$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: qrtzz2jPWaDknc9HVdHciB5Khk8AdRWJjvSM8a2sYuM= Subject key identifier: B8:99:0F:0C:26:15:0C:9F:1F:5F:64:75:E9:66:89:1C:7A:8F:42:47 Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 3553 Signing time: Tue 24 Mar 2026 15:10:56 +0000 Manifest this update: Tue 24 Mar 2026 15:10:56 +0000 Manifest next update: Tue 31 Mar 2026 15:10:56 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: OnM2XOSGJNT5+M804PDkJOaEXob3GL+sPiHm79s3DTQ=) 2: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: d6qZOj923EDM5j/eus1GyHzZQ94N2O8LPvUvtab7u4U=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: nqfeIktxmQlFz9Aic/Gy6OFmwqmnaf18sWJN3V2VG1s=) 4: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: ZNlFmUEdjmspwVR3vJVp1pZtAd6tFL84c0KkBQzXTzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Mar 24 15:10:56 2026 GMT Not After : Mar 31 15:10:56 2026 GMT Subject: CN=69c2a980-9d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:59:45:51:5a:85:fe:9f:1d:b0:61:86:78: da:7c:e1:39:68:93:c6:49:d3:b1:c2:ff:e0:bf:b7: b1:9c:95:ba:5e:4c:af:06:4a:d6:10:18:e8:be:90: c9:5f:d4:ce:7d:ab:94:bf:bd:3d:c4:8d:f8:1b:8c: 73:b9:7a:06:f0:22:74:9e:5e:27:b5:45:f7:49:a3: 2f:ee:d0:d5:0e:68:6c:ee:48:84:f0:ad:7c:fd:5a: 32:2e:84:2f:24:50:83:90:14:f5:23:2d:1e:a3:7d: 6a:04:7b:71:c2:ac:a0:84:cb:e2:61:02:a3:3c:ad: 18:a3:2e:bb:9a:9e:78:50:65:e5:3b:4a:bd:a0:c2: 82:e7:93:52:99:91:46:13:f6:d4:9f:4d:dd:74:f9: b7:e0:e3:e1:5f:51:6b:a3:51:53:ae:56:7b:b3:a9: c1:ff:84:88:e6:5e:7a:4e:20:3f:5a:77:50:a4:fa: 5d:a8:b9:48:11:3e:ea:78:d7:44:14:9b:ab:76:ca: fc:ba:b7:c1:4a:99:ff:31:e7:ca:1b:95:77:87:75: 85:8b:15:e2:c8:c6:fe:ac:9e:34:e7:d1:95:7c:55: 69:3d:f9:b0:05:8e:cc:c2:a3:98:64:17:6b:c7:a4: 01:b7:b4:36:3a:bf:12:68:7a:f3:fb:4a:b1:4a:3c: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:0F:0C:26:15:0C:9F:1F:5F:64:75:E9:66:89:1C:7A:8F:42:47 X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:4a:0e:8c:48:39:71:88:51:c0:32:a3:b6:22:75:95:b7: 6d:87:1b:fb:e0:18:80:58:1a:25:9e:b8:4e:fd:e9:37:72:86: a9:28:fa:b7:f4:7d:56:4f:6c:20:48:46:20:89:7f:fd:92:ff: 8d:ea:62:cb:9f:a5:55:c7:d7:c8:cc:ba:fd:03:8b:b2:af:70: 04:8c:d0:5a:64:7d:bb:ed:6f:a1:06:6f:7e:c6:bf:78:38:26: 6b:ab:22:72:b5:1a:11:16:44:ac:01:c1:68:1f:57:42:a0:d2: 41:13:af:87:60:e8:2d:f4:c6:7b:d4:ad:ea:e7:17:d1:78:9d: 11:c4:ae:87:74:9b:a2:cf:e9:f8:8e:da:89:74:96:2e:82:19: c9:14:a8:de:62:e2:c7:e4:9b:ff:90:41:2e:c3:54:1c:c1:e7: 72:cf:1c:ca:86:56:b0:28:3a:44:84:a4:b0:7b:f7:20:e5:06: 9d:e7:9d:12:45:92:5e:dc:49:20:d4:44:e6:fc:9f:e0:fe:1e: 7a:67:a6:fb:4e:58:27:d5:9b:df:65:55:bf:5d:19:58:c6:02: 52:f8:b7:d3:08:5f:ca:13:f5:98:74:fa:87:7c:51:56:3a:b4: b5:16:56:e9:e1:b2:71:8d:a8:35:f1:71:22:ec:02:35:bc:99: 56:e3:4c:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjYwMzI0MTUxMDU2WhcNMjYwMzMxMTUxMDU2WjAYMRYwFAYD VQQDEw02OWMyYTk4MC05ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF1ZRVFahf6fHbBhhnjafOE5aJPGSdOxwv/gv7exnJW6XkyvBkrWEBjovpDJ X9TOfauUv709xI34G4xzuXoG8CJ0nl4ntUX3SaMv7tDVDmhs7kiE8K18/VoyLoQv JFCDkBT1Iy0eo31qBHtxwqyghMviYQKjPK0Yoy67mp54UGXlO0q9oMKC55NSmZFG E/bUn03ddPm34OPhX1Fro1FTrlZ7s6nB/4SI5l56TiA/WndQpPpdqLlIET7qeNdE FJurdsr8urfBSpn/MefKG5V3h3WFixXiyMb+rJ4059GVfFVpPfmwBY7MwqOYZBdr x6QBt7Q2Or8SaHrz+0qxSjwOrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiZDwwm FQyfH19kdelmiRx6j0JHMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJVKDoxIOXGIUcAyo7YidZW3bYcb++AYgFgaJZ64Tv3pN3KGqSj6t/R9Vk9s IEhGIIl//ZL/jepiy5+lVcfXyMy6/QOLsq9wBIzQWmR9u+1voQZvfsa/eDgma6si crUaERZErAHBaB9XQqDSQROvh2DoLfTGe9St6ucX0XidEcSuh3Sbos/p+I7aiXSW LoIZyRSo3mLix+Sb/5BBLsNUHMHncs8cyoZWsCg6RISksHv3IOUGneedEkWSXtxJ INRE5vyf4P4eemem+05YJ9Wb32VVv10ZWMYCUvi30whfyhP1mHT6h3xRVjq0tRZW 6eGycY2oNfFxIuwCNbyZVuNMAw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:40 2026 by rpki-client