$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: eNMdt7Co4gX20P+ILOjtI1UmA6pqc05ElOhDWuNsU1U= Subject key identifier: CC:B2:1E:DC:6A:23:66:A5:07:60:7B:D7:45:AC:6C:6E:3F:17:37:64 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0CA8 Signing time: Tue 24 Mar 2026 18:20:16 +0000 Manifest this update: Tue 24 Mar 2026 18:20:16 +0000 Manifest next update: Tue 31 Mar 2026 18:20:16 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: bqMddQbLxCLdc6cnoF96BQUORLgdDUL3FrTaSI4HZzg=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: A+pMpuuxK+69eAMmv7UHhfa7LiNDLirKYwDV1gOEsKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Mar 24 18:20:16 2026 GMT Not After : Mar 31 18:20:16 2026 GMT Subject: CN=69c2d5e0-670b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:af:19:87:ae:b2:b4:f5:4f:55:c9:7c:dc: 40:71:bf:ed:5c:cd:7d:64:f8:0d:2c:7d:bc:c1:1c: c6:4d:91:eb:2a:4b:49:32:6c:55:15:e1:3e:b6:44: 98:b5:ad:5f:fc:32:bf:26:79:fe:f7:4f:bb:b4:89: 86:a8:fb:8a:cb:b7:a4:91:e7:bc:14:c2:ef:eb:6f: fd:0c:ee:dc:7a:e3:21:b1:01:0e:e2:eb:57:f0:e2: d7:24:a8:95:e4:b6:db:10:e0:6a:9e:01:36:16:17: 34:2e:7c:ee:02:c6:38:c1:af:1c:3c:d7:2b:42:de: 01:f2:a7:8c:f5:45:82:5f:c5:e8:42:ae:0e:c5:fa: c1:d5:ef:85:54:0a:e2:b8:81:2d:15:02:06:53:75: e0:4f:4f:c8:2c:9c:27:ce:f6:39:3f:08:1d:b9:2d: ec:22:ee:34:a8:8b:74:fb:cb:ae:a4:4a:7a:f8:89: 9c:4e:de:c4:67:c7:33:12:4e:87:3f:80:a3:b9:06: ba:ed:a3:35:86:0a:c5:26:b8:e8:d0:99:20:0d:2e: bc:0e:43:24:d2:84:69:a9:3a:2c:c0:8b:49:b7:c6: 08:b1:40:db:29:35:54:ae:cb:87:b8:50:3f:95:42: 50:07:07:97:d8:40:c2:f3:fd:0b:4c:23:f9:8b:96: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B2:1E:DC:6A:23:66:A5:07:60:7B:D7:45:AC:6C:6E:3F:17:37:64 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a5:81:da:2f:2b:1a:79:23:d4:85:84:7a:2f:a8:f9:cc:bd: b7:22:c4:68:b1:56:f3:bc:b9:3a:ad:a3:16:e0:dd:55:4f:0b: 33:74:4d:03:7a:b2:e2:7e:d2:9b:09:e2:03:a5:a9:bc:09:ba: 08:bf:0b:3d:60:78:88:4e:d2:c1:a3:6b:d4:2e:1b:62:55:3b: ce:66:08:87:54:d5:6d:56:bf:79:6e:cd:c5:cb:d1:d6:45:c4: 21:f2:f9:82:55:0b:62:dc:c5:3a:42:3f:c7:d9:32:7b:aa:26: d3:7b:fe:b0:c4:25:d0:79:54:b7:87:86:54:29:0d:9c:c2:c3: ce:27:8e:2a:7b:d7:c9:a3:05:0e:b2:e3:92:64:76:01:96:1e: c3:61:87:5a:89:0c:0b:91:eb:de:08:22:ab:0b:d5:06:f7:45: ab:00:fb:e4:d1:1c:35:a2:0c:74:3b:6f:20:85:1d:0d:30:23: cc:cd:32:6a:7a:93:a3:30:c9:be:04:a2:f4:3e:36:50:22:24: 4d:10:ea:7d:27:0d:52:d1:b3:59:5a:37:a2:68:95:ca:e8:a3: 2e:22:db:a6:a4:fc:b5:e7:39:0f:18:bc:0a:42:9b:52:3b:d4: 69:eb:57:8c:a2:99:6b:2b:26:3a:dc:18:9a:a1:a9:80:65:98: f0:ed:68:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjYwMzI0MTgyMDE2WhcNMjYwMzMxMTgyMDE2WjAYMRYwFAYD VQQDEw02OWMyZDVlMC02NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1evGYeusrT1T1XJfNxAcb/tXM19ZPgNLH28wRzGTZHrKktJMmxVFeE+tkSY ta1f/DK/Jnn+90+7tImGqPuKy7ekkee8FMLv62/9DO7ceuMhsQEO4utX8OLXJKiV 5LbbEOBqngE2Fhc0LnzuAsY4wa8cPNcrQt4B8qeM9UWCX8XoQq4OxfrB1e+FVAri uIEtFQIGU3XgT0/ILJwnzvY5PwgduS3sIu40qIt0+8uupEp6+ImcTt7EZ8czEk6H P4CjuQa67aM1hgrFJrjo0JkgDS68DkMk0oRpqToswItJt8YIsUDbKTVUrsuHuFA/ lUJQBweX2EDC8/0LTCP5i5YytQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyyHtxq I2alB2B710WsbG4/FzdkMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATaWB2i8rGnkj1IWEei+o+cy9tyLEaLFW87y5Oq2jFuDdVU8LM3RNA3qy4n7S mwniA6WpvAm6CL8LPWB4iE7SwaNr1C4bYlU7zmYIh1TVbVa/eW7NxcvR1kXEIfL5 glULYtzFOkI/x9kye6om03v+sMQl0HlUt4eGVCkNnMLDzieOKnvXyaMFDrLjkmR2 AZYew2GHWokMC5Hr3ggiqwvVBvdFqwD75NEcNaIMdDtvIIUdDTAjzM0yanqTozDJ vgSi9D42UCIkTRDqfScNUtGzWVo3omiVyuijLiLbpqT8tec5Dxi8CkKbUjvUaetX jKKZaysmOtwYmqGpgGWY8O1oOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:14 2026 by rpki-client