$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: 2sDv9BVZktcG3pwUEC1o+4f7QagJnEVw/4qagR/NPgE= Subject key identifier: 9F:38:81:14:C9:B2:3F:C4:E3:8C:47:35:CE:08:F5:1A:5A:4E:A4:16 Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 2797 Signing time: Thu 26 Mar 2026 16:16:24 +0000 Manifest this update: Thu 26 Mar 2026 16:16:23 +0000 Manifest next update: Thu 02 Apr 2026 16:16:23 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: xifNZVGvRLzEZHeGk1cYjcqpe+kzwf0uiSMbMipijJ0=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: /BGkmhAdgNbsy1u7jLxcjeaUne0qBCeVM8LrPhWIoDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Mar 26 16:16:23 2026 GMT Not After : Apr 2 16:16:23 2026 GMT Subject: CN=69c55bd8-aed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:dd:89:43:43:22:a1:11:d7:40:c0:ea:0b: fa:84:8e:b0:85:2e:bc:b0:cb:fe:60:53:a2:ac:a4: ed:07:1f:50:cc:d9:b6:a2:bb:5c:f5:42:f0:fa:9c: 3d:14:94:3f:d0:ba:81:74:47:e0:be:f6:f4:ac:27: 78:15:bd:72:53:14:6c:95:4b:a8:9c:a3:b5:cf:01: 30:9d:2b:6e:e2:05:d0:68:11:f1:23:e7:a5:d0:d4: b8:56:87:d5:95:6f:cb:36:1f:37:25:11:59:0d:e5: e9:2e:aa:8f:3b:11:a5:bd:24:c8:c1:52:4f:94:be: 68:eb:71:28:3c:e4:90:85:08:f9:1b:11:27:d3:56: 23:15:59:84:58:72:34:82:72:45:4d:7e:bc:59:08: bc:cc:d6:b7:ab:6e:89:c2:a1:48:c0:df:e7:ce:04: ee:38:a7:45:b1:fc:c9:b9:3d:c6:a3:bd:9f:52:1b: c0:41:51:b8:91:de:c3:07:20:1b:7a:c9:e2:18:33: 53:72:29:f4:c4:b1:f9:de:9e:7b:4a:bd:30:c4:2d: 06:b2:8d:ac:cd:bb:5f:a5:b9:1a:b3:c4:15:2d:a0: 0a:16:18:a7:b3:c8:8c:ea:66:ea:9b:be:6f:00:02: 44:f3:88:77:d0:c1:85:9d:7f:03:34:3c:b6:35:51: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:81:14:C9:B2:3F:C4:E3:8C:47:35:CE:08:F5:1A:5A:4E:A4:16 X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:15:58:9a:58:0d:70:5f:d2:07:6b:36:d9:60:7a:a9:d8:1a: 92:b4:42:45:c2:25:8e:40:04:9a:22:a3:b1:07:e9:28:46:23: 2d:87:e5:82:2d:2f:a3:c1:6b:83:94:a2:8c:e9:67:58:6d:db: 3b:41:0e:7c:fc:63:64:21:fc:24:45:af:ac:a8:d3:0d:1d:07: da:c6:41:24:21:d5:fe:5e:06:94:f1:a5:45:25:db:5e:d4:1e: 61:b5:fb:62:0c:b2:d0:cb:15:62:74:b6:34:e5:ec:1a:61:ed: a2:96:15:09:af:25:4e:5d:0b:02:c3:08:8d:f5:6e:87:c5:6e: 18:74:ab:a6:a0:bb:89:8f:d5:1f:65:4c:0b:b4:af:ca:82:62: cb:66:8a:e7:3d:6e:67:26:77:9a:a5:c6:e9:27:95:97:90:2a: fc:08:52:e0:d4:a5:cd:37:33:dc:79:34:15:32:ec:87:de:05: 7a:a5:6c:22:d7:ab:f0:f9:38:65:01:7d:ec:42:83:0d:c7:30: b0:08:aa:79:83:ac:61:03:66:4c:c6:2f:44:d6:c1:4b:9b:d2: 68:62:d9:c3:28:fb:f1:3a:38:83:6e:92:75:a9:36:d6:8a:c9: 4e:3a:56:a8:40:ce:95:e7:9a:49:39:c2:bd:84:3e:d5:4f:d0: be:31:36:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKEJFNzY0RUZFRjUzRDg2OUM0NEY2MDcwOTk2MTEzRTBB MTgxODQxMUIwHhcNMjYwMzI2MTYxNjIzWhcNMjYwNDAyMTYxNjIzWjAYMRYwFAYD VQQDEw02OWM1NWJkOC1hZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5PdiUNDIqER10DA6gv6hI6whS68sMv+YFOirKTtBx9QzNm2ortc9ULw+pw9 FJQ/0LqBdEfgvvb0rCd4Fb1yUxRslUuonKO1zwEwnStu4gXQaBHxI+el0NS4VofV lW/LNh83JRFZDeXpLqqPOxGlvSTIwVJPlL5o63EoPOSQhQj5GxEn01YjFVmEWHI0 gnJFTX68WQi8zNa3q26JwqFIwN/nzgTuOKdFsfzJuT3Go72fUhvAQVG4kd7DByAb esniGDNTcin0xLH53p57Sr0wxC0Gso2szbtfpbkas8QVLaAKFhins8iM6mbqm75v AAJE84h30MGFnX8DNDy2NVHgdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ84gRTJ sj/E44xHNc4I9RpaTqQWMB8GA1UdIwQYMBaAFL52Tv71PYacRPYHCZYRPgoYGEEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi92blpPX3ZVOWhweEU5Z2NKbGhFLUNoZ1lR UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi92blpPX3ZVOWhw eEU5Z2NKbGhFLUNoZ1lRUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxVYmlgNcF/SB2s22WB6qdgakrRCRcIljkAEmiKjsQfpKEYjLYflgi0vo8Fr g5SijOlnWG3bO0EOfPxjZCH8JEWvrKjTDR0H2sZBJCHV/l4GlPGlRSXbXtQeYbX7 Ygyy0MsVYnS2NOXsGmHtopYVCa8lTl0LAsMIjfVuh8VuGHSrpqC7iY/VH2VMC7Sv yoJiy2aK5z1uZyZ3mqXG6SeVl5Aq/AhS4NSlzTcz3Hk0FTLsh94FeqVsIter8Pk4 ZQF97EKDDccwsAiqeYOsYQNmTMYvRNbBS5vSaGLZwyj78To4g26Sdak21orJTjpW qEDOleeaSTnCvYQ+1U/QvjE2pA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:11 2026 by rpki-client