$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: PdHsNuMutI2RO5ZQ/CP9qmz0LOWoaoFHDuP3q6xUHNw= Subject key identifier: 1F:CE:84:49:82:69:0B:9A:DE:BE:FB:17:C2:76:43:FC:A9:26:52:21 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0834 Signing time: Tue 24 Mar 2026 21:03:48 +0000 Manifest this update: Tue 24 Mar 2026 21:03:48 +0000 Manifest next update: Tue 31 Mar 2026 21:03:48 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: gdzG6U/Tgs+X5MgL1I0E453qV1Vv3tWz72LcSqj/tg8=) 2: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=) 4: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Mar 24 21:03:48 2026 GMT Not After : Mar 31 21:03:48 2026 GMT Subject: CN=69c2fc34-86d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:52:d8:dc:bf:61:de:69:58:42:51:d6:6e: 2f:8b:6b:d8:76:3d:64:dd:39:f5:bd:4f:9b:be:dc: 13:eb:3b:9a:a2:84:5f:98:1e:d9:22:90:9d:14:af: c1:65:5e:c8:79:8a:88:c1:99:d6:c6:1e:f3:0d:bc: 89:67:0c:99:0f:dd:71:c1:ab:08:2e:86:a1:15:71: 6d:76:a7:d1:6f:b3:c0:6c:e9:cc:15:48:b3:6e:66: cb:41:fa:00:86:46:25:11:d6:8d:97:9b:03:d9:b7: 1a:a9:b0:ad:b4:c6:b6:74:41:df:fc:39:4b:14:46: d4:f5:49:a0:9a:31:ff:52:1d:4e:7d:30:67:c9:c1: de:02:1d:44:56:e1:20:e8:a2:6e:de:7d:9c:7a:f0: 30:b2:fa:20:b7:8a:bc:9a:7b:dd:fd:90:bc:04:af: 04:6d:67:de:84:3e:74:52:8c:45:83:cc:2d:ef:c7: 92:38:b6:c5:c7:59:fe:e2:54:f2:a1:08:f4:57:75: e5:63:7a:ad:8b:83:8a:a3:05:bb:ba:a1:08:c8:c3: c2:87:90:ec:6b:74:ae:4d:9c:99:f9:62:20:85:ca: 86:f0:a8:c9:2e:57:a3:b7:2f:53:a3:16:76:81:66: 0d:6b:f2:2f:6b:76:e9:a6:a8:97:2d:54:be:d0:c0: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CE:84:49:82:69:0B:9A:DE:BE:FB:17:C2:76:43:FC:A9:26:52:21 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6c:fe:9f:8b:32:b3:02:c0:f3:88:f4:6f:c5:20:51:6b:7e: f9:15:05:55:ba:ba:b9:67:64:fd:f1:ca:61:ff:7d:47:3b:19: e6:cf:f5:8c:02:80:1c:e2:b7:f8:1d:5c:e4:bd:73:1b:dc:ea: fe:06:9f:35:21:7a:c8:66:3b:ef:fc:68:1d:80:b3:2c:a8:3b: 36:88:04:18:7c:3b:fe:ad:96:fa:61:2a:e0:d2:a9:61:ce:ec: 30:68:fe:bd:14:f0:a0:e1:bf:71:2e:28:75:8c:db:70:e2:c9: e5:9b:18:04:4d:02:8d:8f:12:15:ea:8a:bf:1f:09:fd:59:6a: 49:6c:8e:34:e2:78:cb:e5:9e:7d:72:7d:aa:a0:61:8c:b7:5f: f0:b1:ad:8f:c7:c3:8d:f7:01:9a:86:d4:de:1c:ea:14:8d:70: ff:45:06:16:00:fe:54:86:49:a2:82:10:39:0a:58:43:b7:7f: 62:25:c4:cf:48:b3:7c:c1:c9:a9:1b:e6:6b:bb:32:47:29:72: e6:09:ad:3a:c6:47:f7:b0:8a:27:72:f7:47:de:d2:cd:71:4e: ae:69:25:af:4a:df:8e:8e:36:48:16:75:c1:b8:19:4c:82:bf: 16:28:d8:34:d6:cb:ac:bd:e8:23:18:03:d1:14:38:3c:09:51: 18:5a:36:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwMzI0MjEwMzQ4WhcNMjYwMzMxMjEwMzQ4WjAYMRYwFAYD VQQDEw02OWMyZmMzNC04NmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgNS2Ny/Yd5pWEJR1m4vi2vYdj1k3Tn1vU+bvtwT6zuaooRfmB7ZIpCdFK/B ZV7IeYqIwZnWxh7zDbyJZwyZD91xwasILoahFXFtdqfRb7PAbOnMFUizbmbLQfoA hkYlEdaNl5sD2bcaqbCttMa2dEHf/DlLFEbU9UmgmjH/Uh1OfTBnycHeAh1EVuEg 6KJu3n2cevAwsvogt4q8mnvd/ZC8BK8EbWfehD50UoxFg8wt78eSOLbFx1n+4lTy oQj0V3XlY3qti4OKowW7uqEIyMPCh5Dsa3SuTZyZ+WIghcqG8KjJLlejty9ToxZ2 gWYNa/Iva3bppqiXLVS+0MBzvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/OhEmC aQua3r77F8J2Q/ypJlIhMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2z+n4syswLA84j0b8UgUWt++RUFVbq6uWdk/fHKYf99RzsZ5s/1jAKAHOK3 +B1c5L1zG9zq/gafNSF6yGY77/xoHYCzLKg7NogEGHw7/q2W+mEq4NKpYc7sMGj+ vRTwoOG/cS4odYzbcOLJ5ZsYBE0CjY8SFeqKvx8J/VlqSWyONOJ4y+WefXJ9qqBh jLdf8LGtj8fDjfcBmobU3hzqFI1w/0UGFgD+VIZJooIQOQpYQ7d/YiXEz0izfMHJ qRvma7syRyly5gmtOsZH97CKJ3L3R97SzXFOrmklr0rfjo42SBZ1wbgZTIK/FijY NNbLrL3oIxgD0RQ4PAlRGFo2Rw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:10 2026 by rpki-client