$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: TSy+UF7tvEhT/L7GHjyP6IKywib3UTNdvXaxoUrNmf0= Subject key identifier: 1E:95:C5:13:E9:ED:50:78:BE:C9:CF:43:B9:8E:1C:C4:BE:46:B0:14 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 0609 Signing time: Tue 24 Mar 2026 23:22:13 +0000 Manifest this update: Tue 24 Mar 2026 23:22:12 +0000 Manifest next update: Tue 31 Mar 2026 23:22:12 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: UnAY1KaXldOBYkg4Srz5p/du7zIxRsz3A277JbMh5KQ=) 2: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=) 3: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: NSkewz1Nti6QKVykPaOpJXeaqBl6UeIoyg+Z+Emi77U=) 4: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=) 5: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=) 7: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=) 8: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: g3gth29agU07YswlgFO81/ThxXY3l/MzAhQfGvaSf0I=) 10: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=) 11: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=) 12: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=) 13: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=) 14: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: 5Bt5jOSeH1ZirCo6XLSESzVh2uk9S+hEE8FWtq9svC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Mar 24 23:22:12 2026 GMT Not After : Mar 31 23:22:12 2026 GMT Subject: CN=69c31ca5-84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:a1:c7:6b:cc:dd:08:80:92:22:f7:b0:55: ff:37:eb:fa:5d:d8:56:57:26:32:6b:99:c0:0e:79: 7b:df:dc:8d:17:71:90:6d:4a:44:b7:81:81:3e:03: df:6d:a3:e5:f7:3c:d6:59:70:43:7a:e1:16:96:10: e1:42:e4:70:ae:95:e4:88:f0:b3:b8:eb:0d:30:53: 12:f7:dc:f1:fa:ef:38:e2:28:ba:fc:6f:61:08:0c: 7e:35:9f:8d:0c:92:16:0e:42:03:7f:fd:85:5c:6f: f3:dc:9c:06:bf:55:1e:6f:36:1b:45:aa:5f:10:6d: 93:05:80:cf:45:db:33:22:bb:be:d6:5d:90:4d:ff: d9:7b:45:60:d5:bd:d6:db:49:1e:b4:33:84:d6:ca: ad:cb:56:25:3f:a5:ef:e5:f8:37:eb:40:84:a1:c1: 16:4a:1b:fc:8f:90:a0:05:dd:6a:2d:23:67:01:c8: 0e:48:b0:ee:56:2d:3f:29:70:0e:e0:e5:2f:33:56: 7d:c2:cb:3f:f5:cf:e8:38:7d:5e:31:c5:75:74:0b: 47:8d:15:f5:fa:7d:b7:9b:07:2a:9c:90:9b:da:81: 2f:58:dd:bd:b4:85:b6:8d:12:38:ca:db:0f:a0:d3: a8:0a:4d:0f:34:ba:cc:53:5c:cc:a0:91:9b:59:61: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:95:C5:13:E9:ED:50:78:BE:C9:CF:43:B9:8E:1C:C4:BE:46:B0:14 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:d2:69:f9:c3:88:60:52:0b:4b:f3:22:48:d9:0e:d7:0d: da:1f:5f:1b:f9:56:ef:5f:e0:ff:7c:8b:c0:bc:bf:61:87:9d: 25:c5:4b:af:00:88:3b:f3:25:16:1a:56:75:86:be:a6:66:df: 61:6a:1d:ea:4b:3f:d8:ef:65:7e:1d:25:ab:ba:ec:ee:6f:01: 11:59:7a:2e:89:03:28:5e:df:2b:88:12:e6:8c:00:2f:6c:c5: 90:f2:71:64:81:a0:7a:89:d4:69:1e:1a:7c:8a:cf:f7:0c:e6: ad:e0:d7:69:99:85:e2:da:b2:df:6f:43:66:b7:8a:78:35:e3: 9c:f5:ae:16:5a:d7:fb:9f:aa:89:b7:d3:ef:c6:8d:2e:3f:98: 54:92:ac:e5:c2:0c:e3:9a:0a:06:66:e2:22:9b:c1:62:93:4f: 51:3a:f6:3b:42:fa:fb:51:04:86:58:18:2a:1d:2c:43:7a:0e: 16:05:ee:0a:14:00:63:fb:3a:43:78:6e:2a:4a:5d:ec:9c:3d: 26:c7:3c:8f:d4:be:38:83:1d:d8:8a:01:2d:ec:6d:10:c3:88: 23:7e:eb:b9:ec:d5:ac:a0:c2:75:93:13:63:0b:8f:ad:99:48: a2:be:c8:a1:98:a6:c2:4b:da:b3:af:b6:0c:ff:7f:28:8b:b9: e0:ac:bd:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjYwMzI0MjMyMjEyWhcNMjYwMzMxMjMyMjEyWjAYMRYwFAYD VQQDEw02OWMzMWNhNS04NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQihx2vM3QiAkiL3sFX/N+v6XdhWVyYya5nADnl739yNF3GQbUpEt4GBPgPf baPl9zzWWXBDeuEWlhDhQuRwrpXkiPCzuOsNMFMS99zx+u844ii6/G9hCAx+NZ+N DJIWDkIDf/2FXG/z3JwGv1UebzYbRapfEG2TBYDPRdszIru+1l2QTf/Ze0Vg1b3W 20ketDOE1sqty1YlP6Xv5fg360CEocEWShv8j5CgBd1qLSNnAcgOSLDuVi0/KXAO 4OUvM1Z9wss/9c/oOH1eMcV1dAtHjRX1+n23mwcqnJCb2oEvWN29tIW2jRI4ytsP oNOoCk0PNLrMU1zMoJGbWWEiYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6VxRPp 7VB4vsnPQ7mOHMS+RrAUMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASEbSafnDiGBSC0vzIkjZDtcN2h9fG/lW71/g/3yLwLy/YYedJcVLrwCIO/Ml FhpWdYa+pmbfYWod6ks/2O9lfh0lq7rs7m8BEVl6LokDKF7fK4gS5owAL2zFkPJx ZIGgeonUaR4afIrP9wzmreDXaZmF4tqy329DZreKeDXjnPWuFlrX+5+qibfT78aN Lj+YVJKs5cIM45oKBmbiIpvBYpNPUTr2O0L6+1EEhlgYKh0sQ3oOFgXuChQAY/s6 Q3huKkpd7Jw9Jsc8j9S+OIMd2IoBLextEMOII37ruezVrKDCdZMTYwuPrZlIor7I oZimwkvas6+2DP9/KIu54Ky9JQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:06 2026 by rpki-client