$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: Zmt29X6vTPvzwc2/9KY6nbMQal4urTQQbklaNbKz3hY= Subject key identifier: F9:7B:0F:67:14:B2:D1:66:77:CB:7D:6C:80:94:A8:A6:71:DF:7B:19 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 13E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 13D8 Signing time: Tue 24 Mar 2026 16:50:26 +0000 Manifest this update: Tue 24 Mar 2026 16:50:26 +0000 Manifest next update: Tue 31 Mar 2026 16:50:26 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: q+n5Id9tBpsho1cVWx1Y6Nm2UMIqdT8BTkZ6kX4s0bo=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: +8AddGBFIIMgwGJltYVSUMtKxs5lAyAGDBkgXORqOLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5090 (0x13e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Mar 24 16:50:26 2026 GMT Not After : Mar 31 16:50:26 2026 GMT Subject: CN=69c2c0d2-a838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:9c:4a:cc:f7:a3:be:7c:e0:2f:cc:21:12: 7d:76:87:bd:33:52:49:46:9c:ca:de:68:e9:d4:f5: de:03:39:23:32:f6:cc:a3:c7:3f:3c:c5:97:42:57: 1e:72:cb:74:e6:ab:ca:4c:12:77:9a:f5:be:0c:51: 8c:f7:a0:94:f3:11:a8:62:81:ad:6a:66:86:d0:64: 40:a1:3d:3f:fb:3b:59:eb:88:b2:58:bd:6a:9c:f1: 1f:36:7a:06:0c:cb:92:90:e1:f1:a9:f6:02:57:45: ae:e7:38:f8:56:16:a7:45:e3:10:57:c5:64:90:68: 26:81:76:09:48:76:d7:4e:d1:91:73:34:9b:77:e3: f3:13:f7:02:29:bb:c2:53:66:7f:79:04:05:79:91: 68:81:48:7d:04:76:42:38:c6:75:a7:06:a9:99:49: 2a:ef:40:1e:bf:0e:7e:e4:a1:c8:f1:0a:27:11:68: ac:28:13:f8:44:59:3d:4d:a6:95:bf:b1:a9:1e:63: 85:bd:50:a6:27:22:24:e8:0b:ff:a2:af:36:9e:c0: 0a:95:36:15:56:32:59:bc:c1:0c:76:7c:c1:bb:df: 16:15:c5:e7:6e:58:d2:51:75:ce:65:72:12:63:d3: 13:38:1c:73:ff:67:6a:53:85:62:e4:a2:20:05:d6: a2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7B:0F:67:14:B2:D1:66:77:CB:7D:6C:80:94:A8:A6:71:DF:7B:19 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:df:3e:a6:72:c2:28:3c:6d:7d:8d:15:ed:94:f9:4c:94:a7: ec:3a:f8:8e:da:7e:b5:8a:e2:64:17:d6:f4:83:57:2c:ce:64: 5f:61:81:5e:53:99:cd:ae:42:82:1c:60:a9:e9:a6:ed:4e:af: 9b:85:69:0a:7c:11:84:3d:11:31:b8:61:b6:66:9f:89:74:59: eb:5a:5a:db:2a:7d:6b:e1:b0:60:fc:dd:41:10:c6:99:03:6e: 80:11:e6:2e:7c:40:57:9f:08:d9:82:76:68:46:b8:d3:36:09: d3:1d:e0:a8:ec:8c:5f:77:e7:3b:da:8a:fd:c3:2a:60:d1:d4: 99:9b:e0:8e:e8:ef:3b:17:68:00:ab:12:56:c0:0c:f5:4c:ad: f3:d2:f5:7f:76:10:3e:d7:a7:88:12:9f:ff:ce:df:aa:98:b4: 5c:de:17:5e:d6:ae:fe:d1:a9:da:98:cc:84:c6:62:a9:7b:e0: e4:b2:7e:dc:e9:7b:16:08:fb:6b:5e:9c:2e:d7:24:df:b2:78: 52:65:f1:9f:6f:0b:9f:17:15:67:85:eb:3b:2d:b9:a6:68:65: c3:5c:d1:16:aa:fa:98:5f:1d:f9:b3:db:8f:d3:b6:8a:e2:e3: ba:7f:1a:bd:ec:34:a0:e6:e1:61:d0:c9:3f:73:f1:6e:f7:f1: f6:e0:b7:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjYwMzI0MTY1MDI2WhcNMjYwMzMxMTY1MDI2WjAYMRYwFAYD VQQDEw02OWMyYzBkMi1hODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKKcSsz3o7584C/MIRJ9doe9M1JJRpzK3mjp1PXeAzkjMvbMo8c/PMWXQlce cst05qvKTBJ3mvW+DFGM96CU8xGoYoGtamaG0GRAoT0/+ztZ64iyWL1qnPEfNnoG DMuSkOHxqfYCV0Wu5zj4VhanReMQV8VkkGgmgXYJSHbXTtGRczSbd+PzE/cCKbvC U2Z/eQQFeZFogUh9BHZCOMZ1pwapmUkq70Aevw5+5KHI8QonEWisKBP4RFk9TaaV v7GpHmOFvVCmJyIk6Av/oq82nsAKlTYVVjJZvMEMdnzBu98WFcXnbljSUXXOZXIS Y9MTOBxz/2dqU4Vi5KIgBdaiUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPl7D2cU stFmd8t9bICUqKZx33sZMB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANN8+pnLCKDxtfY0V7ZT5TJSn7Dr4jtp+tYriZBfW9INXLM5kX2GBXlOZza5C ghxgqemm7U6vm4VpCnwRhD0RMbhhtmafiXRZ61pa2yp9a+GwYPzdQRDGmQNugBHm LnxAV58I2YJ2aEa40zYJ0x3gqOyMX3fnO9qK/cMqYNHUmZvgjujvOxdoAKsSVsAM 9Uyt89L1f3YQPteniBKf/87fqpi0XN4XXtau/tGp2pjMhMZiqXvg5LJ+3Ol7Fgj7 a16cLtck37J4UmXxn28LnxcVZ4XrOy25pmhlw1zRFqr6mF8d+bPbj9O2iuLjun8a vew0oObhYdDJP3Pxbvfx9uC3mw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:28 2026 by rpki-client