$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json) Hash identifier: L62MpEfLkPiZFirMQY30DqCqO9RCCaLBXY098xbJ6m8= Subject key identifier: 29:A0:6E:E5:4F:4D:71:CC:6F:17:D3:00:30:84:6D:A0:21:C9:C5:22 Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft Manifest number: 2B Signing time: Wed 25 Mar 2026 07:58:45 +0000 Manifest this update: Wed 25 Mar 2026 07:58:44 +0000 Manifest next update: Wed 01 Apr 2026 07:58:44 +0000 Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: xQq/zmCGp+XMWm+VD8FHuWdySdpaYA14AZkGGqNhlGw=) 2: 95303322F20511F0873139314A6F56BC.roa (hash: 1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE Validity Not Before: Mar 25 07:58:44 2026 GMT Not After : Apr 1 07:58:44 2026 GMT Subject: CN=69c395b5-bd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bb:96:ac:72:17:27:d7:78:a2:78:c6:13:c8: 87:1e:ce:c4:3a:6a:31:c1:ea:68:3a:19:6e:18:67: c6:45:99:dd:4e:cf:fe:c3:2b:f2:46:b3:00:78:07: 73:ca:f6:2a:3a:75:8f:35:b1:41:e9:0c:45:9f:f0: d6:22:02:29:13:66:85:12:71:27:5b:ad:84:05:77: d0:95:d5:7f:cc:8d:bb:de:32:b1:72:aa:f2:3e:42: e5:76:0d:6e:b5:a7:2f:2f:b1:3a:f7:82:77:d6:84: 5f:e3:04:0b:b8:45:6d:6e:ea:f9:b9:56:e1:8c:fe: b8:9d:01:bc:b7:76:ff:a2:a4:d7:b8:5c:68:2f:ba: 5b:86:35:ee:05:2c:c4:f8:dc:c1:30:6a:6c:0c:3a: 20:22:15:d7:64:91:7e:a8:ae:72:7b:66:49:42:bb: 68:4a:bb:3c:37:2a:82:26:6d:68:1d:0e:ca:76:78: 9a:61:8e:7a:9d:f1:3c:a2:3f:da:33:cf:63:b0:ff: c8:50:f6:5b:4b:8d:20:1e:c2:53:18:0e:74:d3:63: cf:53:73:10:65:43:4c:0e:f3:44:74:38:30:18:0a: c7:05:24:36:bc:0a:20:68:86:e9:54:30:df:cc:c7: 7c:a1:49:46:e5:ca:a7:a7:00:a2:76:25:9d:ec:98: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:6E:E5:4F:4D:71:CC:6F:17:D3:00:30:84:6D:A0:21:C9:C5:22 X509v3 Authority Key Identifier: keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:75:ad:9d:02:f8:44:cd:22:f0:34:4a:e5:b7:9d:99:5e:a4: c5:ca:df:7a:34:62:44:3a:92:86:aa:4f:8f:4b:17:14:8c:bf: 26:63:a3:64:bf:d0:1e:ac:b4:c8:8f:7e:ed:93:7f:eb:55:cd: 2d:cf:9f:e8:57:62:51:da:02:48:91:4c:46:3b:51:80:8d:07: 1d:88:7a:89:fa:5b:e5:c2:be:cf:5d:2a:41:bb:83:c5:04:bf: 7e:0d:75:8a:b6:41:46:b0:10:c1:8b:b3:b2:20:c1:76:92:32: e8:b4:30:04:cf:4e:fd:77:b2:72:77:94:20:08:d0:cd:71:8f: cf:75:c3:7b:16:4b:2a:36:fb:ae:11:d6:1c:24:c1:67:29:0c: 70:3f:2f:b7:9a:d7:ce:c5:66:b5:3e:e8:aa:72:40:44:fe:35: 97:cd:90:cb:2f:d4:dc:e6:57:54:2b:08:66:d6:25:8f:69:5d: 1a:c4:01:3b:0e:4b:59:53:bd:d7:c6:d3:aa:5d:07:2f:b3:1d: 27:80:63:ed:32:d3:fc:93:5a:4f:48:af:89:73:20:8d:4b:c4: fc:07:16:fe:6c:c7:67:46:20:5d:d9:51:3d:07:4e:69:e7:4c: 14:7c:f6:27:90:21:e0:3f:60:02:d6:8b:c5:3f:a2:00:9a:ce: 73:1c:4d:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTI5MDExMC8GA1UEBRMoQkQzQ0M1RkY4NDI4RjJERTFDMzg2QkY4MDY4RDAyODc0 NTgwNkZDRTAeFw0yNjAzMjUwNzU4NDRaFw0yNjA0MDEwNzU4NDRaMBgxFjAUBgNV BAMTDTY5YzM5NWI1LWJkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1u5aschcn13iieMYTyIcezsQ6ajHB6mg6GW4YZ8ZFmd1Oz/7DK/JGswB4B3PK 9io6dY81sUHpDEWf8NYiAikTZoUScSdbrYQFd9CV1X/MjbveMrFyqvI+QuV2DW61 py8vsTr3gnfWhF/jBAu4RW1u6vm5VuGM/ridAby3dv+ipNe4XGgvuluGNe4FLMT4 3MEwamwMOiAiFddkkX6ornJ7ZklCu2hKuzw3KoImbWgdDsp2eJphjnqd8TyiP9oz z2Ow/8hQ9ltLjSAewlMYDnTTY89TcxBlQ0wO80R0ODAYCscFJDa8CiBohulUMN/M x3yhSUblyqenAKJ2JZ3smNhzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKaBu5U9N ccxvF9MAMIRtoCHJxSIwHwYDVR0jBBgwFoAUvTzF/4Qo8t4cOGv4Bo0Ch0WAb84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxMjkwLzQ0QUI0OTVBRjIw NTExRjBCRDI1ODYwNTRBNkY1NkJDL3ZUekZfNFFvOHQ0Y09HdjRCbzBDaDBXQWI4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdlR6Rl80UW84dDRjT0d2NEJvMENoMFdBYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx MjkwLzQ0QUI0OTVBRjIwNTExRjBCRDI1ODYwNTRBNkY1NkJDL3ZUekZfNFFvOHQ0 Y09HdjRCbzBDaDBXQWI4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtda2dAvhEzSLwNErlt52ZXqTFyt96NGJEOpKGqk+PSxcUjL8mY6Nkv9AerLTI j37tk3/rVc0tz5/oV2JR2gJIkUxGO1GAjQcdiHqJ+lvlwr7PXSpBu4PFBL9+DXWK tkFGsBDBi7OyIMF2kjLotDAEz079d7Jyd5QgCNDNcY/PdcN7FksqNvuuEdYcJMFn KQxwPy+3mtfOxWa1PuiqckBE/jWXzZDLL9Tc5ldUKwhm1iWPaV0axAE7DktZU73X xtOqXQcvsx0ngGPtMtP8k1pPSK+JcyCNS8T8Bxb+bMdnRiBd2VE9B05p50wUfPYn kCHgP2AC1ovFP6IAms5zHE2r -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:32 2026 by rpki-client