$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: eApJx4m1/gWop5q55XuzfepmHguJhXXJ0xz07nOyv/c= Subject key identifier: 53:C9:60:08:1D:47:83:44:81:BD:D1:F8:A1:31:A2:8C:39:A4:F5:85 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0CDA Signing time: Tue 24 Mar 2026 18:07:58 +0000 Manifest this update: Tue 24 Mar 2026 18:07:57 +0000 Manifest next update: Tue 31 Mar 2026 18:07:57 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: hf53eEyPC7X7oYDSicZSRTyTE96Nph4Ks2xCH+vNRsc=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Mar 24 18:07:57 2026 GMT Not After : Mar 31 18:07:57 2026 GMT Subject: CN=69c2d2fe-026b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:3a:cf:05:fe:62:06:a5:c4:1e:c5:6e:ac: 18:de:0a:3a:89:11:ff:31:59:1b:d4:15:19:01:5f: e5:ff:f4:87:d6:fc:38:dd:03:5e:b2:bb:23:77:df: 9c:6a:21:7c:70:45:3a:6b:f2:36:17:be:c8:44:46: d9:ed:ba:5f:cc:b8:15:5c:b5:b2:f3:b9:b9:54:31: 3c:fd:cd:76:ad:8f:18:cb:b7:04:8e:20:c0:a5:5c: 89:fd:35:1e:84:f5:49:16:e5:9c:29:44:0f:29:d4: 47:e9:ed:54:94:95:66:24:d3:ed:51:f8:e3:43:70: f9:32:e7:36:8c:52:b9:3a:6e:e1:26:02:95:1c:96: 71:b2:17:8c:9b:b9:2b:e5:bf:61:3f:3a:1f:d2:5b: 1a:b5:f1:bf:95:7e:a5:02:70:19:b8:1b:2a:bb:39: 95:ba:16:dd:53:d6:7c:30:1e:88:34:50:99:75:51: 2d:7c:d1:b9:59:bf:57:df:94:ad:3c:b2:6a:14:d5: cc:34:6e:6b:c7:57:0a:ee:0d:0b:2a:49:76:fa:0b: d4:64:29:0d:30:5b:d5:46:9c:e3:8e:02:19:a8:32: c9:4c:57:8f:79:e7:9f:19:16:3f:4d:d6:89:7b:67: c8:ca:7a:ca:b7:df:cd:ce:43:57:b8:28:65:fd:33: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:60:08:1D:47:83:44:81:BD:D1:F8:A1:31:A2:8C:39:A4:F5:85 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:db:27:01:aa:5c:e1:b5:02:c2:38:51:ec:e9:3a:df:64:77: 52:24:0b:48:a6:f8:76:2d:72:8f:5c:da:4a:76:52:d6:86:54: 50:5f:fc:17:2a:85:a6:73:01:5d:28:23:42:c0:bc:54:35:4a: a9:c0:9b:27:ab:04:7b:c8:f6:05:90:a9:1e:6c:cc:90:b3:54: 72:b1:70:fa:26:6c:35:4a:ca:10:e1:c3:ac:a3:c2:bd:40:f8: 0f:66:75:8c:2e:99:56:11:3d:94:cd:35:7c:4b:5b:fb:f9:ca: 2c:16:1e:01:9a:23:b8:d4:45:ac:bd:4d:a1:ad:87:b9:d6:a7: b5:bf:8d:cc:0b:a4:90:00:f6:19:7e:58:a6:95:78:25:f6:40: b5:04:44:cc:60:e9:bd:a6:1a:10:32:1a:74:d7:d6:47:ff:a5: 0f:5a:ea:3c:ba:05:83:29:9f:98:72:5a:91:56:f1:17:10:16: 8f:fe:0c:8e:13:6a:74:fa:09:50:42:43:f6:7f:c0:40:44:8f: 0d:47:e9:ce:70:0c:81:cd:8a:17:40:51:20:83:8f:31:ea:ea: b1:50:a9:c8:b5:93:39:dd:ec:b8:9d:db:cb:7f:9d:4a:e0:52: d1:fe:8c:d0:77:7d:b5:26:ed:87:35:93:39:a9:30:02:3c:9a: 74:28:e8:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjYwMzI0MTgwNzU3WhcNMjYwMzMxMTgwNzU3WjAYMRYwFAYD VQQDEw02OWMyZDJmZS0wMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ46zwX+YgalxB7FbqwY3go6iRH/MVkb1BUZAV/l//SH1vw43QNesrsjd9+c aiF8cEU6a/I2F77IREbZ7bpfzLgVXLWy87m5VDE8/c12rY8Yy7cEjiDApVyJ/TUe hPVJFuWcKUQPKdRH6e1UlJVmJNPtUfjjQ3D5Muc2jFK5Om7hJgKVHJZxsheMm7kr 5b9hPzof0lsatfG/lX6lAnAZuBsquzmVuhbdU9Z8MB6INFCZdVEtfNG5Wb9X35St PLJqFNXMNG5rx1cK7g0LKkl2+gvUZCkNMFvVRpzjjgIZqDLJTFePeeefGRY/TdaJ e2fIynrKt9/NzkNXuChl/TOOIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPJYAgd R4NEgb3R+KExoow5pPWFMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGNsnAapc4bUCwjhR7Ok632R3UiQLSKb4di1yj1zaSnZS1oZUUF/8FyqFpnMB XSgjQsC8VDVKqcCbJ6sEe8j2BZCpHmzMkLNUcrFw+iZsNUrKEOHDrKPCvUD4D2Z1 jC6ZVhE9lM01fEtb+/nKLBYeAZojuNRFrL1Noa2Hudantb+NzAukkAD2GX5YppV4 JfZAtQREzGDpvaYaEDIadNfWR/+lD1rqPLoFgymfmHJakVbxFxAWj/4MjhNqdPoJ UEJD9n/AQESPDUfpznAMgc2KF0BRIIOPMerqsVCpyLWTOd3suJ3by3+dSuBS0f6M 0Hd9tSbthzWTOakwAjyadCjosg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:55 2026 by rpki-client