$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json) Hash identifier: AjLlmtqr66LPpqPpI8iVlRUM19PTSL0Epj6VBGPM/uc= Subject key identifier: 9D:2F:05:33:F0:81:47:3E:FF:5B:94:7B:40:DD:B5:66:3C:D0:90:9C Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft Manifest number: 0179 Signing time: Wed 25 Mar 2026 04:06:36 +0000 Manifest this update: Wed 25 Mar 2026 04:06:36 +0000 Manifest next update: Wed 01 Apr 2026 04:06:36 +0000 Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: GE3ldsgTD5h+xzxJ81xEzn82w52oQ+yUmywF2nKBcGw=) 2: 222F2952038511EFAF036327C4F9AE02.roa (hash: BXFPwmxciEV+XnYi9tPFQyzwDsUtThZRgJTMV6z6hBQ=) 3: E08658208D2D11F09327643FC4F9AE02.roa (hash: HZ9XqDs/Q/+Qy4eAIHRPLHAdt18YVv5Jmqk14KOrXus=) 4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: Z5ugBC9dUd5PS1DrzEWIofZwWUjke4mqLwbMdmUWC+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Mar 25 04:06:36 2026 GMT Not After : Apr 1 04:06:36 2026 GMT Subject: CN=69c35f4c-0fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:06:5a:d9:9b:2f:c4:d6:b8:85:ab:14:b9: 02:a0:dc:9d:97:f6:c0:26:f0:03:c9:d0:1c:fa:1d: b2:84:c6:4c:f3:f4:04:d2:43:53:b2:8a:f7:a4:70: 3a:ea:d1:20:2a:64:9c:7a:a9:fd:ec:36:78:b1:7b: 7d:77:ad:01:80:6a:eb:96:5b:56:8d:aa:ff:29:7a: 66:93:4b:b9:6c:9c:f9:ed:d5:5f:52:a6:79:d1:20: ba:f8:62:37:5a:88:7f:ab:57:9b:e2:e3:5e:5d:a2: 5b:fd:bb:5b:9a:92:b0:97:55:ef:9b:0e:8f:2b:25: 1a:2f:40:7f:ad:67:03:f9:11:c0:60:68:24:18:e6: 97:1e:cb:cf:7e:a3:7f:ab:ac:b9:fa:34:01:74:68: 00:6c:d0:eb:c1:8a:73:65:01:ae:37:7c:c4:39:9f: be:a0:f5:b8:f2:19:60:59:c8:37:d9:10:2d:4b:52: 17:92:3f:32:89:03:48:1d:47:30:93:f2:e2:ec:48: d1:51:c6:02:83:02:b3:9f:a7:ef:cb:cc:bd:80:33: ee:d1:c4:f6:46:37:e0:b9:03:f7:a1:f3:48:2d:68: d3:d9:5f:41:53:7e:5c:ae:19:a9:e9:39:d6:39:74: 0a:ee:f7:7c:8b:f5:a4:40:ee:b0:15:18:71:78:82: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:05:33:F0:81:47:3E:FF:5B:94:7B:40:DD:B5:66:3C:D0:90:9C X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:23:f6:48:ae:98:5e:16:4b:d3:60:f4:d4:7f:f7:71:3f:15: eb:38:62:4d:f5:59:f9:70:f0:d3:68:aa:7e:5e:d9:6a:08:3a: 92:f6:3b:9e:46:30:ae:11:c2:cc:93:7a:d1:b9:bb:a1:fe:4b: ce:61:ca:8a:73:74:1b:9b:78:b0:36:fe:7c:da:fe:45:eb:35: 7c:4d:ee:33:ec:31:cd:1c:31:1c:79:d8:e0:56:01:95:84:8f: ec:1a:8d:4a:d9:18:b6:a5:94:f5:11:6c:22:bb:fc:e6:c0:71: de:85:dd:b0:ef:36:85:bf:6c:14:e5:db:32:4f:ac:5c:64:1f: 9c:ab:9c:ce:60:05:aa:42:f7:5c:66:74:5b:09:f6:a6:00:97: a9:87:12:2c:2c:2b:95:cf:bb:52:70:0f:50:91:cd:cb:a2:e5: 91:b7:af:0c:08:4b:42:b5:7e:8b:8a:7f:27:32:12:66:15:58: e4:b9:cc:49:7e:c7:36:c5:71:a1:fe:2f:47:cf:ef:de:66:3a: 0e:d6:55:61:87:6f:a1:00:97:5d:5c:b9:43:5d:95:8e:7f:72: cd:6a:3a:ed:fe:50:b3:62:e8:01:03:06:61:42:6d:92:ce:78: 78:cf:59:f7:c9:7f:6b:07:04:d9:e3:05:ba:36:c2:34:04:76: ab:21:43:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjYwMzI1MDQwNjM2WhcNMjYwNDAxMDQwNjM2WjAYMRYwFAYD VQQDEw02OWMzNWY0Yy0wZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIUGWtmbL8TWuIWrFLkCoNydl/bAJvADydAc+h2yhMZM8/QE0kNTsor3pHA6 6tEgKmSceqn97DZ4sXt9d60BgGrrlltWjar/KXpmk0u5bJz57dVfUqZ50SC6+GI3 Woh/q1eb4uNeXaJb/btbmpKwl1Xvmw6PKyUaL0B/rWcD+RHAYGgkGOaXHsvPfqN/ q6y5+jQBdGgAbNDrwYpzZQGuN3zEOZ++oPW48hlgWcg32RAtS1IXkj8yiQNIHUcw k/Li7EjRUcYCgwKzn6fvy8y9gDPu0cT2RjfguQP3ofNILWjT2V9BU35crhmp6TnW OXQK7vd8i/WkQO6wFRhxeIJ7GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0vBTPw gUc+/1uUe0DdtWY80JCcMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFE ZEM4cUNCSkNjSTU1bk9HMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnCP2SK6YXhZL02D01H/3cT8V6zhiTfVZ+XDw02iqfl7Zagg6kvY7nkYwrhHC zJN60bm7of5LzmHKinN0G5t4sDb+fNr+Res1fE3uM+wxzRwxHHnY4FYBlYSP7BqN StkYtqWU9RFsIrv85sBx3oXdsO82hb9sFOXbMk+sXGQfnKuczmAFqkL3XGZ0Wwn2 pgCXqYcSLCwrlc+7UnAPUJHNy6LlkbevDAhLQrV+i4p/JzISZhVY5LnMSX7HNsVx of4vR8/v3mY6DtZVYYdvoQCXXVy5Q12Vjn9yzWo67f5Qs2LoAQMGYUJtks54eM9Z 98l/awcE2eMFujbCNAR2qyFDBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:12 2026 by rpki-client