$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: U6zT9LmYHrQrVDbCuKCDCHeSY2QRgg003nHC20Pad/A= Subject key identifier: 3E:D3:A6:21:FF:14:D9:F6:6A:B9:0D:FD:65:AD:B0:AC:EB:F2:7A:8C Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 289B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 2877 Signing time: Tue 24 Mar 2026 15:33:13 +0000 Manifest this update: Tue 24 Mar 2026 15:33:13 +0000 Manifest next update: Tue 31 Mar 2026 15:33:13 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: /YW4WT3ar5cq1lHHi7xZC4dAQ8RW/uV3ldKxeIsO1Pc=) 2: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: 9GVylNABRiUF/bNFB+XBrQ4aT79hVzEVLhbNM6JQTPs=) 3: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: QOUfW1TvLM3TNftLaWNGliib5JWln6/7ufAzFMko72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10395 (0x289b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Mar 24 15:33:13 2026 GMT Not After : Mar 31 15:33:13 2026 GMT Subject: CN=69c2aeb9-7134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:54:92:1e:9e:cb:63:ac:1e:c3:a6:c6:8e: 58:7d:d3:d6:b2:b4:53:21:1c:b6:5b:8a:3a:aa:5c: e2:5c:06:38:c8:52:eb:24:ce:84:be:a7:4d:03:92: a5:16:74:97:90:9c:6a:6a:d9:86:b7:84:f4:d3:33: 5c:7d:59:fa:83:63:87:b0:66:70:d1:8c:b1:44:90: b2:16:a5:ae:a9:63:6c:76:cd:3b:5c:ff:dc:0e:9b: fa:e7:80:b9:c6:f6:ed:ed:6c:e4:9d:2c:dd:d7:58: bb:97:06:c3:10:29:4c:02:81:70:42:e9:df:68:6c: d2:27:81:5d:c4:f6:83:52:60:39:3f:5a:94:85:17: 57:03:ae:ac:34:39:03:42:87:5e:6c:d0:39:ce:a0: 1c:00:d8:fc:bf:98:d6:ee:14:78:99:c8:02:ee:f7: c3:be:55:c1:87:05:65:8f:0c:dc:cd:85:fb:df:c9: 20:fc:08:a6:f1:34:dd:69:5b:53:47:0a:13:14:21: 94:90:45:83:38:f0:41:f1:97:dd:6b:ae:83:0c:41: 4f:29:6c:f5:d9:62:57:b6:b4:c2:47:b5:0e:5c:90: 58:10:5e:13:e0:83:af:d5:cb:5d:4c:fc:80:3c:17: ed:20:18:b6:a7:8a:96:b9:8d:8a:84:96:f5:a2:52: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D3:A6:21:FF:14:D9:F6:6A:B9:0D:FD:65:AD:B0:AC:EB:F2:7A:8C X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:78:83:d2:27:8a:fd:51:75:ae:01:a2:07:2b:b2:ca:3d: 7c:b8:52:26:eb:08:f8:56:e8:76:51:21:67:fe:0f:f8:38:fd: 17:3a:52:30:09:52:65:a4:90:98:6a:81:5c:ad:34:72:2a:27: ae:80:8d:37:2d:f6:b4:b0:a6:63:75:50:6a:fd:94:69:59:a3: 06:dc:db:54:57:34:27:bb:8d:48:f8:ba:74:a1:39:0e:cf:6d: dc:20:7e:09:74:d3:0c:1f:45:35:7a:c0:28:a6:b5:5d:b8:c5: 67:b9:08:99:23:f8:3a:2e:27:a1:0b:a4:61:d5:7f:1d:75:95: 96:e5:c2:7d:b6:02:95:0d:ac:9a:36:42:44:c6:55:ce:11:8b: 97:b4:81:57:ea:52:07:af:cf:ca:5d:7b:be:5a:80:d9:04:c1: 66:03:8a:89:d7:c4:3d:32:3a:44:24:55:f0:e8:24:ea:c6:d0: 75:f7:ab:bc:fc:b5:88:8f:74:af:5a:10:3e:a4:3d:03:31:0e: 5e:d7:f4:cd:08:d6:df:11:51:11:38:a8:7d:44:d4:ac:c1:34: 2f:00:ed:c3:2f:9e:e6:2a:6c:db:08:11:cd:8c:25:04:ff:4c: f7:29:c4:90:60:ff:75:81:32:0a:dd:d1:7c:17:84:ef:45:e5: 86:77:12:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwMzI0MTUzMzEzWhcNMjYwMzMxMTUzMzEzWjAYMRYwFAYD VQQDEw02OWMyYWViOS03MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsABUkh6ey2OsHsOmxo5YfdPWsrRTIRy2W4o6qlziXAY4yFLrJM6EvqdNA5Kl FnSXkJxqatmGt4T00zNcfVn6g2OHsGZw0YyxRJCyFqWuqWNsds07XP/cDpv654C5 xvbt7WzknSzd11i7lwbDEClMAoFwQunfaGzSJ4FdxPaDUmA5P1qUhRdXA66sNDkD QodebNA5zqAcANj8v5jW7hR4mcgC7vfDvlXBhwVljwzczYX738kg/Aim8TTdaVtT RwoTFCGUkEWDOPBB8Zfda66DDEFPKWz12WJXtrTCR7UOXJBYEF4T4IOv1ctdTPyA PBftIBi2p4qWuY2KhJb1olI88wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7TpiH/ FNn2arkN/WWtsKzr8nqMMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj+d4g9Iniv1Rda4Bogcrsso9fLhSJusI+FbodlEhZ/4P+Dj9FzpSMAlSZaSQ mGqBXK00cionroCNNy32tLCmY3VQav2UaVmjBtzbVFc0J7uNSPi6dKE5Ds9t3CB+ CXTTDB9FNXrAKKa1XbjFZ7kImSP4Oi4noQukYdV/HXWVluXCfbYClQ2smjZCRMZV zhGLl7SBV+pSB6/Pyl17vlqA2QTBZgOKidfEPTI6RCRV8Ogk6sbQdfervPy1iI90 r1oQPqQ9AzEOXtf0zQjW3xFRETiofUTUrME0LwDtwy+e5ips2wgRzYwlBP9M9ynE kGD/dYEyCt3RfBeE70XlhncS/Q== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:57 2026 by rpki-client