$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: EfounFlC4W1K17np9PwKj341QO17Pn4xZZ2uzwzS/MQ= Subject key identifier: F6:C6:6C:A6:83:4D:0C:86:57:87:87:DE:6A:C5:D2:73:AB:CB:D0:61 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0CFA Signing time: Tue 24 Mar 2026 17:59:46 +0000 Manifest this update: Tue 24 Mar 2026 17:59:45 +0000 Manifest next update: Tue 31 Mar 2026 17:59:45 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: KXTlX5Ao19bTUCT08sluWCHcfKnwUON/5mTZNTSweD4=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Mar 24 17:59:45 2026 GMT Not After : Mar 31 17:59:45 2026 GMT Subject: CN=69c2d112-a050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:9f:ab:06:df:c4:9a:86:00:d7:02:13:56: b0:0b:b4:fa:56:ca:52:aa:76:b9:69:c6:b6:36:e6: 87:92:18:11:68:09:67:18:9a:1b:8d:2f:73:9e:eb: f1:a2:fc:63:d0:d2:ad:69:0c:21:a1:ba:cf:f0:e5: b0:41:a7:45:42:f0:c6:2b:03:0c:32:54:32:51:09: 87:b0:99:8a:de:ed:a7:01:0e:c8:82:fc:bd:a3:46: e2:07:3b:84:d4:19:d6:bb:6a:1d:0c:cb:4b:cb:35: 4b:27:66:6a:7f:b4:88:00:01:e6:f3:40:dd:f0:b7: f6:08:b6:ea:04:06:ad:e0:42:2a:d3:ff:c0:51:dc: 8a:c1:be:f6:4a:bc:55:72:79:57:de:13:56:d9:80: cb:82:f1:de:46:27:d2:c3:83:c1:db:fd:f3:77:aa: 8d:ce:4a:7b:af:76:5d:7d:64:f8:4d:6b:b9:ae:34: c6:c9:0a:91:74:7c:51:63:55:07:22:43:0b:04:64: d0:f7:ae:ef:b1:a4:e5:26:f9:97:e5:79:e4:e1:4a: ac:58:d5:cc:8c:d1:8a:74:93:b1:38:e8:61:61:a5: a0:9f:97:04:d5:81:b0:6f:69:7b:19:59:75:6a:41: 90:03:2d:73:a1:05:82:47:25:83:f6:f3:ec:1c:ac: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:6C:A6:83:4D:0C:86:57:87:87:DE:6A:C5:D2:73:AB:CB:D0:61 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6d:63:44:bf:4f:d1:b5:da:2d:8b:9d:01:80:41:07:ce:59: 2e:f4:09:bc:ce:d4:23:a1:a1:64:f8:64:5a:97:fa:ec:dc:ff: 9d:19:9a:29:c4:1b:57:8a:6d:9b:e3:a9:3e:ce:54:d1:10:ff: 1d:76:ef:63:81:1d:07:0c:04:bd:96:bf:21:93:56:db:d5:af: e1:7d:82:71:15:69:cb:78:b1:0c:c9:f8:d3:5d:d9:35:9d:11: a1:db:72:09:16:6a:84:a7:95:8c:f4:e1:f4:0c:9a:a8:4e:7e: 4a:ce:fa:5d:b5:2f:50:b4:04:15:59:61:6a:a5:31:1c:d9:32: a0:a3:6e:93:b7:f6:00:31:02:04:e4:04:1f:07:63:4d:b3:53: 9f:1e:ac:e5:df:b5:cc:8a:c0:87:7e:25:81:a0:18:f0:0c:f3: ff:50:5f:c6:b0:54:a2:af:ca:97:b2:93:d1:5a:29:13:e6:72: ac:2d:a2:36:bb:6d:3a:bc:ec:06:dc:6e:76:1f:40:66:a7:7c: 3a:bd:96:29:62:65:04:26:1d:3b:e3:81:37:1b:cc:96:e5:93: 33:69:78:b1:f6:b2:b5:8f:e0:75:85:20:21:3a:3c:ab:e1:a2: a4:54:64:c3:91:87:10:a3:d5:3e:f7:14:1d:9b:f0:89:f2:2c: 65:d6:1c:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwMzI0MTc1OTQ1WhcNMjYwMzMxMTc1OTQ1WjAYMRYwFAYD VQQDEw02OWMyZDExMi1hMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsWfqwbfxJqGANcCE1awC7T6VspSqna5aca2NuaHkhgRaAlnGJobjS9znuvx ovxj0NKtaQwhobrP8OWwQadFQvDGKwMMMlQyUQmHsJmK3u2nAQ7Igvy9o0biBzuE 1BnWu2odDMtLyzVLJ2Zqf7SIAAHm80Dd8Lf2CLbqBAat4EIq0//AUdyKwb72SrxV cnlX3hNW2YDLgvHeRifSw4PB2/3zd6qNzkp7r3ZdfWT4TWu5rjTGyQqRdHxRY1UH IkMLBGTQ967vsaTlJvmX5Xnk4UqsWNXMjNGKdJOxOOhhYaWgn5cE1YGwb2l7GVl1 akGQAy1zoQWCRyWD9vPsHKyFHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbGbKaD TQyGV4eH3mrF0nOry9BhMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoG1jRL9P0bXaLYudAYBBB85ZLvQJvM7UI6GhZPhkWpf67Nz/nRmaKcQbV4pt m+OpPs5U0RD/HXbvY4EdBwwEvZa/IZNW29Wv4X2CcRVpy3ixDMn4013ZNZ0Rodty CRZqhKeVjPTh9AyaqE5+Ss76XbUvULQEFVlhaqUxHNkyoKNuk7f2ADECBOQEHwdj TbNTnx6s5d+1zIrAh34lgaAY8Azz/1BfxrBUoq/Kl7KT0VopE+ZyrC2iNrttOrzs Btxudh9AZqd8Or2WKWJlBCYdO+OBNxvMluWTM2l4sfaytY/gdYUgITo8q+GipFRk w5GHEKPVPvcUHZvwifIsZdYcdg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:32 2026 by rpki-client