$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: C2TvPYrtZc4aoYBQ+SbJpplqVrvDZWrPCBFoE+N4NSg= Subject key identifier: 96:9B:AC:B9:66:23:11:4F:5E:74:EB:61:0E:63:62:EC:34:D8:D7:0B Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 355A Signing time: Thu 26 Mar 2026 14:40:24 +0000 Manifest this update: Thu 26 Mar 2026 14:40:23 +0000 Manifest next update: Thu 02 Apr 2026 14:40:23 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: YKwQCwSk99HqctR3Wf36bnXg7oYAd9S4Hak6xEExcH0=) 2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=) 3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13713 (0x3591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Mar 26 14:40:23 2026 GMT Not After : Apr 2 14:40:23 2026 GMT Subject: CN=69c54557-b554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:25:8a:e6:bc:83:31:f5:03:d2:b5:8d:e6: f3:2c:83:96:c9:01:30:02:72:33:e2:0f:70:58:91: fd:6d:41:bf:fa:34:08:ed:da:ba:76:ca:ce:80:4f: cf:27:20:e9:73:43:37:42:98:76:27:21:b7:15:63: 13:f4:ff:5d:39:e1:20:77:b4:ee:f9:67:14:ed:87: a3:c0:f6:65:ed:b2:f8:46:45:b5:e2:80:d4:68:ef: ef:3d:00:1a:8a:a7:6e:e2:12:5f:6c:a0:2a:4f:7d: 98:f7:7b:dc:19:7f:30:c9:21:ff:d7:1a:a2:f1:53: 19:bf:2a:aa:65:00:1e:6d:88:47:0b:c4:bf:16:5a: de:ed:d4:cf:65:c4:e3:74:82:38:8e:18:94:8e:6a: a6:eb:7a:31:42:13:f1:37:22:ca:44:de:28:30:2c: 7f:13:04:b0:e0:aa:82:f7:41:39:b3:e9:5a:89:40: 0d:8a:18:f0:f1:5f:ff:89:8c:19:f3:e6:0b:11:ac: ab:7a:9d:78:57:8b:6e:c9:a6:33:fe:bd:b2:47:05: 49:0f:14:55:a2:87:19:4e:e5:29:f1:7f:79:c3:57: 92:76:e6:0c:d7:06:47:39:bc:3b:59:2a:af:8e:6b: 45:69:c4:7e:cd:a5:d9:60:82:11:55:1f:8e:1b:68: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:AC:B9:66:23:11:4F:5E:74:EB:61:0E:63:62:EC:34:D8:D7:0B X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3d:17:16:9a:54:89:c6:63:e8:1d:bf:86:28:7f:a1:2d:c3: 0e:05:3e:c8:17:9b:a7:0c:0a:59:3b:53:e8:4d:68:89:7c:3c: ba:df:83:2c:1d:0c:63:e1:24:80:0e:4d:e9:b0:e8:54:0c:24: 38:da:19:ae:bb:45:86:25:99:bd:9e:43:8e:c5:52:be:00:f8: 67:8e:3b:00:71:fa:35:a6:aa:dc:66:46:d8:8f:d9:2d:38:70: 4a:3a:4d:f3:14:c4:1d:e7:45:6a:25:c1:1b:73:7d:5a:96:c1: f5:de:d5:4a:10:af:a9:e6:20:ce:9a:4f:95:ae:cd:d2:f3:3c: 0a:65:23:ea:35:13:e4:67:a7:52:80:09:7c:95:32:d6:64:3e: f1:41:a1:08:17:4a:7e:79:a2:c4:93:a2:ca:33:13:f8:89:0d: 6a:39:eb:be:6b:ef:b1:46:2e:fe:b9:9e:39:2b:f9:96:44:1f: 1f:d2:d8:3e:98:ef:04:d8:7c:30:de:c8:ba:3e:71:71:a4:b7: 57:ae:ce:dc:07:a9:d0:88:69:27:7d:57:e8:bb:73:ba:c0:bc: 9d:ca:e7:7f:e1:f1:b3:d6:7c:b3:b5:d3:3a:5f:3d:2a:6a:08: 8e:06:c9:1a:ee:e3:da:9d:63:0b:44:d7:48:c3:cc:c3:89:77: e6:53:67:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwMzI2MTQ0MDIzWhcNMjYwNDAyMTQ0MDIzWjAYMRYwFAYD VQQDEw02OWM1NDU1Ny1iNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmoliua8gzH1A9K1jebzLIOWyQEwAnIz4g9wWJH9bUG/+jQI7dq6dsrOgE/P JyDpc0M3Qph2JyG3FWMT9P9dOeEgd7Tu+WcU7YejwPZl7bL4RkW14oDUaO/vPQAa iqdu4hJfbKAqT32Y93vcGX8wySH/1xqi8VMZvyqqZQAebYhHC8S/Flre7dTPZcTj dII4jhiUjmqm63oxQhPxNyLKRN4oMCx/EwSw4KqC90E5s+laiUANihjw8V//iYwZ 8+YLEayrep14V4tuyaYz/r2yRwVJDxRVoocZTuUp8X95w1eSduYM1wZHObw7WSqv jmtFacR+zaXZYIIRVR+OG2gsUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJabrLlm IxFPXnTrYQ5jYuw02NcLMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALz0XFppUicZj6B2/hih/oS3DDgU+yBebpwwKWTtT6E1oiXw8ut+DLB0MY+Ek gA5N6bDoVAwkONoZrrtFhiWZvZ5DjsVSvgD4Z447AHH6Naaq3GZG2I/ZLThwSjpN 8xTEHedFaiXBG3N9WpbB9d7VShCvqeYgzppPla7N0vM8CmUj6jUT5GenUoAJfJUy 1mQ+8UGhCBdKfnmixJOiyjMT+IkNajnrvmvvsUYu/rmeOSv5lkQfH9LYPpjvBNh8 MN7Iuj5xcaS3V67O3Aep0IhpJ31X6LtzusC8ncrnf+Hxs9Z8s7XTOl89KmoIjgbJ Gu7j2p1jC0TXSMPMw4l35lNnYA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:05 2026 by rpki-client