$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: vL2/YhERrRpNE1KIK4DvpPK+/LuUZH/OqHC3Fa7dcHM= Subject key identifier: F2:FF:FD:2B:DF:42:8C:F3:66:B5:2A:40:71:32:20:E6:FA:4C:A8:F2 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0275 Signing time: Wed 25 Mar 2026 01:24:55 +0000 Manifest this update: Wed 25 Mar 2026 01:24:54 +0000 Manifest next update: Wed 01 Apr 2026 01:24:54 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: +yEDVNIHbCps0Nl9X6uulV4ve5Eowu0Kp+TOD1oMo6Y=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Mar 25 01:24:54 2026 GMT Not After : Apr 1 01:24:54 2026 GMT Subject: CN=69c33967-1e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:57:d9:42:78:8c:a1:e7:26:78:c3:0b:44: 8d:ba:ca:f5:25:93:b4:0e:63:16:31:f6:de:92:e6: 4d:52:32:b7:60:47:27:74:0f:88:9f:66:f2:78:5c: 09:f7:24:be:a0:ef:1e:48:1d:54:8d:b1:53:8f:c5: 2b:0b:0d:52:f6:2a:4c:7b:08:f7:40:a8:6a:21:a2: bb:41:aa:f1:94:3d:91:fa:1a:a9:bd:46:91:1a:2d: 14:1e:8c:59:3d:2a:80:d1:25:93:fc:89:c6:90:36: fb:4f:9e:03:4f:f9:8c:e7:6e:cd:db:88:76:75:39: bb:53:db:22:16:2f:89:4b:b3:05:9c:7b:fc:89:ac: 6b:87:2c:a1:13:8a:5c:8b:0b:89:5a:49:16:42:f9: af:bd:39:70:2c:97:3b:18:8d:09:d2:91:70:f8:d9: 31:7f:d5:17:32:c5:ca:7e:a7:fc:13:d8:7b:3a:e1: 92:0f:d6:b1:35:b5:e0:7e:37:7e:61:6e:b5:6d:96: e0:8a:90:69:89:39:4f:ff:87:e5:bf:f3:5d:b8:7a: 21:d1:99:33:99:aa:dd:91:15:45:c0:38:e8:ae:de: 4c:15:a0:28:d4:80:d7:11:06:c5:7d:13:86:13:23: 35:e9:a1:88:f1:00:69:6b:01:77:ea:f1:2a:e3:9b: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FF:FD:2B:DF:42:8C:F3:66:B5:2A:40:71:32:20:E6:FA:4C:A8:F2 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:66:13:fb:33:e1:ea:d1:90:f6:9d:56:3a:a0:a2:25:fe:ca: dd:a1:6e:0e:5a:63:4a:c6:d9:f1:16:3f:85:55:36:0d:4c:af: 38:3c:de:95:29:a4:04:cd:97:be:26:35:3d:3d:98:c4:a3:06: 5f:5b:36:64:fa:ac:aa:be:02:e7:40:2e:b0:eb:78:c7:a7:71: b6:af:37:77:a6:9d:1e:f1:eb:68:ac:3d:02:95:6f:c0:26:4d: d4:e0:6d:37:3c:aa:00:02:af:fc:c6:17:41:af:6e:ff:52:92: 22:c2:5e:d2:b8:cb:69:4f:5d:79:f7:38:0a:63:fd:36:8d:8e: 37:93:e4:c0:c3:f3:d8:8a:48:78:86:70:5e:17:bc:d2:2f:c9: 1f:7e:fd:96:d1:a9:47:83:f4:1e:de:32:92:53:84:51:ee:95: 4a:8e:60:a0:dc:c4:a1:f6:4c:d6:04:d7:31:26:48:62:69:a8: 06:d3:4c:9c:bf:94:8b:d3:3e:c6:a3:b4:36:34:4d:2d:6b:5c: f9:f1:db:98:ff:18:ff:8e:1a:7c:ac:26:e7:80:9a:1d:2d:be: c2:e4:db:60:f2:da:60:8a:2e:fc:fa:04:23:1b:e6:39:df:7e: 73:4d:23:61:a6:c6:bf:f1:ea:b4:f3:03:f4:f8:35:f7:f1:23: 58:99:0f:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjYwMzI1MDEyNDU0WhcNMjYwNDAxMDEyNDU0WjAYMRYwFAYD VQQDEw02OWMzMzk2Ny0xZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB9X2UJ4jKHnJnjDC0SNusr1JZO0DmMWMfbekuZNUjK3YEcndA+In2byeFwJ 9yS+oO8eSB1UjbFTj8UrCw1S9ipMewj3QKhqIaK7QarxlD2R+hqpvUaRGi0UHoxZ PSqA0SWT/InGkDb7T54DT/mM527N24h2dTm7U9siFi+JS7MFnHv8iaxrhyyhE4pc iwuJWkkWQvmvvTlwLJc7GI0J0pFw+Nkxf9UXMsXKfqf8E9h7OuGSD9axNbXgfjd+ YW61bZbgipBpiTlP/4flv/NduHoh0ZkzmardkRVFwDjort5MFaAo1IDXEQbFfROG EyM16aGI8QBpawF36vEq45v4+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPL//Svf QozzZrUqQHEyIOb6TKjyMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmYT+zPh6tGQ9p1WOqCiJf7K3aFuDlpjSsbZ8RY/hVU2DUyvODzelSmkBM2X viY1PT2YxKMGX1s2ZPqsqr4C50AusOt4x6dxtq83d6adHvHraKw9ApVvwCZN1OBt NzyqAAKv/MYXQa9u/1KSIsJe0rjLaU9defc4CmP9No2ON5PkwMPz2IpIeIZwXhe8 0i/JH379ltGpR4P0Ht4yklOEUe6VSo5goNzEofZM1gTXMSZIYmmoBtNMnL+Ui9M+ xqO0NjRNLWtc+fHbmP8Y/44afKwm54CaHS2+wuTbYPLaYIou/PoEIxvmOd9+c00j YabGv/HqtPMD9Pg19/EjWJkPiw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:15 2026 by rpki-client