$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: ynMwnehahNlUhqGiIc6nEOyAw3rwgbzW+ZYqTABdi8E= Subject key identifier: D4:D6:61:29:77:B9:0E:8E:19:12:AA:D6:0B:5A:26:6E:2A:E2:5A:7F Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 011A Signing time: Wed 25 Mar 2026 05:04:46 +0000 Manifest this update: Wed 25 Mar 2026 05:04:46 +0000 Manifest next update: Wed 01 Apr 2026 05:04:46 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: 6Pb93DNcHypPlD3J2tmj/ozmOWIu9m+gLWG1IxLedfk=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Mar 25 05:04:46 2026 GMT Not After : Apr 1 05:04:46 2026 GMT Subject: CN=69c36cee-5fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e4:73:26:b2:a9:cb:e9:fe:82:c9:b4:59:23: 79:0a:20:a8:85:45:1f:ac:1c:24:ba:c3:35:97:a9: 25:24:84:32:8b:9f:65:44:0a:24:0c:94:04:da:44: 33:5d:80:f7:bc:bc:ae:80:a1:98:67:c0:5b:02:11: 21:51:b4:98:74:1c:a4:c4:36:82:1f:bf:4c:08:bd: 52:b5:e1:2e:01:cb:a5:6a:e9:97:1d:bb:21:e0:6e: 31:c2:2a:fc:a1:e5:19:b2:fd:88:ec:f8:a4:be:31: dc:13:bb:ce:0a:55:0a:04:7b:6c:79:a5:50:be:2f: a7:0d:11:b9:df:0d:73:a4:a3:63:ea:12:f0:19:29: dd:ff:8a:49:d0:5d:63:aa:1f:fc:34:a7:43:b9:e9: d1:8a:33:0b:4f:0f:1e:f0:10:d0:c9:c6:d3:74:d1: c3:32:16:b5:dd:3f:95:c1:06:96:58:90:91:96:92: 0f:33:8e:c4:7e:dd:94:7d:eb:18:9e:83:9c:36:86: 21:21:95:d5:ec:e1:4d:2b:df:44:67:10:03:c4:30: ba:f7:8c:9f:f2:dd:be:ca:b6:ba:5f:6f:a9:f9:b2: eb:82:8f:63:fa:f0:a3:59:3a:38:3a:24:e2:41:90: 76:7a:d3:6c:21:32:8c:8e:57:fb:a1:14:9b:50:42: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D6:61:29:77:B9:0E:8E:19:12:AA:D6:0B:5A:26:6E:2A:E2:5A:7F X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:0e:54:8a:c5:42:24:ad:9c:bb:c9:21:8b:33:0e:e0:4c: 5b:c4:a9:95:ce:11:c3:d4:10:cf:f8:57:38:58:0b:2e:ad:82: e4:cc:f2:85:84:dc:cc:d3:4c:8c:34:fe:32:26:92:58:11:35: 08:75:9f:b6:fd:5d:45:09:5c:10:1b:24:a5:81:83:17:07:60: bc:11:80:95:b0:f4:88:55:9e:87:52:ba:6e:9b:9b:51:f0:6c: 67:84:db:81:40:d5:01:95:ab:d2:da:c1:da:f8:ac:af:f7:88: a9:37:0d:08:63:cd:10:6c:b1:ca:d5:06:fc:67:c3:c2:6b:1a: 6f:91:d8:b4:02:96:d2:d4:c3:d4:5a:a8:a3:69:c2:08:83:1e: 50:38:cb:a7:bf:54:37:33:a1:8d:a9:b8:3f:7f:24:25:7f:4a: ed:70:99:b3:7c:7a:aa:6f:20:8b:12:ef:9b:f0:e4:f2:2f:20: 63:2c:6a:6b:c1:b2:8e:2f:15:6a:4d:75:3c:73:0c:c9:f3:98: ad:58:63:6b:e7:e8:88:db:85:bb:ff:5c:d5:86:79:44:fe:ec: 97:69:ba:3f:21:31:aa:c5:22:8d:d8:b8:2a:e3:7b:98:6e:53: b4:d2:03:b3:ee:88:64:c0:af:94:c2:13:f2:fe:dd:e2:b0:01: c0:f4:58:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjYwMzI1MDUwNDQ2WhcNMjYwNDAxMDUwNDQ2WjAYMRYwFAYD VQQDEw02OWMzNmNlZS01ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ORzJrKpy+n+gsm0WSN5CiCohUUfrBwkusM1l6klJIQyi59lRAokDJQE2kQz XYD3vLyugKGYZ8BbAhEhUbSYdBykxDaCH79MCL1SteEuAculaumXHbsh4G4xwir8 oeUZsv2I7PikvjHcE7vOClUKBHtseaVQvi+nDRG53w1zpKNj6hLwGSnd/4pJ0F1j qh/8NKdDuenRijMLTw8e8BDQycbTdNHDMha13T+VwQaWWJCRlpIPM47Eft2UfesY noOcNoYhIZXV7OFNK99EZxADxDC694yf8t2+yra6X2+p+bLrgo9j+vCjWTo4OiTi QZB2etNsITKMjlf7oRSbUEIjuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTWYSl3 uQ6OGRKq1gtaJm4q4lp/MB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHngOVIrFQiStnLvJIYszDuBMW8Splc4Rw9QQz/hXOFgLLq2C5MzyhYTczNNM jDT+MiaSWBE1CHWftv1dRQlcEBskpYGDFwdgvBGAlbD0iFWeh1K6bpubUfBsZ4Tb gUDVAZWr0trB2visr/eIqTcNCGPNEGyxytUG/GfDwmsab5HYtAKW0tTD1Fqoo2nC CIMeUDjLp79UNzOhjam4P38kJX9K7XCZs3x6qm8gixLvm/Dk8i8gYyxqa8Gyji8V ak11PHMMyfOYrVhja+foiNuFu/9c1YZ5RP7sl2m6PyExqsUijdi4KuN7mG5TtNID s+6IZMCvlMIT8v7d4rABwPRYzg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:48 2026 by rpki-client