$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: KADE02J5SQwYH5Lna5dGBfWLZ2SgUa3byb2rtsyzhA4= Subject key identifier: 95:02:55:EF:41:34:EC:12:AE:F9:D4:5B:B7:FE:A5:19:C1:70:FB:14 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0917 Signing time: Thu 26 Mar 2026 20:09:24 +0000 Manifest this update: Thu 26 Mar 2026 20:09:23 +0000 Manifest next update: Thu 02 Apr 2026 20:09:23 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: rERmuByGE5W0QEksDZ2WvPiANADQVG3z+Gx6QohRxdc=) 2: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: l+N4J4zxNWyxlfAH9ke4Lwu5X6TI6u4/SfyZolyoLUs=) 3: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: /9OAZib6ORGUsj/nBJu2BYzp5KOlwzvHRnmf3XojSfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Mar 26 20:09:23 2026 GMT Not After : Apr 2 20:09:23 2026 GMT Subject: CN=69c59274-43c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:4b:4d:05:72:2f:08:5d:b2:9d:39:b5:dd: 0e:a0:9f:00:67:0d:db:b1:54:7a:58:3f:5d:70:8e: a5:61:5e:a0:1c:77:cb:08:02:fe:f7:0d:37:8a:4b: 06:69:9e:a3:c9:12:9d:ea:f7:89:81:15:5d:5e:46: bd:d5:a2:e5:77:51:42:ca:c9:45:4a:84:c5:6b:c9: 00:f1:78:01:4d:8f:71:07:49:45:28:48:e6:4a:3c: 87:ce:df:5d:d8:0d:ce:77:22:9b:f6:16:28:63:83: d9:11:a1:8c:5b:cf:54:f4:65:81:59:35:dd:61:34: 9e:88:64:c9:6d:a7:a8:7e:3c:89:a1:64:c5:5d:02: 5d:d0:15:89:c2:0d:9a:fb:67:d9:a4:56:67:d1:6d: 67:90:5b:1a:20:d4:33:8c:5f:4d:b0:f4:7e:e8:35: 46:fb:05:f4:e2:c0:65:84:b4:c6:cc:b4:8b:36:96: ef:e4:04:a4:55:a2:84:90:43:c8:8c:a8:69:84:3b: aa:cc:22:0c:07:94:60:d9:cf:c0:89:6f:6f:06:20: 8f:20:bf:65:da:af:98:9c:d3:4a:3d:d9:3d:af:0b: 1b:61:34:10:dc:17:14:92:bc:b1:ed:aa:5e:6a:17: 12:25:d4:02:68:37:96:80:c0:90:e2:0e:c8:97:f9: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:02:55:EF:41:34:EC:12:AE:F9:D4:5B:B7:FE:A5:19:C1:70:FB:14 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:77:81:bd:e9:84:42:21:ee:37:a4:84:b8:1d:22:e3:16:57: 90:8f:b6:1f:6f:d4:21:19:dd:4a:de:b8:e1:b6:8c:fa:de:f3: 21:97:94:db:f4:6e:40:b8:a9:1d:e6:94:1c:3b:dd:4d:6b:15: d7:41:a6:e7:2d:c0:d6:db:cb:6d:49:f6:e2:96:79:ae:2d:06: 16:ea:e4:ea:a2:2e:fe:36:e7:37:84:43:b9:b5:45:ec:6c:b8: 1a:cf:2a:8b:3f:85:1e:f8:9a:80:8b:e7:5f:7a:ef:61:2f:e7: a1:88:ef:e6:de:73:67:57:3b:6c:3e:f0:8f:f3:9c:77:b2:d9: 00:3d:d1:d7:07:0c:cf:ec:ba:ae:f6:b9:2f:df:ef:79:cc:7c: 63:22:16:51:82:14:a2:27:4e:d0:fc:bf:ef:a9:45:4c:15:4f: cb:1e:eb:17:45:09:98:58:88:79:37:f4:35:dc:24:04:e0:b6: 6a:12:d6:45:7a:5c:0b:f6:83:fa:f4:9c:ef:ab:d0:4d:d2:22: d9:1f:a3:e3:3a:5c:cd:33:ff:77:8d:a0:94:56:3d:53:f8:12: ee:ce:9f:56:06:db:ef:25:f4:93:6f:09:b1:2b:9d:8d:c7:40: da:5d:ac:0b:43:ea:c1:99:e1:de:4d:19:16:05:ee:a9:d6:3d: ce:d3:ab:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYwMzI2MjAwOTIzWhcNMjYwNDAyMjAwOTIzWjAYMRYwFAYD VQQDEw02OWM1OTI3NC00M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro9LTQVyLwhdsp05td0OoJ8AZw3bsVR6WD9dcI6lYV6gHHfLCAL+9w03iksG aZ6jyRKd6veJgRVdXka91aLld1FCyslFSoTFa8kA8XgBTY9xB0lFKEjmSjyHzt9d 2A3OdyKb9hYoY4PZEaGMW89U9GWBWTXdYTSeiGTJbaeofjyJoWTFXQJd0BWJwg2a +2fZpFZn0W1nkFsaINQzjF9NsPR+6DVG+wX04sBlhLTGzLSLNpbv5ASkVaKEkEPI jKhphDuqzCIMB5Rg2c/AiW9vBiCPIL9l2q+YnNNKPdk9rwsbYTQQ3BcUkryx7ape ahcSJdQCaDeWgMCQ4g7Il/lCQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUCVe9B NOwSrvnUW7f+pRnBcPsUMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKneBvemEQiHuN6SEuB0i4xZXkI+2H2/UIRndSt644baM+t7zIZeU2/RuQLip HeaUHDvdTWsV10Gm5y3A1tvLbUn24pZ5ri0GFurk6qIu/jbnN4RDubVF7Gy4Gs8q iz+FHviagIvnX3rvYS/noYjv5t5zZ1c7bD7wj/Ocd7LZAD3R1wcMz+y6rva5L9/v ecx8YyIWUYIUoidO0Py/76lFTBVPyx7rF0UJmFiIeTf0NdwkBOC2ahLWRXpcC/aD +vSc76vQTdIi2R+j4zpczTP/d42glFY9U/gS7s6fVgbb7yX0k28JsSudjcdA2l2s C0PqwZnh3k0ZFgXuqdY9ztOroQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:48 2026 by rpki-client