cb:fd:5c: 05:79:d9:dc:71:3a:a3:35:bd:b4:c0:08:bf:ab:79:60:89:e2: 1f:27:eb:ba:75:77:cf:13:c3:ab:cf:c0:4b:8b:d4:58:a4:f7: 16:cb:f9:84:83:13:df:b8:90:b9:33:1b:78:f7:93:d4:fb:bd: 9d:98:fe:a7:ee:48:c3:ce:c3:5b:b5:74:6f:89:a4:51:5c:d4: 77:89:b8:7e:cd:b3:95:99:88:20:01:48:12:64:60:0c:dc:81: 27:62:5c:60:a4:4a:d1:80:3e:20:4c:e4:06:05:67:47:e5:fc: 25:da:20:76:3e:cb:16:74:9b:eb:fa:53:37:65:dd:39:72:45: 29:34:dc:20:0f:a9:b6:c7:24:d3:0e:22:85:44:22:76:46:84: 49:9a:25:83:c9:87:f7:3c:3e:d0:7e:41:13:ef:4d:7b:d0:45: 37:ae:57:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjEwMDUwODM1NThaFw0yNjEwMTIwODM1NThaMBgxFjAUBgNV BAMTDTZhYzM2MTZlLTczNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jrHJ2L8iimCHPe/gixESTGgPGJVPgeudmKk5iS9hOWsrZSZqN0ICrqs2kJVF AD0BQqccTW5jNR7AVTWN1lZq8kbzvk/8BZZupAWvJDAA4FKo7wWyPwJCGd4Eo0o8 xtD6lca1fbNDe+rHf7uZf5bk+76T8zuICQKDMsBOZyT+igZIWptqpKxSf9uhZxSf kgEDkpl5yr9pWI0oDnmcudlkgjNIOjGN029a/GBy6VV5vcVqkpzUDVdCYCgVExw+ +n96DO1UDEXVCNtOTwF6PfJcprBpvHguiROSe4S9TDw4rwGPBloMPto57gLogG8n fTx2XlwFx3y0jylax2PKD8+7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEApOK0Gp JVG/7r6fPIndIjh+MDcwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD RTkyLzgwQjlDMTZBMzgwNTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZk cDNrVFhhMzR4Q19WcElYSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGYER2RUhnKyH2TUt2YFiExLn6Nvl7Ey/wdcOkaqgtmHplEqb3rm3eh3HMraWX wqsGJyuljrs0c10m6dXEbjxH2zVRoUgNq+PK/a31CIiZ1PzxleBN3OLL/VwFednc cTqjNb20wAi/q3lgieIfJ+u6dXfPE8Orz8BLi9RYpPcWy/mEgxPfuJC5Mxt495PU +72dmP6n7kjDzsNbtXRviaRRXNR3ibh+zbOVmYggAUgSZGAM3IEnYlxgpErRgD4g TOQGBWdH5fwl2iB2PssWdJvr+lM3Zd05ckUpNNwgD6m2xyTTDiKFRCJ2RoRJmiWD yYf3PD7QfkET70170EU3rldP -----END CERTIFICATE-----Generated at Tue Oct 6 19:17:03 2026 by rpki-client