$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json) Hash identifier: xw/YYPKJHfu2FZPnaGkHuaVx5LOv2V+G6xe4qAbwoYI= Subject key identifier: 33:2D:3C:62:BB:08:96:AB:05:68:40:89:1E:A0:43:42:FB:DE:2C:B1 Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft Manifest number: 0812 Signing time: Tue 24 Mar 2026 20:53:01 +0000 Manifest this update: Tue 24 Mar 2026 20:53:00 +0000 Manifest next update: Tue 31 Mar 2026 20:53:00 +0000 Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: IBAZ+YLCEbWzcp6R4K2xcLzRCPHCk2PUmS5EWeGRNZI=) 2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: yuMEpYdr92StEUkrCtc4em7H5dYpwH9n4xJ+CtwrLj8=) 3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: P/YzwZrXirAfHcAYuoDInMv7oeZdvQaJfgoo3K4BZhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: Mar 24 20:53:00 2026 GMT Not After : Mar 31 20:53:00 2026 GMT Subject: CN=69c2f9ad-3869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:30:67:46:ac:d2:4f:94:b0:d0:a2:02:4e: 5f:6d:f7:80:fa:58:77:41:01:41:8b:e4:4d:9f:f5: 27:ea:4d:d5:b3:db:91:f6:9b:50:f7:db:af:32:c2: 4a:09:69:7d:df:69:91:c5:d2:fd:a3:d1:2b:1d:f9: 8c:0c:08:68:9e:ae:b6:36:f2:6b:76:8c:ca:14:8b: b0:9b:1d:74:3c:b8:db:f9:cd:65:29:a6:da:16:fd: 05:9b:4a:01:17:5e:53:69:eb:56:ec:05:ce:27:23: cc:30:bf:2b:3d:8b:11:9e:ef:f7:a2:63:bf:56:cc: 2b:a4:4a:6c:22:0c:83:ba:8b:70:7d:5a:3e:18:27: bf:61:88:68:f9:64:1d:a5:6a:96:57:10:e5:de:69: 04:84:7d:c8:34:10:b4:ff:ca:10:06:85:6f:55:74: 9f:e0:20:3a:9a:5e:5e:90:f9:79:81:f4:5b:e8:d6: c6:23:f0:a6:86:b4:49:e5:e8:d0:f6:e7:e2:8d:44: aa:0c:93:73:92:1d:9c:b9:56:87:c8:29:1d:3c:ad: 5d:4c:25:78:09:3a:4c:77:60:59:31:d9:b2:6f:5d: cb:37:fb:b1:69:55:ec:3d:c7:e3:d5:15:23:9f:4e: c6:56:c6:d0:e3:e0:e8:36:73:b6:44:15:3e:91:ef: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:3C:62:BB:08:96:AB:05:68:40:89:1E:A0:43:42:FB:DE:2C:B1 X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d1:c9:c7:69:51:f5:3f:f3:25:42:ff:4a:3b:36:b7:04:db: 4b:1d:2c:a2:3f:27:97:eb:09:ce:76:47:b3:9f:3d:88:e7:85: ac:9a:54:04:38:cf:b9:f1:e9:16:d3:42:77:7f:32:c3:5b:92: f9:70:4d:97:48:0f:4f:9f:bc:e3:2d:39:6b:78:c8:af:c1:e8: 89:ac:31:50:cd:dc:a3:c6:57:82:5f:70:20:44:21:94:1d:5f: 8c:22:cf:fa:a1:f4:b6:19:fa:8a:b0:d9:51:be:b5:80:0a:80: 21:95:00:16:b4:50:ee:fa:33:40:13:78:df:0e:ab:50:c5:9b: c2:f7:2a:f3:96:0a:40:4f:6e:6d:b8:c3:6c:99:86:e1:d9:ff: ac:f3:34:c0:1c:8b:9c:ab:8d:f9:fc:2e:c3:e5:fa:47:fd:e8: 4a:3f:f1:0d:02:22:21:37:b9:74:28:63:c0:e0:db:08:0b:54: 49:1e:4e:d6:de:c1:48:8b:40:1b:2c:3e:ca:97:98:dc:6f:da: 6e:21:85:50:2d:a9:89:62:ea:0d:70:bb:c5:fa:9c:a9:47:ca: 9e:3f:f5:71:01:6d:72:53:65:75:8c:30:62:9e:71:87:b7:11: 0c:a6:82:b3:fa:57:48:58:08:71:54:84:21:f4:3c:b3:6f:d4: 87:d2:86:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjYwMzI0MjA1MzAwWhcNMjYwMzMxMjA1MzAwWjAYMRYwFAYD VQQDEw02OWMyZjlhZC0zODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzwwZ0as0k+UsNCiAk5fbfeA+lh3QQFBi+RNn/Un6k3Vs9uR9ptQ99uvMsJK CWl932mRxdL9o9ErHfmMDAhonq62NvJrdozKFIuwmx10PLjb+c1lKabaFv0Fm0oB F15TaetW7AXOJyPMML8rPYsRnu/3omO/VswrpEpsIgyDuotwfVo+GCe/YYho+WQd pWqWVxDl3mkEhH3INBC0/8oQBoVvVXSf4CA6ml5ekPl5gfRb6NbGI/CmhrRJ5ejQ 9ufijUSqDJNzkh2cuVaHyCkdPK1dTCV4CTpMd2BZMdmyb13LN/uxaVXsPcfj1RUj n07GVsbQ4+DoNnO2RBU+ke9PoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMtPGK7 CJarBWhAiR6gQ0L73iyxMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzZEQy9CMDQzNjQ3QTE5RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJG UDhtNEY3dDR5NmtWOG53cWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNHJx2lR9T/zJUL/Sjs2twTbSx0soj8nl+sJznZHs589iOeFrJpUBDjPufHp FtNCd38yw1uS+XBNl0gPT5+84y05a3jIr8HoiawxUM3co8ZXgl9wIEQhlB1fjCLP +qH0thn6irDZUb61gAqAIZUAFrRQ7vozQBN43w6rUMWbwvcq85YKQE9ubbjDbJmG 4dn/rPM0wByLnKuN+fwuw+X6R/3oSj/xDQIiITe5dChjwODbCAtUSR5O1t7BSItA Gyw+ypeY3G/abiGFUC2piWLqDXC7xfqcqUfKnj/1cQFtclNldYwwYp5xh7cRDKaC s/pXSFgIcVSEIfQ8s2/Uh9KGtA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:14 2026 by rpki-client