$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: IAx4TXBmKoSFTYENB+z0+QdhwrJ1Q/8DjTz3wGd97Mo= Subject key identifier: 5F:17:D5:D4:B4:A4:C0:45:1C:A4:30:25:77:78:F0:8B:46:EF:FB:83 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0847 Signing time: Wed 02 Sep 2026 21:09:40 +0000 Manifest this update: Wed 02 Sep 2026 21:09:39 +0000 Manifest next update: Wed 09 Sep 2026 21:09:39 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: AKlZa9gPUg9PhoMJ8AzIh5uAP1JAuhdQV2sGm1r2b4A=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 21:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Sep 2 21:09:39 2026 GMT Not After : Sep 9 21:09:39 2026 GMT Subject: CN=6a989094-42a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:dd:3c:d9:51:d9:ee:62:43:d2:23:0e:cf: 63:f7:fe:65:f2:2e:0c:89:39:68:68:f0:30:12:68: 05:b5:70:00:22:53:d0:2c:c6:26:0f:37:20:0b:cb: 30:93:c3:2a:1a:ec:61:78:2d:1f:55:68:ee:b4:fb: 5e:dc:08:75:f1:86:a8:4e:88:48:68:2a:ed:51:e5: 0e:ec:63:33:65:5d:65:6e:e0:41:3b:b7:78:a9:56: e2:6e:a0:d8:f1:ec:60:60:ce:ca:4f:9c:74:f4:21: ec:ba:4e:28:86:2a:d2:5f:77:d1:cd:bc:66:69:bd: ee:83:dc:1e:70:e9:16:b6:db:39:e9:69:d7:40:ab: a0:9c:04:38:2a:3b:b5:fd:58:f8:65:c8:cf:56:92: 5a:ef:1d:cd:a0:2d:ca:32:e9:29:50:32:32:fb:a4: 05:b6:32:8b:61:45:2b:b4:4d:d0:07:75:73:c3:1f: 04:18:72:22:0b:2a:f6:5a:df:44:ba:6c:a6:2f:dd: 91:0d:03:d7:ac:7d:cf:b0:58:72:3d:00:ff:d9:66: 6c:4e:36:07:68:d3:e5:33:29:3e:3e:70:09:82:f7: 51:28:f4:50:7b:e7:4a:b8:c8:f1:02:ad:d4:3e:f0: f6:e2:08:50:9b:4d:7f:5a:82:d9:5f:ca:62:23:8d: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:17:D5:D4:B4:A4:C0:45:1C:A4:30:25:77:78:F0:8B:46:EF:FB:83 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:73:cd:62:81:7c:03:a8:c0:cd:ed:03:e0:a2:69:5c:e5:37: c2:de:c0:f5:9e:81:b0:a9:f0:a4:53:33:f3:7e:1c:9e:a9:7f: 4f:75:b7:b5:e1:c1:15:25:b6:07:a8:11:b8:86:4a:2f:81:44: 41:23:f8:66:71:51:46:2c:96:55:1c:fc:14:5e:93:c4:c3:a0: 87:3e:c1:60:fb:d6:37:b6:dc:47:f7:ca:0c:5a:b4:4f:c8:1d: b5:5f:6f:e7:58:0e:b9:97:5d:ee:5a:50:a7:32:92:a3:70:42: ef:bb:60:79:26:a9:fc:36:9e:d9:db:37:3e:37:a6:51:66:68: b1:09:aa:99:a0:7b:a3:8b:0f:93:a3:9e:ea:60:5a:a2:d3:be: 15:69:11:e3:4c:77:1d:3e:2a:5a:1c:5e:b4:59:22:3b:f0:ee: 68:3e:f9:d6:6c:4c:c3:b2:51:30:dd:43:d5:28:65:13:97:c5: 32:c1:8e:4b:95:bd:02:80:ec:4c:83:a9:ee:5b:91:f0:50:49: c6:2e:03:1b:52:0c:07:35:ea:90:f8:c6:83:26:63:aa:70:bb: dc:66:97:27:d2:d2:e5:8a:f9:ab:50:57:26:61:81:f1:c3:d0: cd:42:3c:ed:3f:a3:40:2d:0c:1b:7c:1b:b4:07:08:06:27:4b: 7b:78:29:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjYwOTAyMjEwOTM5WhcNMjYwOTA5MjEwOTM5WjAYMRYwFAYD VQQDEw02YTk4OTA5NC00MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpzdPNlR2e5iQ9IjDs9j9/5l8i4MiTloaPAwEmgFtXAAIlPQLMYmDzcgC8sw k8MqGuxheC0fVWjutPte3Ah18YaoTohIaCrtUeUO7GMzZV1lbuBBO7d4qVbibqDY 8exgYM7KT5x09CHsuk4ohirSX3fRzbxmab3ug9wecOkWtts56WnXQKugnAQ4Kju1 /Vj4ZcjPVpJa7x3NoC3KMukpUDIy+6QFtjKLYUUrtE3QB3Vzwx8EGHIiCyr2Wt9E umymL92RDQPXrH3PsFhyPQD/2WZsTjYHaNPlMyk+PnAJgvdRKPRQe+dKuMjxAq3U PvD24ghQm01/WoLZX8piI41iVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8X1dS0 pMBFHKQwJXd48ItG7/uDMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHnPNYoF8A6jAze0D4KJpXOU3wt7A9Z6BsKnwpFMz834cnql/T3W3teHBFSW2 B6gRuIZKL4FEQSP4ZnFRRiyWVRz8FF6TxMOghz7BYPvWN7bcR/fKDFq0T8gdtV9v 51gOuZdd7lpQpzKSo3BC77tgeSap/Dae2ds3PjemUWZosQmqmaB7o4sPk6Oe6mBa otO+FWkR40x3HT4qWhxetFkiO/DuaD751mxMw7JRMN1D1ShlE5fFMsGOS5W9AoDs TIOp7luR8FBJxi4DG1IMBzXqkPjGgyZjqnC73GaXJ9LS5Yr5q1BXJmGB8cPQzUI8 7T+jQC0MG3wbtAcIBidLe3gp9w== -----END CERTIFICATE-----Generated at Fri Sep 4 22:38:55 2026 by rpki-client