$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: o5PZBHaULZtEsTRJG6QxEJ0bHvgxYOd1NmeBoIdqX5c= Subject key identifier: 97:5E:E7:0E:B2:06:AB:7C:1D:7B:FC:2C:A3:68:2C:88:97:FE:B4:25 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: DA Signing time: Wed 25 Mar 2026 05:51:03 +0000 Manifest this update: Wed 25 Mar 2026 05:51:02 +0000 Manifest next update: Wed 01 Apr 2026 05:51:02 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: QvIGjemI1jjGK4EmbamwKtsekcfYvs3mjLuxfQjAcYc=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Mar 25 05:51:02 2026 GMT Not After : Apr 1 05:51:02 2026 GMT Subject: CN=69c377c7-77b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:40:8e:73:25:f8:c5:13:d5:17:a2:de:21: 6b:58:ea:36:5b:fd:a4:bd:d6:48:19:8b:a9:ad:46: ac:37:a0:14:ad:26:77:ea:03:96:43:be:b7:5f:7c: 84:0b:8e:30:5d:79:5b:dc:e8:bf:3c:d9:06:0a:f3: 37:d5:b4:6a:c1:b2:ce:f3:ce:af:7d:44:27:d5:ba: 5e:cf:1d:ff:fc:d0:7c:f1:b2:a0:08:9f:d3:42:6f: ec:1f:a1:68:f6:74:d4:87:f9:d4:bc:e4:d8:f5:7a: eb:7d:bb:8d:94:f7:8a:35:81:13:28:40:ea:39:42: dc:16:02:05:90:7c:75:63:73:b0:14:90:d8:6c:04: 0c:83:00:17:57:e4:83:21:2d:22:9b:17:9b:fd:5a: 31:73:ff:ff:96:1a:65:27:2b:23:34:1b:13:60:4e: d9:54:5f:a0:37:6d:6e:e1:ed:dd:29:dc:3f:78:25: 46:77:20:33:ce:94:0c:a6:c7:de:fb:61:6e:43:a7: f4:b8:c7:cc:c9:4a:3e:7d:84:ac:a3:d9:5e:78:38: d6:71:d7:f7:03:05:8a:4a:c0:36:21:34:22:9f:c6: b9:87:d5:88:f4:77:72:79:db:64:b0:bf:d7:41:ed: 0c:d5:9b:d7:e3:df:70:53:76:3b:23:79:7c:fc:f4: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5E:E7:0E:B2:06:AB:7C:1D:7B:FC:2C:A3:68:2C:88:97:FE:B4:25 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:75:34:8b:91:9a:74:1b:84:d7:56:45:f3:50:09:cd:a6:77: 0e:1d:37:79:c4:1a:c4:c6:79:c6:5a:ea:9e:0f:2e:6f:b9:98: f0:b8:ac:47:b8:18:a4:7d:3b:88:46:fc:50:0e:2e:c7:b2:4b: 78:0a:fa:86:70:b0:7d:1b:8f:3d:0a:62:c9:aa:0a:60:28:09: 5e:9e:1c:e8:e8:e6:bd:89:20:17:58:5c:94:92:0f:ca:d5:5d: 37:fb:8b:81:75:ed:75:57:e6:32:dc:6d:bb:da:8c:82:99:c0: 50:87:50:e0:e9:a1:1b:19:34:9b:6b:e2:85:25:5f:31:de:b6: 98:22:8a:12:fe:1e:04:83:40:b2:85:2e:20:66:7f:b8:94:9d: ab:e6:ff:1c:f7:72:0c:3c:51:c0:b5:43:40:f6:23:a3:87:e8: d2:69:18:d0:ee:80:c1:4c:ca:56:4f:a5:0a:3f:09:e2:21:b1: 45:57:33:d1:30:e0:af:52:d9:f0:e4:b8:80:46:31:fc:b6:e3: cd:3f:3c:4f:19:f2:07:3a:14:62:80:11:dc:a6:98:aa:6f:80: b2:e8:97:cc:03:f2:91:21:83:9d:fa:27:3e:ff:7f:58:67:3f: e0:34:31:c0:60:bd:eb:ee:50:d0:50:85:6f:19:3b:5d:8d:d0: d1:cc:53:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURCNjYxMTAvBgNVBAUTKEJDOEM3OUY3ODQ5MUExRDVBQTQ1REJFNDEzM0MwQzEw RjY5MzY0QUQwHhcNMjYwMzI1MDU1MTAyWhcNMjYwNDAxMDU1MTAyWjAYMRYwFAYD VQQDEw02OWMzNzdjNy03N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu1AjnMl+MUT1Rei3iFrWOo2W/2kvdZIGYuprUasN6AUrSZ36gOWQ763X3yE C44wXXlb3Oi/PNkGCvM31bRqwbLO886vfUQn1bpezx3//NB88bKgCJ/TQm/sH6Fo 9nTUh/nUvOTY9XrrfbuNlPeKNYETKEDqOULcFgIFkHx1Y3OwFJDYbAQMgwAXV+SD IS0imxeb/Voxc///lhplJysjNBsTYE7ZVF+gN21u4e3dKdw/eCVGdyAzzpQMpsfe +2FuQ6f0uMfMyUo+fYSso9leeDjWcdf3AwWKSsA2ITQin8a5h9WI9HdyedtksL/X Qe0M1ZvX499wU3Y7I3l8/PRQnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJde5w6y Bqt8HXv8LKNoLIiX/rQlMB8GA1UdIwQYMBaAFLyMefeEkaHVqkXb5BM8DBD2k2St MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni83N0I2MTk5Q0Uw OUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9kV3FSZHZrRXp3TUVQYVRa SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni83N0I2MTk5Q0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9k V3FSZHZrRXp3TUVQYVRaSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHU0i5GadBuE11ZF81AJzaZ3Dh03ecQaxMZ5xlrqng8ub7mY8LisR7gYpH07 iEb8UA4ux7JLeAr6hnCwfRuPPQpiyaoKYCgJXp4c6OjmvYkgF1hclJIPytVdN/uL gXXtdVfmMtxtu9qMgpnAUIdQ4OmhGxk0m2vihSVfMd62mCKKEv4eBINAsoUuIGZ/ uJSdq+b/HPdyDDxRwLVDQPYjo4fo0mkY0O6AwUzKVk+lCj8J4iGxRVcz0TDgr1LZ 8OS4gEYx/LbjzT88TxnyBzoUYoAR3KaYqm+AsuiXzAPykSGDnfonPv9/WGc/4DQx wGC96+5Q0FCFbxk7XY3Q0cxTJw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:38 2026 by rpki-client