$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: 26d7tc3F8Ecmn+zDpGLP7SndnnDMXVDBEXYKUt7Y9Dg= Subject key identifier: 28:E4:49:3F:96:AE:6E:8C:3D:C6:37:A9:C5:EA:84:ED:68:14:73:A7 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C87 Signing time: Tue 24 Mar 2026 18:24:37 +0000 Manifest this update: Tue 24 Mar 2026 18:24:37 +0000 Manifest next update: Tue 31 Mar 2026 18:24:37 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: gF9m0pdtr/+3p9OXCQRCumf1bHIeyJyW+SegXhfBhLI=) 2: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=) 3: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Mar 24 18:24:37 2026 GMT Not After : Mar 31 18:24:37 2026 GMT Subject: CN=69c2d6e5-2e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:3e:73:4d:4f:55:f7:56:00:d0:c3:d9:80: 4c:c3:f8:4c:98:29:3f:0d:ae:5a:91:fe:cc:c7:b6: 8f:5b:a7:73:be:00:dd:ed:bf:b2:fa:1e:c1:60:cd: 55:70:e4:67:ee:6a:d4:47:dd:67:3a:8c:35:07:04: c2:0f:9f:f4:5e:34:eb:7c:0a:a2:91:08:5b:08:46: d3:59:fe:c6:67:7c:d3:e6:9f:e7:4c:a3:47:c3:39: d4:7c:88:ec:f8:01:77:09:d4:7b:63:dc:a6:c2:97: 90:42:36:3b:54:69:a9:2e:d1:10:e2:de:cd:6f:e3: d3:eb:f6:d3:4e:6a:3a:5a:09:22:26:00:05:26:90: 1e:e8:55:fb:25:67:60:5b:46:d4:fb:e9:89:eb:ba: b3:f8:ca:66:6e:0b:29:82:bf:42:54:18:13:c6:b2: 5a:73:1c:5f:e1:2d:e3:d2:18:cd:b5:8e:c3:ec:98: 96:d7:ba:bc:d3:2e:1f:9e:ff:e9:a6:11:9d:0f:d0: 76:c7:bd:71:69:b8:7a:4d:84:2a:1e:e4:4b:55:af: 1e:58:3d:c6:5a:56:5c:2a:65:f4:f5:01:ca:2f:01: 6f:8f:81:53:aa:d8:9e:c0:df:15:87:f9:3e:4e:0c: c6:b5:e7:2d:af:97:78:94:1b:c9:52:01:91:d8:9f: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E4:49:3F:96:AE:6E:8C:3D:C6:37:A9:C5:EA:84:ED:68:14:73:A7 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:18:53:33:17:f0:f3:8b:c9:fa:ee:7e:1e:80:c0:9b:77:6e: 57:b2:cf:44:93:7c:8b:1f:33:c0:0e:89:70:b4:30:0b:83:a8: 52:0d:df:17:d4:96:af:ba:84:6d:76:6f:a9:37:1d:57:3b:7d: f0:01:4a:3a:bd:ff:b1:87:31:49:a2:9b:9b:43:90:0c:e5:e2: 62:61:63:ec:f0:0d:c4:72:2c:3d:37:4e:a5:c7:0f:e9:36:31: 07:9b:6f:6d:86:11:81:c0:2d:f7:dd:0e:af:86:ea:10:da:38: a6:b8:b6:45:d6:f5:16:cf:d8:39:f0:3a:2e:16:8a:13:1f:3c: 8d:51:e1:97:dd:b6:3b:27:90:32:27:4e:12:66:ab:e2:67:35: fd:78:dc:12:35:ce:6d:71:cc:fb:ab:fe:56:96:74:3b:e8:28: 25:4f:00:3b:37:24:c4:73:f5:b9:54:d7:b6:b1:d6:2b:22:ba: e9:99:61:71:56:84:a5:c3:5c:f4:c9:5c:33:81:5f:a2:09:ed: f9:fc:08:ee:5e:37:9a:d9:d1:02:c1:3c:59:8e:c4:93:4d:36: 5d:5f:5f:5c:6f:b0:24:65:a8:a4:30:87:d7:54:2d:23:20:26: ed:3e:e3:47:f3:72:ba:43:ed:a2:88:5b:ef:5e:85:48:65:8f: f7:5f:4b:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYwMzI0MTgyNDM3WhcNMjYwMzMxMTgyNDM3WjAYMRYwFAYD VQQDEw02OWMyZDZlNS0yZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ0+c01PVfdWANDD2YBMw/hMmCk/Da5akf7Mx7aPW6dzvgDd7b+y+h7BYM1V cORn7mrUR91nOow1BwTCD5/0XjTrfAqikQhbCEbTWf7GZ3zT5p/nTKNHwznUfIjs +AF3CdR7Y9ymwpeQQjY7VGmpLtEQ4t7Nb+PT6/bTTmo6WgkiJgAFJpAe6FX7JWdg W0bU++mJ67qz+Mpmbgspgr9CVBgTxrJacxxf4S3j0hjNtY7D7JiW17q80y4fnv/p phGdD9B2x71xabh6TYQqHuRLVa8eWD3GWlZcKmX09QHKLwFvj4FTqtiewN8Vh/k+ TgzGtectr5d4lBvJUgGR2J8oAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjkST+W rm6MPcY3qcXqhO1oFHOnMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtBhTMxfw84vJ+u5+HoDAm3duV7LPRJN8ix8zwA6JcLQwC4OoUg3fF9SWr7qE bXZvqTcdVzt98AFKOr3/sYcxSaKbm0OQDOXiYmFj7PANxHIsPTdOpccP6TYxB5tv bYYRgcAt990Or4bqENo4pri2Rdb1Fs/YOfA6LhaKEx88jVHhl922OyeQMidOEmar 4mc1/XjcEjXObXHM+6v+VpZ0O+goJU8AOzckxHP1uVTXtrHWKyK66ZlhcVaEpcNc 9MlcM4Ffognt+fwI7l43mtnRAsE8WY7Ek002XV9fXG+wJGWopDCH11QtIyAm7T7j R/NyukPtoohb716FSGWP919LLg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:00 2026 by rpki-client