$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft File: vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json) Hash identifier: lrW5hNHQo+s6cVGszPL5u3OL4LpSrCuX5QSNsUzGpXk= Subject key identifier: B9:D9:6E:B1:51:67:F6:86:50:88:FF:2F:FA:B8:52:26:4F:AC:5D:52 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft Manifest number: 0D Signing time: Wed 25 Mar 2026 08:17:58 +0000 Manifest this update: Wed 25 Mar 2026 08:17:57 +0000 Manifest next update: Wed 01 Apr 2026 08:17:57 +0000 Files and hashes: 1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: bTrGF7CLIkVXv2Bvyula9JBlYvxLYEzhtFrqC5YpDq8=) 2: F5841C74184E11F187DD6055283D8C67.roa (hash: 1eCvlfrhwMJgBVBc2wUYU+P7lRMVeJM21k0aMFZwo+Y=) 3: A90EFDD2184E11F1A5F3D04C283D8C67.roa (hash: GF/l2SZwknV/YN0h9ka4JnIB7U28JEFxozdko/6I8BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: Mar 25 08:17:57 2026 GMT Not After : Apr 1 08:17:57 2026 GMT Subject: CN=69c39a36-53b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:f8:61:f0:62:81:eb:41:30:f1:c0:9a:7c: a3:23:07:e8:89:70:e4:4d:9d:7d:85:ff:dc:65:91: ce:4e:f5:da:6a:29:f3:18:fe:03:3b:b6:d8:6b:e9: 4b:a4:63:8a:45:0f:6a:83:93:33:60:08:ba:79:e2: 23:32:98:11:27:57:14:30:88:e6:a0:29:94:57:98: 66:76:85:43:14:15:d8:8b:7f:18:f3:28:55:1d:cc: 81:0d:ed:d1:2e:cd:a5:b3:d3:b8:35:f9:81:b7:19: 6b:59:be:86:ea:f6:4f:bd:05:1a:4d:f3:f9:ce:65: 84:01:36:6c:40:3d:6d:5c:21:c6:82:aa:f7:00:20: 59:2f:c0:99:c2:21:34:be:2a:4a:48:49:15:34:19: 16:a9:7b:bd:95:30:ed:1e:d0:d4:bc:96:21:83:4a: d3:5c:00:b9:33:94:37:d0:ff:9c:78:75:6a:4e:c9: 0b:ec:a4:1b:1a:67:85:ea:84:46:8f:a4:6f:d6:16: be:0c:f8:c2:b6:b1:14:57:4c:d3:b9:3c:7b:a0:a6: 7e:cd:07:45:9c:7b:d4:e7:be:36:dd:8f:db:1e:19: 0a:65:78:d9:da:33:b7:2b:48:f0:30:a6:d1:4f:1e: ff:47:c7:72:ce:d2:16:c9:ad:0f:72:f3:bf:01:a7: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:6E:B1:51:67:F6:86:50:88:FF:2F:FA:B8:52:26:4F:AC:5D:52 X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:23:a4:a6:ae:70:a7:5b:9d:80:b1:24:70:17:ac:e7:71:51: cc:77:0c:cf:a1:dc:fc:d7:6c:59:c8:30:36:52:fa:20:15:05: 63:33:e0:b0:50:f1:3b:cc:03:9c:56:44:df:9c:9d:3e:3a:b3: 2b:65:bd:be:f6:59:2b:da:0f:a7:18:82:51:dc:6c:43:1c:34: 69:7d:7e:d5:1a:a4:07:c4:99:6f:54:42:44:98:b8:41:6c:8d: fc:24:05:ea:6d:cb:93:8c:f7:c5:53:6d:96:fb:04:d3:00:57: c7:ac:5b:ee:d1:a5:e9:70:a7:15:1f:d5:53:47:81:59:63:94: 27:c2:90:cb:4a:00:59:b1:7d:a1:5e:08:b3:b8:43:9f:09:19: c3:49:06:07:45:2b:0c:ce:3d:07:3c:e5:80:4e:e8:69:22:57: c9:22:81:87:61:7c:9b:1f:d4:23:52:4e:9a:bd:e6:b5:0b:4f: ca:c7:f7:b8:c3:c3:52:13:d0:ec:f6:09:12:a2:de:6b:a0:1a: b5:61:7e:6f:8f:77:b2:10:64:e3:08:cc:40:28:48:ed:fd:5a: ab:e2:a0:f3:3c:85:38:6c:1a:73:cf:d6:3b:ec:a6:81:58:f3: 8c:f2:15:b8:94:c9:fd:b8:c9:3b:b4:16:0d:e6:dd:18:f8:f1: 13:38:74:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjAzMjUwODE3NTdaFw0yNjA0MDEwODE3NTdaMBgxFjAUBgNV BAMTDTY5YzM5YTM2LTUzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0hPhh8GKB60Ew8cCafKMjB+iJcORNnX2F/9xlkc5O9dpqKfMY/gM7tthr6Uuk Y4pFD2qDkzNgCLp54iMymBEnVxQwiOagKZRXmGZ2hUMUFdiLfxjzKFUdzIEN7dEu zaWz07g1+YG3GWtZvobq9k+9BRpN8/nOZYQBNmxAPW1cIcaCqvcAIFkvwJnCITS+ KkpISRU0GRape72VMO0e0NS8liGDStNcALkzlDfQ/5x4dWpOyQvspBsaZ4XqhEaP pG/WFr4M+MK2sRRXTNO5PHugpn7NB0Wce9Tnvjbdj9seGQpleNnaM7crSPAwptFP Hv9Hx3LO0hbJrQ9y878Bp6TlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUudlusVFn 9oZQiP8v+rhSJk+sXVIwHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD Mjg3LzYzMDI3REY2MTg0RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQ b0xxS1F0TW5Ddl9xSXZDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBoI6SmrnCnW52AsSRwF6zncVHMdwzPodz812xZyDA2UvogFQVjM+CwUPE7zAOc VkTfnJ0+OrMrZb2+9lkr2g+nGIJR3GxDHDRpfX7VGqQHxJlvVEJEmLhBbI38JAXq bcuTjPfFU22W+wTTAFfHrFvu0aXpcKcVH9VTR4FZY5QnwpDLSgBZsX2hXgizuEOf CRnDSQYHRSsMzj0HPOWATuhpIlfJIoGHYXybH9QjUk6avea1C0/Kx/e4w8NSE9Ds 9gkSot5roBq1YX5vj3eyEGTjCMxAKEjt/Vqr4qDzPIU4bBpzz9Y77KaBWPOM8hW4 lMn9uMk7tBYN5t0Y+PETOHT2 -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:54 2026 by rpki-client