$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json) Hash identifier: R+mNrEadfj8V0ooNz1B/iTAvl9jSEnegEZC1yDuIG5o= Subject key identifier: CD:BF:4F:36:F4:5E:E8:E5:22:C4:1F:CD:09:3A:52:82:AC:EF:80:13 Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft Manifest number: 4B Signing time: Wed 25 Mar 2026 07:32:35 +0000 Manifest this update: Wed 25 Mar 2026 07:32:35 +0000 Manifest next update: Wed 01 Apr 2026 07:32:35 +0000 Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: yit31sJ0X+bPo/QnawIxw1f1dMuMkSgKsORipWki2+I=) 2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Mar 25 07:32:35 2026 GMT Not After : Apr 1 07:32:35 2026 GMT Subject: CN=69c38f93-b5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:03:96:2d:d0:e4:a2:ee:7b:f4:1a:11:2b: 2c:b2:b3:0d:79:a9:42:e5:1e:69:2b:1f:4a:b4:a9: d3:cb:86:05:9a:c2:d3:ef:88:ba:0c:39:8d:d3:b3: 86:89:8a:6c:96:27:61:6c:e6:32:ce:11:8c:5c:41: f3:46:da:90:df:20:b0:77:c3:b8:d9:c6:4a:48:a1: dd:b0:38:03:8f:41:dc:ac:b6:7d:e3:76:4e:45:14: 99:e3:3e:53:0b:dd:fb:6d:46:b1:59:30:bb:84:21: 30:3b:0e:3f:12:5f:5d:6c:c0:1d:4b:14:5a:70:ef: f5:e4:c5:52:ed:b5:b2:95:fb:43:a9:5f:e9:ca:08: ef:fb:12:94:34:e1:24:e9:d6:ff:5b:c2:18:91:94: 4e:e6:3e:d2:ef:55:36:13:f0:60:78:5b:17:c2:8e: a9:57:9a:a7:77:19:c7:6e:18:c0:ae:c6:fd:f1:08: 7d:f6:22:e1:25:7d:80:0f:2f:9d:8c:a1:7d:c8:0c: 25:a2:73:28:77:1b:4b:5f:15:bc:0e:e9:4d:46:c9: 89:52:3f:8e:f6:f8:33:96:d8:da:de:10:a8:ef:2f: d1:9b:6a:28:2a:4e:6b:0f:b1:9e:f0:4f:6d:ac:38: 7c:b3:fd:75:37:45:18:79:cd:e5:01:e6:b9:bf:a5: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:4F:36:F4:5E:E8:E5:22:C4:1F:CD:09:3A:52:82:AC:EF:80:13 X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:03:27:e6:5e:b0:b8:e2:13:c7:cf:a9:75:3c:a4:28:73:91: 22:64:b9:60:57:25:d5:bd:7f:58:fc:f9:08:49:d2:51:61:95: 74:de:b6:6d:92:fc:58:31:c0:82:6e:5c:16:9e:4f:0d:6f:f1: 3f:ce:90:4f:d4:74:3b:08:5c:d2:e9:07:5c:39:1c:b8:0f:f7: 4f:26:a7:9b:e1:c2:f1:35:4c:6f:75:51:76:c3:34:df:98:c5: 18:57:a6:26:8a:8d:b2:15:45:bd:06:98:dc:ef:d0:d6:cb:83: a5:de:43:59:41:d2:2a:48:c8:da:94:36:2e:a4:38:22:73:14: ce:43:2b:6d:89:5c:4f:65:01:49:0a:c0:e0:d9:c7:ae:b4:90: fb:8a:cb:8d:6e:48:82:2f:64:03:ae:a1:61:b6:86:d7:2e:73: b5:ef:47:f1:0b:13:cc:89:a0:14:e1:03:d0:25:b4:c4:42:0d: 5f:9d:49:0f:dc:b2:6b:d3:da:c4:c3:95:46:ac:ac:b0:c1:65: c1:a4:e3:91:cf:80:94:9e:d0:a8:e0:5b:49:3a:82:dc:64:12: c2:23:e2:a8:5c:ee:c8:b9:22:64:a3:96:29:4a:be:11:98:d9: 54:dc:87:0e:e8:b3:fd:96:3e:53:ae:a2:92:5c:49:a3:c7:b0: 2b:fd:f8:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNjAzMjUwNzMyMzVaFw0yNjA0MDEwNzMyMzVaMBgxFjAUBgNV BAMTDTY5YzM4ZjkzLWI1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSdQOWLdDkou579BoRKyyysw15qULlHmkrH0q0qdPLhgWawtPviLoMOY3Ts4aJ imyWJ2Fs5jLOEYxcQfNG2pDfILB3w7jZxkpIod2wOAOPQdystn3jdk5FFJnjPlML 3fttRrFZMLuEITA7Dj8SX11swB1LFFpw7/XkxVLttbKV+0OpX+nKCO/7EpQ04STp 1v9bwhiRlE7mPtLvVTYT8GB4WxfCjqlXmqd3GcduGMCuxv3xCH32IuElfYAPL52M oX3IDCWicyh3G0tfFbwO6U1GyYlSP472+DOW2NreEKjvL9GbaigqTmsPsZ7wT22s OHyz/XU3RRh5zeUB5rm/pfMhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzb9PNvRe 6OUixB/NCTpSgqzvgBMwHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JU UnRONnZhUHBHVDBsU05tRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCxAyfmXrC44hPHz6l1PKQoc5EiZLlgVyXVvX9Y/PkISdJRYZV03rZtkvxYMcCC blwWnk8Nb/E/zpBP1HQ7CFzS6QdcORy4D/dPJqeb4cLxNUxvdVF2wzTfmMUYV6Ym io2yFUW9Bpjc79DWy4Ol3kNZQdIqSMjalDYupDgicxTOQyttiVxPZQFJCsDg2ceu tJD7isuNbkiCL2QDrqFhtobXLnO170fxCxPMiaAU4QPQJbTEQg1fnUkP3LJr09rE w5VGrKywwWXBpOORz4CUntCo4FtJOoLcZBLCI+KoXO7IuSJko5YpSr4RmNlU3IcO 6LP9lj5TrqKSXEmjx7Ar/fig -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:06 2026 by rpki-client