$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: tP8cuHBB+ajFfikiUt0EEmHDZK6XPkSglnPJ7nrT3gw= Subject key identifier: A8:05:AB:63:61:AE:16:E3:CF:D0:F1:98:69:C0:EF:EF:5B:C4:A9:1D Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 01F4 Signing time: Wed 25 Mar 2026 02:40:16 +0000 Manifest this update: Wed 25 Mar 2026 02:40:15 +0000 Manifest next update: Wed 01 Apr 2026 02:40:15 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: dZkcuq0V1V+V8AGH8PLIDkE8GgTAMu6Ao4iUthpQsGE=) 2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Mar 25 02:40:15 2026 GMT Not After : Apr 1 02:40:15 2026 GMT Subject: CN=69c34b10-2c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8c:3b:e7:1a:b5:8e:a1:d5:dc:81:6d:9f:2d: 9f:09:48:6f:55:9c:b9:94:3e:cd:3a:14:05:70:d2: 6c:ee:e1:c5:74:93:db:e5:df:cb:18:4f:9f:4c:b7: 67:37:a6:90:14:3f:e2:a5:60:aa:b6:b6:34:b3:82: 8c:99:e1:48:7a:fa:e2:94:c8:48:77:db:2a:fa:ec: 14:cd:a2:86:e7:37:3b:9d:d7:57:98:fc:ac:73:b8: 4b:d0:8e:63:0e:43:cc:66:18:ad:73:0f:c1:b4:c0: 37:6f:58:9c:00:48:c3:c8:d5:a1:84:d9:7c:33:e0: 70:c4:98:7c:de:e6:4a:8d:ce:7e:f0:b3:7d:74:90: 43:fd:f0:dc:a6:67:e6:48:ea:99:c8:8e:65:af:31: bc:59:34:b4:da:46:39:09:17:a8:ce:21:19:18:a0: fd:06:43:e4:45:87:af:d9:6f:30:29:ee:98:63:51: 3e:f7:dd:1c:ad:db:c1:49:d9:d7:a9:03:ff:b9:8e: ca:dc:e3:66:1a:9f:c2:a6:b8:f3:bb:f6:2e:e5:55: b7:7e:b3:54:00:f2:76:c4:ad:62:17:50:bb:d1:96: 7a:c5:ce:7d:d0:00:88:db:cd:00:66:c0:24:77:7c: 0c:2a:d3:ff:f3:2e:0a:c4:2d:21:39:35:f5:e9:1f: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:AB:63:61:AE:16:E3:CF:D0:F1:98:69:C0:EF:EF:5B:C4:A9:1D X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:60:73:27:22:cc:e5:71:73:f9:f0:34:2a:85:d5:3d:82:0e: 9c:11:cc:c4:69:57:cf:fd:e7:a8:e2:44:da:fe:28:e6:b1:81: 13:cc:0c:27:8c:6c:10:54:e6:d2:0b:38:67:1d:93:71:bf:4e: 2a:06:2d:0c:b8:ae:81:10:3a:3b:18:f4:25:22:da:e0:28:2a: 4b:25:08:76:c8:3d:e2:21:bd:31:e1:65:01:7f:4b:d5:6f:96: 06:af:70:8a:74:c1:50:4c:5f:4b:b4:1f:45:b7:4f:35:f4:6a: ae:1e:27:c6:63:98:0e:e3:f5:3b:a4:1d:c0:02:f7:3e:8f:71: 3c:8f:52:7b:26:92:06:bd:27:f1:3d:1d:ec:e6:21:f0:cf:1a: d4:3f:8c:5c:73:98:04:34:0f:b0:f1:77:e7:b8:3a:9d:e3:c9: 09:9c:0a:25:a3:a8:53:f1:9d:11:15:74:77:c4:b2:74:d2:ee: c1:1f:7a:9b:24:a1:f3:bc:87:3b:d8:b5:25:fa:29:6a:52:1a: 88:78:b9:2b:2c:83:c7:17:3c:64:32:da:5e:3e:4c:31:57:aa: 86:38:e7:7b:90:a1:fb:12:4d:dc:d7:c3:92:e0:bd:80:b7:5a: ee:86:2e:da:a3:68:ee:96:9a:74:91:f3:d4:f3:35:b4:6c:e7: 8f:b9:62:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjYwMzI1MDI0MDE1WhcNMjYwNDAxMDI0MDE1WjAYMRYwFAYD VQQDEw02OWMzNGIxMC0yYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Iw75xq1jqHV3IFtny2fCUhvVZy5lD7NOhQFcNJs7uHFdJPb5d/LGE+fTLdn N6aQFD/ipWCqtrY0s4KMmeFIevrilMhId9sq+uwUzaKG5zc7nddXmPysc7hL0I5j DkPMZhitcw/BtMA3b1icAEjDyNWhhNl8M+BwxJh83uZKjc5+8LN9dJBD/fDcpmfm SOqZyI5lrzG8WTS02kY5CReoziEZGKD9BkPkRYev2W8wKe6YY1E+990crdvBSdnX qQP/uY7K3ONmGp/Cprjzu/Yu5VW3frNUAPJ2xK1iF1C70ZZ6xc590ACI280AZsAk d3wMKtP/8y4KxC0hOTX16R+ilQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgFq2Nh rhbjz9DxmGnA7+9bxKkdMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk2BzJyLM5XFz+fA0KoXVPYIOnBHMxGlXz/3nqOJE2v4o5rGBE8wMJ4xsEFTm 0gs4Zx2Tcb9OKgYtDLiugRA6Oxj0JSLa4CgqSyUIdsg94iG9MeFlAX9L1W+WBq9w inTBUExfS7QfRbdPNfRqrh4nxmOYDuP1O6QdwAL3Po9xPI9SeyaSBr0n8T0d7OYh 8M8a1D+MXHOYBDQPsPF357g6nePJCZwKJaOoU/GdERV0d8SydNLuwR96mySh87yH O9i1JfopalIaiHi5KyyDxxc8ZDLaXj5MMVeqhjjne5Ch+xJN3NfDkuC9gLda7oYu 2qNo7paadJHz1PM1tGznj7lipA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:52 2026 by rpki-client