$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: Ob7Nc9CaO8E9ZJDhxj5nOupTlgcxGrj+htcjaKsmvyk= Subject key identifier: F5:61:87:DE:FA:81:E2:50:B4:C0:41:66:D8:B3:5D:EF:44:2D:1D:2C Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0FEB Signing time: Tue 24 Mar 2026 17:21:23 +0000 Manifest this update: Tue 24 Mar 2026 17:21:22 +0000 Manifest next update: Tue 31 Mar 2026 17:21:22 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: Yqr5a7sHQu+W6n5ou5/HO2FnsPWAZWdFigLaszOAmMY=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4089 (0xff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Mar 24 17:21:22 2026 GMT Not After : Mar 31 17:21:22 2026 GMT Subject: CN=69c2c813-6c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:52:98:c6:3c:d7:08:d3:2f:94:53:a8:13: 14:5f:8e:f3:a4:65:f3:6e:28:69:67:f3:b0:9a:57: ed:2c:72:46:27:02:7f:09:8d:dd:80:bb:da:44:7a: 9c:2b:3b:b4:2c:5c:25:b5:8c:11:a0:c3:42:e1:f3: 10:cc:92:32:1c:73:6f:90:ea:1f:3e:4d:3d:04:d1: 8a:22:0b:14:cb:29:b9:ef:68:1c:dc:40:12:61:b7: 1d:7a:8d:ea:17:aa:8c:b3:32:f5:32:f1:c0:08:66: 3c:43:50:9e:b7:d8:5e:a6:1b:75:79:1c:e6:67:c2: 66:ec:02:88:4e:16:85:63:21:c5:4f:60:62:b4:3f: 75:98:98:6f:a4:9f:6e:ee:57:f8:f2:6c:09:2c:c8: 14:8c:11:b0:cf:8b:fb:71:97:98:4b:68:20:0b:c3: f4:e8:4e:b7:24:32:02:ae:44:ff:9e:11:9b:e3:45: 4b:20:6b:78:62:8f:7a:c0:73:ab:7f:a0:27:2c:56: 23:eb:f1:9a:74:47:dd:95:50:92:b9:c9:5d:bf:41: 10:2f:2d:a7:c8:e8:98:79:09:84:63:90:d3:82:49: 13:bf:cb:4c:a3:9c:ee:cf:7e:ef:05:7c:29:10:19: 4a:f0:f7:6f:37:d7:05:f5:7d:1a:6a:f3:c5:7c:a5: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:61:87:DE:FA:81:E2:50:B4:C0:41:66:D8:B3:5D:EF:44:2D:1D:2C X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:44:61:cb:c4:0a:67:fd:a6:da:db:96:fe:0c:6a:aa:d3: 6b:8e:b9:4e:90:95:01:47:e2:70:ab:cb:61:16:57:0a:65:8f: ef:24:1f:72:fa:87:3f:98:56:42:78:b7:10:aa:9b:99:dc:77: c5:9c:c6:aa:a1:90:85:74:46:6a:b6:1c:39:7b:e7:8a:6d:d2: e0:83:b4:f2:3b:bd:d6:8a:95:e0:1f:be:60:5f:62:8b:8e:c6: 62:b5:bf:97:15:8e:f5:38:e1:40:28:85:24:7d:87:b9:ab:11: 34:c2:7a:ee:4f:17:3b:64:83:dd:17:5f:41:50:bc:83:1c:4d: ef:29:b2:5c:37:dd:e9:c7:cb:63:8c:9b:3f:fc:f4:ab:2c:a2: 69:ad:8a:0b:6c:9b:b1:df:c5:eb:11:05:6e:2a:52:d3:8f:59: 41:92:2c:38:5a:e7:05:4b:df:06:3e:cd:40:16:bf:6d:6f:a6: f5:69:2e:c0:09:9f:c8:67:f4:5b:67:c3:c3:37:29:d4:6b:9e: 07:b7:11:40:85:52:76:84:bd:e4:e1:c9:37:d3:59:1c:9f:b5: 8e:fb:d9:26:fc:d3:71:32:ea:fc:9f:98:c0:46:e1:20:94:74: 59:f6:de:a5:3b:89:5c:a0:6a:8b:34:58:5e:02:6a:35:f6:41: 71:1d:92:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjYwMzI0MTcyMTIyWhcNMjYwMzMxMTcyMTIyWjAYMRYwFAYD VQQDEw02OWMyYzgxMy02YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHdSmMY81wjTL5RTqBMUX47zpGXzbihpZ/OwmlftLHJGJwJ/CY3dgLvaRHqc Kzu0LFwltYwRoMNC4fMQzJIyHHNvkOofPk09BNGKIgsUyym572gc3EASYbcdeo3q F6qMszL1MvHACGY8Q1Cet9hepht1eRzmZ8Jm7AKIThaFYyHFT2BitD91mJhvpJ9u 7lf48mwJLMgUjBGwz4v7cZeYS2ggC8P06E63JDICrkT/nhGb40VLIGt4Yo96wHOr f6AnLFYj6/GadEfdlVCSucldv0EQLy2nyOiYeQmEY5DTgkkTv8tMo5zuz37vBXwp EBlK8PdvN9cF9X0aavPFfKXcbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVhh976 geJQtMBBZtizXe9ELR0sMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJCxEYcvECmf9ptrblv4MaqrTa465TpCVAUficKvLYRZXCmWP7yQfcvqHP5hW Qni3EKqbmdx3xZzGqqGQhXRGarYcOXvnim3S4IO08ju91oqV4B++YF9ii47GYrW/ lxWO9TjhQCiFJH2HuasRNMJ67k8XO2SD3RdfQVC8gxxN7ymyXDfd6cfLY4ybP/z0 qyyiaa2KC2ybsd/F6xEFbipS049ZQZIsOFrnBUvfBj7NQBa/bW+m9WkuwAmfyGf0 W2fDwzcp1GueB7cRQIVSdoS95OHJN9NZHJ+1jvvZJvzTcTLq/J+YwEbhIJR0Wfbe pTuJXKBqizRYXgJqNfZBcR2S9A== -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:00 2026 by rpki-client