$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: qPgy3g6imouo5shbv59XJM+QnMjfTUiYP6zjLR8WoXI= Subject key identifier: 1A:49:94:AE:31:10:D1:B0:81:8E:C1:17:1A:B4:7D:00:14:1E:79:57 Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 01D6 Signing time: Wed 25 Mar 2026 02:55:00 +0000 Manifest this update: Wed 25 Mar 2026 02:54:59 +0000 Manifest next update: Wed 01 Apr 2026 02:54:59 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: FtQYJ0M4UeoJbAv92UvKtyB1/JseNISyOCERqrCvsUI=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: WP8HegPa5EokTKx706o1KpMqrQcLXlZh4ZkoerJ4FaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: Mar 25 02:54:59 2026 GMT Not After : Apr 1 02:54:59 2026 GMT Subject: CN=69c34e83-6e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:1c:83:18:aa:be:d2:69:55:56:92:d3:39: c1:a2:6c:7e:bd:b9:a7:e6:5b:69:3d:97:99:51:00: 04:3c:39:57:ab:e9:bc:a5:0a:ab:ee:89:00:eb:cc: 7b:c1:0f:ec:48:3f:be:9b:88:72:19:93:ce:04:46: 93:1d:b4:37:4b:84:62:cc:87:a0:a6:41:af:c1:b4: 29:92:a6:87:d1:cc:77:bc:ec:69:b7:a1:19:48:80: af:c3:e2:dc:b4:ba:a4:94:68:11:12:a6:70:02:04: 15:09:5d:a6:5d:13:09:41:63:cc:b7:a7:c6:cf:60: 6a:7c:d3:79:64:82:01:be:13:36:bd:01:d2:fe:94: 59:8b:de:0d:08:48:72:4b:e9:f5:7a:26:21:a4:2e: b8:cb:a0:e3:dd:30:cb:5e:c4:19:d9:01:32:5c:03: b5:38:a9:30:3c:46:b9:c9:c9:f9:4a:db:f7:ca:ff: 11:f6:07:7d:fa:62:1f:e2:65:2b:06:86:3d:0e:70: 1b:18:eb:79:32:b4:2a:6d:2a:cc:51:62:0e:33:c8: 66:f5:a1:e0:15:de:0a:9a:eb:de:f7:9a:01:6f:b6: 79:f7:70:eb:ba:8f:db:1f:6e:98:d7:5a:7e:57:27: 64:4d:be:e5:2f:e4:3f:c6:4f:cb:d7:0f:58:c8:e6: 2b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:49:94:AE:31:10:D1:B0:81:8E:C1:17:1A:B4:7D:00:14:1E:79:57 X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:df:e4:30:7b:c9:b2:b6:41:8a:32:56:85:1a:a7:32:a4:0f: 56:cf:f2:d8:34:6e:02:65:51:2f:52:c5:47:65:7a:f3:24:af: 3a:1a:5d:ac:76:38:e1:48:90:24:8c:d2:ef:e7:ce:03:50:df: 0b:b6:62:23:df:b8:10:c1:7c:ff:ab:3e:db:63:6c:01:d7:72: 78:e0:8d:9a:01:73:2f:d7:b9:8f:e4:85:05:55:b2:36:e7:2f: 40:d9:03:3c:f9:3b:ae:e6:90:6c:2c:f5:b4:5a:ee:e8:18:fc: 56:41:83:b9:f8:71:56:67:02:8b:85:89:d0:93:25:82:8b:1c: 2a:84:5b:b4:24:c0:6b:34:e9:b8:2f:38:fd:02:5d:f4:29:d1: 7d:ce:03:ab:99:12:1f:78:15:b6:7c:2a:61:17:d4:8d:cd:e5: a7:7a:2c:76:7f:9d:78:25:ac:fd:d5:d5:ea:c2:d5:66:e6:d9: 66:21:58:6b:8c:77:b8:3c:05:15:d2:79:e5:83:07:83:33:5c: 6f:c3:01:95:18:5d:e2:56:f7:ab:b6:02:ab:5f:f5:4d:8d:40: 4c:77:02:67:b3:27:76:97:34:16:33:b8:b3:59:f6:49:20:83: 00:94:b7:09:0f:0c:38:f0:4d:8c:bd:05:2b:84:4f:01:d6:39: de:c8:a9:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG MjJBOENGNUYwHhcNMjYwMzI1MDI1NDU5WhcNMjYwNDAxMDI1NDU5WjAYMRYwFAYD VQQDEw02OWMzNGU4My02ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkocgxiqvtJpVVaS0znBomx+vbmn5ltpPZeZUQAEPDlXq+m8pQqr7okA68x7 wQ/sSD++m4hyGZPOBEaTHbQ3S4RizIegpkGvwbQpkqaH0cx3vOxpt6EZSICvw+Lc tLqklGgREqZwAgQVCV2mXRMJQWPMt6fGz2BqfNN5ZIIBvhM2vQHS/pRZi94NCEhy S+n1eiYhpC64y6Dj3TDLXsQZ2QEyXAO1OKkwPEa5ycn5Stv3yv8R9gd9+mIf4mUr BoY9DnAbGOt5MrQqbSrMUWIOM8hm9aHgFd4Kmuve95oBb7Z593Druo/bH26Y11p+ VydkTb7lL+Q/xk/L1w9YyOYrgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpJlK4x ENGwgY7BFxq0fQAUHnlXMB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR MUpkdmJpbGhFN3J5S296MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARd/kMHvJsrZBijJWhRqnMqQPVs/y2DRuAmVRL1LFR2V68ySvOhpdrHY44UiQ JIzS7+fOA1DfC7ZiI9+4EMF8/6s+22NsAddyeOCNmgFzL9e5j+SFBVWyNucvQNkD PPk7ruaQbCz1tFru6Bj8VkGDufhxVmcCi4WJ0JMlgoscKoRbtCTAazTpuC84/QJd 9CnRfc4Dq5kSH3gVtnwqYRfUjc3lp3osdn+deCWs/dXV6sLVZubZZiFYa4x3uDwF FdJ55YMHgzNcb8MBlRhd4lb3q7YCq1/1TY1ATHcCZ7Mndpc0FjO4s1n2SSCDAJS3 CQ8MOPBNjL0FK4RPAdY53sipxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:08:38 2026 by rpki-client