$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: Z4S45Cr6J9nTxKtF3RkyL4+mDTvDlDssbbt8a99un8s= Subject key identifier: 51:46:CC:95:5D:E2:9B:09:9A:CE:D7:B9:98:29:99:29:27:8D:46:7B Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 12CC Signing time: Tue 24 Mar 2026 16:58:50 +0000 Manifest this update: Tue 24 Mar 2026 16:58:50 +0000 Manifest next update: Tue 31 Mar 2026 16:58:50 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: MkxSc2M18fHWFsDOCsDe7pXAZOUe1j3ZpbD1ZZr7Wh8=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 1ZUq5NCREZOo2LQMgkIbmL4UYX8AA9o4c/aesFsgTbA=) 3: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=) 4: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: 6pBpzLM6AsUWTi7HiPNltFuDwVz6aOh08vQSqO/jQ4w=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: M3/7gK5yasNkjST7Ays8iveBfXArPTJGdrFL1I2CXxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4881 (0x1311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Mar 24 16:58:50 2026 GMT Not After : Mar 31 16:58:50 2026 GMT Subject: CN=69c2c2ca-1737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:b4:24:c6:f3:33:c2:35:a4:57:8c:4d:d5: b1:a0:d5:c7:e9:c6:2e:11:bc:7c:8e:a0:d2:ee:8c: 55:3a:4a:30:4c:d6:4b:34:66:78:6c:64:69:32:15: 07:cf:c2:d0:c4:7f:06:5c:1c:ba:20:7d:d7:63:dc: 27:9f:ff:c2:b9:2d:14:4a:64:3d:97:a9:19:90:4e: 8f:27:24:b7:30:f2:7d:ca:5e:f7:a0:78:cc:54:b3: 1c:01:41:6e:55:ed:0e:75:47:ba:1b:87:0d:76:e2: 65:14:ed:7d:67:e8:fd:1e:22:67:4b:6f:e4:b9:f4: c4:57:aa:df:0b:10:2b:86:2d:78:05:5a:83:d4:38: 2d:58:e2:d0:4c:0f:36:4f:aa:7c:f8:38:cb:05:14: 43:ba:d9:cf:da:ac:94:f6:7d:0d:8d:e7:0a:ae:4b: 6a:9f:ed:11:da:41:0f:29:cc:a3:8b:48:8b:7c:b6: 36:e9:b4:f5:d5:db:c3:08:70:e6:25:48:f8:48:9d: 32:60:34:20:2e:ac:9a:1e:5f:ce:1f:33:d4:56:f7: 73:bf:46:a4:3c:df:c5:c5:92:38:e7:db:b7:ea:56: 35:3e:11:7e:7c:96:61:8d:b3:0c:13:e8:23:83:4a: 66:7b:8f:7a:d3:c9:7f:02:a5:47:73:2a:97:90:32: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:46:CC:95:5D:E2:9B:09:9A:CE:D7:B9:98:29:99:29:27:8D:46:7B X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:b4:52:09:c9:6e:da:35:9e:26:c1:ab:73:07:e0:4f:1a:3e: c2:69:25:19:73:1c:f3:60:96:90:13:b5:2f:04:47:fa:51:5c: c0:fa:b3:50:e2:f5:b3:e7:57:82:8b:77:23:48:a5:9c:38:33: 4b:1e:b0:4e:43:8d:2d:48:01:49:42:57:ef:20:bb:d3:9e:c7: 79:f1:04:d7:cf:b9:f1:35:82:2f:11:81:87:f0:3a:15:d8:57: 86:cc:08:bf:97:b2:0e:45:31:86:c4:ec:df:ad:e0:67:68:57: 44:05:58:cd:39:78:e1:ba:f1:64:47:3b:c5:bc:da:38:bb:09: c7:69:57:11:92:e4:39:cd:15:d6:72:dc:fb:66:32:bf:aa:3e: 66:9a:23:aa:68:17:2e:ee:f3:c3:40:01:a4:0c:48:fd:dd:38: 1a:9b:c9:9b:bc:f9:2d:f5:7b:14:87:25:7d:1d:3b:21:ac:b6: ef:2b:69:72:0c:f8:ef:50:68:7a:f4:b4:7d:1c:b8:26:00:56: 59:2e:ef:b7:fb:d8:95:2d:83:51:53:56:d5:a8:a3:82:b3:07: 67:cd:05:2a:a4:f2:86:af:e8:b7:bf:cb:1f:91:43:de:dc:ec: 78:d3:ae:f3:3a:db:82:a7:89:6e:a1:88:98:57:9b:43:e1:8a: 57:8f:31:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwMzI0MTY1ODUwWhcNMjYwMzMxMTY1ODUwWjAYMRYwFAYD VQQDEw02OWMyYzJjYS0xNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5e0JMbzM8I1pFeMTdWxoNXH6cYuEbx8jqDS7oxVOkowTNZLNGZ4bGRpMhUH z8LQxH8GXBy6IH3XY9wnn//CuS0USmQ9l6kZkE6PJyS3MPJ9yl73oHjMVLMcAUFu Ve0OdUe6G4cNduJlFO19Z+j9HiJnS2/kufTEV6rfCxArhi14BVqD1DgtWOLQTA82 T6p8+DjLBRRDutnP2qyU9n0NjecKrktqn+0R2kEPKcyji0iLfLY26bT11dvDCHDm JUj4SJ0yYDQgLqyaHl/OHzPUVvdzv0akPN/FxZI459u36lY1PhF+fJZhjbMME+gj g0pme49608l/AqVHcyqXkDLCdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFGzJVd 4psJms7XuZgpmSknjUZ7MB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu7RSCclu2jWeJsGrcwfgTxo+wmklGXMc82CWkBO1LwRH+lFcwPqzUOL1s+dX got3I0ilnDgzSx6wTkONLUgBSUJX7yC7057HefEE18+58TWCLxGBh/A6FdhXhswI v5eyDkUxhsTs363gZ2hXRAVYzTl44brxZEc7xbzaOLsJx2lXEZLkOc0V1nLc+2Yy v6o+ZpojqmgXLu7zw0ABpAxI/d04GpvJm7z5LfV7FIclfR07Iay27ytpcgz471Bo evS0fRy4JgBWWS7vt/vYlS2DUVNW1aijgrMHZ80FKqTyhq/ot7/LH5FD3tzseNOu 8zrbgqeJbqGImFebQ+GKV48x7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:45 2026 by rpki-client