$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: 2CbF/aAl2SHbUhUvzxj1QuVF5kA1++el+4tXPuChLok= Subject key identifier: C5:9F:D3:54:D1:39:2D:44:74:91:66:93:35:40:1B:99:A1:52:43:EF Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0DA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D9D Signing time: Tue 24 Mar 2026 17:48:03 +0000 Manifest this update: Tue 24 Mar 2026 17:48:03 +0000 Manifest next update: Tue 31 Mar 2026 17:48:03 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: tCTGO0IrsAsDuzrzGgLBi9EB+fIPGUVEEoZACX7qgiI=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: e/Pn5qPd83tgfAM5gG7LPu5WMIBT6NEqspZed3qdjbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Mar 24 17:48:03 2026 GMT Not After : Mar 31 17:48:03 2026 GMT Subject: CN=69c2ce53-11d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:8a:15:86:68:a1:7b:31:96:49:4d:c3:b8: 74:fe:fd:82:6e:6b:6f:2b:32:d0:78:76:f6:26:e8: a3:52:ae:42:19:db:7d:3f:51:9f:d8:2a:ac:d1:f4: a5:d9:8b:47:11:29:ba:66:1d:5b:af:ce:2c:27:50: 17:3d:e7:f6:b3:31:d6:94:c0:4f:72:41:c6:a8:ad: 2f:71:96:24:5a:b3:b7:40:5c:f4:5c:5b:d3:07:4a: bb:ad:3e:c5:f9:6f:e9:a8:a6:c3:cb:a6:38:e6:6f: 0f:ba:70:5c:b0:c1:fb:d5:90:6a:8a:fc:6c:30:6a: 4f:99:53:2c:82:3d:1b:7d:d7:b6:83:a9:d6:30:d7: e7:96:bc:de:58:91:71:6e:d2:17:d8:aa:ad:eb:31: ae:0a:4e:6f:19:e9:69:8a:eb:3b:5c:fc:5e:02:af: 08:aa:66:8a:75:bf:17:6e:27:95:54:b4:2a:c6:5f: cd:ac:e5:9d:f1:7b:c8:ff:7a:17:8c:a3:1b:89:1b: fe:3c:c6:5e:e7:cc:07:17:73:40:27:5d:ed:b4:a6: 8b:eb:74:4e:5b:6d:c0:12:8a:83:9b:06:fb:69:48: ba:fe:03:16:7a:2b:4b:9d:51:aa:4b:2d:d8:95:30: f7:a2:ca:a8:1e:30:8c:bd:00:f7:e7:a0:e8:44:96: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:D3:54:D1:39:2D:44:74:91:66:93:35:40:1B:99:A1:52:43:EF X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:61:f3:b9:20:c5:44:90:62:17:23:d9:07:6d:57:56:f3:ad: 59:6e:e3:71:3a:41:f2:c4:a0:4b:40:ce:0e:ce:41:ec:86:ae: 97:21:09:97:1f:c6:8b:d8:c8:8e:be:55:5c:80:76:28:36:53: 64:08:1d:aa:d0:04:3b:63:72:66:85:a2:10:e9:2a:6d:e8:d6: 68:a6:69:de:62:21:1f:c7:c2:26:3e:d2:30:5c:17:88:1d:01: c7:11:5b:f1:8a:33:cf:d1:86:cd:dc:53:da:f8:21:4b:dc:74: ec:63:af:76:c0:dc:a1:a0:36:bc:ed:17:28:10:f8:49:05:8d: d9:59:1a:ce:f1:7b:37:0d:eb:79:fd:4e:ce:d6:c4:68:0e:3c: 83:b2:2a:53:0e:1d:4b:39:11:7e:73:9e:4c:2d:9e:7d:d2:d4: 93:c3:ab:09:e8:d7:f3:11:6e:1d:ef:85:5c:f8:9f:83:27:e3: 9a:f9:c8:91:2f:01:5a:de:30:78:59:59:b3:bd:b7:7f:2e:14: 89:b3:21:9d:b3:dd:99:84:71:1b:0d:1f:89:f0:df:8f:73:62: 0c:df:52:29:e7:9b:6d:5f:75:ba:fd:f0:44:5f:b0:0d:d6:d1: 2f:95:a3:25:48:84:47:bf:a3:ce:58:da:93:27:75:7e:35:ce: 34:99:30:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjYwMzI0MTc0ODAzWhcNMjYwMzMxMTc0ODAzWjAYMRYwFAYD VQQDEw02OWMyY2U1My0xMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwouKFYZooXsxlklNw7h0/v2CbmtvKzLQeHb2JuijUq5CGdt9P1Gf2Cqs0fSl 2YtHESm6Zh1br84sJ1AXPef2szHWlMBPckHGqK0vcZYkWrO3QFz0XFvTB0q7rT7F +W/pqKbDy6Y45m8PunBcsMH71ZBqivxsMGpPmVMsgj0bfde2g6nWMNfnlrzeWJFx btIX2Kqt6zGuCk5vGelpius7XPxeAq8IqmaKdb8XbieVVLQqxl/NrOWd8XvI/3oX jKMbiRv+PMZe58wHF3NAJ13ttKaL63ROW23AEoqDmwb7aUi6/gMWeitLnVGqSy3Y lTD3osqoHjCMvQD356DoRJaLXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWf01TR OS1EdJFmkzVAG5mhUkPvMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC2HzuSDFRJBiFyPZB21XVvOtWW7jcTpB8sSgS0DODs5B7IaulyEJlx/Gi9jI jr5VXIB2KDZTZAgdqtAEO2NyZoWiEOkqbejWaKZp3mIhH8fCJj7SMFwXiB0BxxFb 8Yozz9GGzdxT2vghS9x07GOvdsDcoaA2vO0XKBD4SQWN2VkazvF7Nw3ref1OztbE aA48g7IqUw4dSzkRfnOeTC2efdLUk8OrCejX8xFuHe+FXPifgyfjmvnIkS8BWt4w eFlZs723fy4UibMhnbPdmYRxGw0fifDfj3NiDN9SKeebbV91uv3wRF+wDdbRL5Wj JUiER7+jzljakyd1fjXONJkwIA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:24:25 2026 by rpki-client