$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: H/OADTi2yNBji/rh0gCc/mYOXnBVmLdZ1FLOjWxLrEw= Subject key identifier: 5D:EE:75:A3:87:E6:78:62:15:A7:C8:A8:9B:AB:1A:FA:56:D7:5F:E2 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0D01 Signing time: Thu 26 Mar 2026 18:03:35 +0000 Manifest this update: Thu 26 Mar 2026 18:03:35 +0000 Manifest next update: Thu 02 Apr 2026 18:03:35 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: 5Ab4i34GRnawFf0KbrQEsfKvNhybkf1+eHQ+Ub1ZHOM=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Mar 26 18:03:35 2026 GMT Not After : Apr 2 18:03:35 2026 GMT Subject: CN=69c574f7-939d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:75:48:a1:05:33:4d:16:be:57:1a:d0:25: 93:51:7a:8d:1a:50:09:c8:fe:47:83:bf:ec:d1:d8: 83:97:4c:05:77:5a:bf:55:8c:2c:50:db:b1:0e:6c: 85:97:b2:ca:3c:10:3b:c8:3d:c4:63:3d:a3:d6:4a: 70:9e:4a:a2:ce:7e:c9:b7:b4:7d:1c:3f:46:95:36: d8:bb:e5:06:95:1b:3e:0f:cb:da:37:49:be:3f:db: bf:11:10:ec:67:77:b8:23:98:ab:90:51:96:75:c6: 66:5b:51:5e:50:eb:73:d3:a1:79:fb:c3:45:be:ca: 47:48:c7:d3:4b:88:08:e1:db:c2:dc:47:13:e3:89: e8:95:46:78:18:9c:fd:1e:c2:cf:e8:84:44:68:bd: 00:af:50:0d:4e:97:77:fc:4b:f1:ed:4b:c5:3c:27: ea:39:2d:ca:9a:60:20:99:be:2d:67:a7:cd:b8:c5: 12:a4:e1:d3:9a:44:71:4e:3d:31:0d:37:8c:35:ff: 9f:43:de:4b:11:c8:e3:0a:04:2d:39:10:3c:4a:44: 9a:1f:c7:97:73:c8:08:c5:4e:73:8f:e8:47:10:51: 65:30:70:d1:f0:aa:98:26:a6:c4:e2:6d:4b:41:31: 38:9c:e9:ea:d1:5d:22:91:91:24:af:fa:fe:3c:f6: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EE:75:A3:87:E6:78:62:15:A7:C8:A8:9B:AB:1A:FA:56:D7:5F:E2 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:5e:d1:9a:65:26:5a:b5:e0:e6:32:06:7c:6c:17:bb:d2: 3a:de:a0:26:e5:f7:26:81:48:39:5c:24:df:df:f6:6c:60:c9: f5:13:c5:b3:33:0f:06:66:1d:03:21:4d:dc:20:06:21:cf:b1: 92:aa:82:3e:8a:1d:43:a5:5d:e6:4f:00:ae:b6:92:28:44:8d: 36:aa:a5:75:5f:94:a3:6b:a0:01:ff:3c:97:4e:bb:12:62:43: 27:70:de:11:2f:5e:62:3c:ce:5f:b8:3e:11:7f:1a:98:1d:ea: 88:ed:37:e8:49:9f:6c:5a:32:76:04:d1:e8:58:6c:6d:3c:2e: 80:d0:a6:d5:e0:b3:98:71:2b:16:e8:f9:e8:f1:f3:be:08:cf: 63:ea:12:64:bc:88:a6:f9:9b:ff:1d:c0:d5:d3:e4:f9:b3:23: ea:a8:26:cc:36:03:8a:11:2b:c9:c7:50:a1:04:24:62:f6:60: af:28:71:8b:9d:fa:a4:97:c3:d5:45:8b:51:b3:63:53:ef:17: ff:f0:bb:16:62:29:c6:57:c5:56:d4:f6:d2:75:b9:a8:f1:a5: a1:5e:a6:d4:1a:26:dc:f1:be:e1:0b:f8:97:44:3a:d3:64:d9: 12:0b:89:11:e8:7c:17:76:c9:36:f7:f4:33:68:5c:d5:34:7c: 68:2c:58:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjYwMzI2MTgwMzM1WhcNMjYwNDAyMTgwMzM1WjAYMRYwFAYD VQQDEw02OWM1NzRmNy05MzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMR1SKEFM00Wvlca0CWTUXqNGlAJyP5Hg7/s0diDl0wFd1q/VYwsUNuxDmyF l7LKPBA7yD3EYz2j1kpwnkqizn7Jt7R9HD9GlTbYu+UGlRs+D8vaN0m+P9u/ERDs Z3e4I5irkFGWdcZmW1FeUOtz06F5+8NFvspHSMfTS4gI4dvC3EcT44nolUZ4GJz9 HsLP6IREaL0Ar1ANTpd3/Evx7UvFPCfqOS3KmmAgmb4tZ6fNuMUSpOHTmkRxTj0x DTeMNf+fQ95LEcjjCgQtORA8SkSaH8eXc8gIxU5zj+hHEFFlMHDR8KqYJqbE4m1L QTE4nOnq0V0ikZEkr/r+PPaC+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3udaOH 5nhiFafIqJurGvpW11/iMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKDte0ZplJlq14OYyBnxsF7vSOt6gJuX3JoFIOVwk39/2bGDJ9RPFszMPBmYd AyFN3CAGIc+xkqqCPoodQ6Vd5k8ArraSKESNNqqldV+Uo2ugAf88l067EmJDJ3De ES9eYjzOX7g+EX8amB3qiO036EmfbFoydgTR6FhsbTwugNCm1eCzmHErFuj56PHz vgjPY+oSZLyIpvmb/x3A1dPk+bMj6qgmzDYDihErycdQoQQkYvZgryhxi536pJfD 1UWLUbNjU+8X//C7FmIpxlfFVtT20nW5qPGloV6m1Bom3PG+4Qv4l0Q602TZEguJ Eeh8F3bJNvf0M2hc1TR8aCxYaw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:19 2026 by rpki-client