$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: 34Jon3F4FqgNLQBEg/D/LJFODF3ObTe5GauoPT3VxGQ= Subject key identifier: 70:09:D4:5A:B1:AF:3C:DE:38:B9:82:5C:2E:B6:73:9B:1D:AB:57:88 Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 058D Signing time: Tue 24 Mar 2026 22:56:16 +0000 Manifest this update: Tue 24 Mar 2026 22:56:16 +0000 Manifest next update: Tue 31 Mar 2026 22:56:16 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: W/1qpVm7k2/ePC1P3OJXuLJesMe7aI1Zs9wbohoTOgM=) 2: 7A93FBCE92CA11F08DC37F48C4F9AE02.roa (hash: NB4pzvyV9P+LNJLml35IfgjAiIeJce8vTwXZQXDxhRo=) 3: AFB22EC892C211F0A3854712C4F9AE02.roa (hash: C9httljUzii7v4u7kHINBjQrOE0KE6l+urPuufPCT3I=) 4: D575368892D011F0B767031EC4F9AE02.roa (hash: +49R+niUVHEGa6s++c9bW33UyinzUzW6Yjq4fPcKfcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: Mar 24 22:56:16 2026 GMT Not After : Mar 31 22:56:16 2026 GMT Subject: CN=69c31690-3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:e6:2b:39:c6:2a:2b:bb:f8:29:42:1d:5f: f0:7a:6d:8e:0a:97:a2:35:3d:34:dc:a0:26:91:1f: be:a9:e5:d6:96:08:94:8e:b8:08:5b:32:38:bc:98: 02:7c:7f:11:fc:05:e5:9f:a4:8f:05:2a:53:2e:c3: d6:0f:e9:ea:59:37:cf:b6:03:e8:f5:bb:1f:7b:a9: 3e:50:59:91:bd:79:6a:fc:dd:6d:44:8d:bd:b9:db: ac:f0:fc:10:89:9d:0b:9f:13:b6:a2:91:89:59:b0: 6b:ec:61:8d:02:28:8e:df:ea:b5:72:44:41:e8:05: 7b:fa:b3:11:11:df:66:3b:84:bb:96:7a:c2:be:9f: 2f:dc:2c:29:d1:5b:a5:10:e5:09:08:2a:c0:c9:fe: d8:fe:5e:4f:d6:2c:ea:d5:11:a7:85:27:28:21:bc: 83:85:25:6f:d8:0f:81:b4:ca:97:8c:1b:a9:77:49: ce:e9:c0:73:39:f1:4f:52:7f:45:be:e7:72:67:df: ef:05:e8:d2:62:d0:45:bb:df:67:48:f1:1d:dc:6e: 88:ae:26:fa:3c:ce:48:37:86:02:52:72:77:3a:3a: 78:5b:47:ca:1b:3c:20:7f:04:d3:f5:eb:7a:f7:89: 46:db:80:31:e1:c7:40:9f:9f:09:ad:0b:40:2d:29: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:09:D4:5A:B1:AF:3C:DE:38:B9:82:5C:2E:B6:73:9B:1D:AB:57:88 X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:35:a9:0e:52:26:b1:dd:af:13:8e:58:4f:37:f0:b3:c5:16: 75:9d:47:fb:26:17:da:a5:e7:23:e8:de:6f:31:42:17:42:11: 78:79:ff:c4:e8:c8:f2:96:81:5f:10:7b:a5:d7:36:fa:a3:13: 7f:2b:d6:0b:f4:fa:da:e3:15:62:ed:97:15:11:55:90:ea:35: a8:dd:50:1e:c7:6d:08:2c:2f:61:c3:56:82:d5:7c:b7:2d:80: e1:22:58:41:40:73:3e:7e:e2:4b:68:a0:ef:63:60:21:fe:74: 3f:0f:4e:08:e2:67:bf:ec:f4:2f:89:39:94:05:74:48:87:77: e5:ad:79:12:e1:d5:0a:9a:7d:e4:55:f1:f7:8a:32:01:74:c7: ba:27:32:46:02:2a:28:6c:40:fa:30:7c:c1:d1:21:4f:a1:c5: 83:e6:e6:32:94:2b:ed:8e:eb:e7:f4:05:2b:9a:df:8b:50:60: 48:df:db:76:3d:bd:cc:ca:b7:65:70:36:6c:54:ba:8a:17:a6: 35:1f:72:46:20:2f:3c:3f:49:7d:b8:3b:3a:72:f0:ff:7f:82: 5e:fc:00:57:6a:1e:64:94:da:93:d4:a5:15:63:bc:2c:45:51: 17:68:a4:e1:7a:c9:0b:2c:7b:65:c9:e4:f9:9e:0e:65:79:0d: 54:52:32:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjYwMzI0MjI1NjE2WhcNMjYwMzMxMjI1NjE2WjAYMRYwFAYD VQQDEw02OWMzMTY5MC0zZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tHmKznGKiu7+ClCHV/wem2OCpeiNT003KAmkR++qeXWlgiUjrgIWzI4vJgC fH8R/AXln6SPBSpTLsPWD+nqWTfPtgPo9bsfe6k+UFmRvXlq/N1tRI29udus8PwQ iZ0LnxO2opGJWbBr7GGNAiiO3+q1ckRB6AV7+rMREd9mO4S7lnrCvp8v3Cwp0Vul EOUJCCrAyf7Y/l5P1izq1RGnhScoIbyDhSVv2A+BtMqXjBupd0nO6cBzOfFPUn9F vudyZ9/vBejSYtBFu99nSPEd3G6Irib6PM5IN4YCUnJ3Ojp4W0fKGzwgfwTT9et6 94lG24Ax4cdAn58JrQtALSl0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAJ1Fqx rzzeOLmCXC62c5sdq1eIMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEzWpDlImsd2vE45YTzfws8UWdZ1H+yYX2qXnI+jebzFCF0IReHn/xOjI8paB XxB7pdc2+qMTfyvWC/T62uMVYu2XFRFVkOo1qN1QHsdtCCwvYcNWgtV8ty2A4SJY QUBzPn7iS2ig72NgIf50Pw9OCOJnv+z0L4k5lAV0SId35a15EuHVCpp95FXx94oy AXTHuicyRgIqKGxA+jB8wdEhT6HFg+bmMpQr7Y7r5/QFK5rfi1BgSN/bdj29zMq3 ZXA2bFS6ihemNR9yRiAvPD9Jfbg7OnLw/3+CXvwAV2oeZJTak9SlFWO8LEVRF2ik 4XrJCyx7Zcnk+Z4OZXkNVFIysQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:25:56 2026 by rpki-client