$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: p0l33lkw1CzHlyAFvW7bZn3kQEePR3kr7cL1yDwlh9Y= Subject key identifier: C8:1D:F1:19:3D:14:74:16:95:8F:48:A9:32:6D:2E:24:10:99:37:29 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 01EF Signing time: Wed 25 Mar 2026 02:52:50 +0000 Manifest this update: Wed 25 Mar 2026 02:52:49 +0000 Manifest next update: Wed 01 Apr 2026 02:52:49 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: GYEhOIB5Gi7qaOEXSUTXnzte9AwXld7TJ0F259xBqk0=) 2: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: JQYmKsWXoSm0lfyUAQDHWsNMbQA1U6oOzIeZnxZREpc=) 3: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: TlPZUMDag0+nbHWC7VeEq/uQgXojgN3hKUwwE1rmyAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Mar 25 02:52:49 2026 GMT Not After : Apr 1 02:52:49 2026 GMT Subject: CN=69c34e02-2c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:76:ea:17:30:b1:c1:59:02:bd:42:58:51: f5:48:b2:18:69:4b:e2:b6:35:9c:5a:d7:0e:b0:ed: 04:37:ff:b1:80:8b:09:12:9f:74:f4:dc:87:b2:02: 47:ec:1f:e4:cb:e6:63:87:4d:e3:fb:29:42:26:f2: eb:db:27:eb:19:aa:bc:fa:de:be:cd:63:9f:0a:2f: bd:73:d7:2b:bc:73:8d:33:f3:8d:68:a6:bd:70:ce: d8:de:d0:4c:17:42:59:28:a2:cc:d5:18:df:43:e1: d7:1c:6e:8e:60:6c:44:a0:0f:d7:03:fe:ea:ab:c7: d9:e0:ab:3e:6a:4d:7b:1a:ee:5b:20:21:22:71:f7: 60:7d:10:1d:e4:6d:a6:54:ad:21:63:7e:bd:69:91: 46:cf:03:31:25:a4:06:ad:0a:7a:7e:b9:a4:bd:ea: 23:8b:7e:c7:40:aa:53:14:fd:32:63:9c:92:83:1f: ab:f2:a5:b6:6b:8a:67:3e:69:60:c3:c0:d3:4f:5d: 12:a8:07:2c:4c:8a:f2:a8:a1:7f:03:5c:a4:ab:03: 4b:88:1c:eb:7d:6b:2a:37:7f:ee:4e:ab:4f:3c:c4: 29:50:46:f0:a2:7f:4b:36:d7:09:e6:71:00:21:55: 7a:12:d7:12:d6:8f:84:cf:0c:7b:c5:e5:4e:a2:0e: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:F1:19:3D:14:74:16:95:8F:48:A9:32:6D:2E:24:10:99:37:29 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:2b:1c:2a:6d:38:fa:3f:94:5e:7b:79:0b:eb:89:f9:0c:68: c2:ed:9b:5e:9b:70:db:28:dc:ec:3e:ae:eb:0c:31:8c:03:3f: 89:f3:09:5a:d5:a4:20:02:de:0f:d4:5a:c1:a8:1c:a8:e2:10: 3e:68:0f:16:a0:ed:cd:47:6c:6d:22:1a:b0:c4:d4:af:dd:b5: 7d:42:12:e7:72:49:b2:41:68:6d:69:e3:75:e1:54:53:da:c7: 16:00:08:93:72:43:5d:fa:c1:3c:1a:e1:e0:73:c6:14:b7:de: ba:30:54:09:48:43:ed:58:a9:1f:51:52:f6:3b:d3:86:cc:98: a0:86:b2:73:32:9d:ad:cc:38:f4:6d:a2:cf:76:18:c2:4e:bd: bd:42:21:58:76:35:26:53:6f:16:a9:11:00:67:c3:26:a9:69: 03:b2:b6:9a:51:3a:67:0a:2c:53:40:c6:dc:c3:8e:d9:af:82: a3:4d:d6:b9:17:52:cf:dc:50:b4:66:b6:12:1f:89:d7:ed:95: 50:21:11:bc:f8:81:5b:5a:81:7f:d3:fc:12:3c:b7:1d:c1:a7: 41:f2:9e:9f:33:62:46:b7:5b:e1:4d:68:97:18:1e:78:98:12: 67:bb:3f:0e:44:bc:3e:da:aa:bf:59:45:91:8b:45:5e:77:f3: f6:03:35:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjYwMzI1MDI1MjQ5WhcNMjYwNDAxMDI1MjQ5WjAYMRYwFAYD VQQDEw02OWMzNGUwMi0yYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi2526hcwscFZAr1CWFH1SLIYaUvitjWcWtcOsO0EN/+xgIsJEp909NyHsgJH 7B/ky+Zjh03j+ylCJvLr2yfrGaq8+t6+zWOfCi+9c9crvHONM/ONaKa9cM7Y3tBM F0JZKKLM1RjfQ+HXHG6OYGxEoA/XA/7qq8fZ4Ks+ak17Gu5bICEicfdgfRAd5G2m VK0hY369aZFGzwMxJaQGrQp6frmkveoji37HQKpTFP0yY5ySgx+r8qW2a4pnPmlg w8DTT10SqAcsTIryqKF/A1ykqwNLiBzrfWsqN3/uTqtPPMQpUEbwon9LNtcJ5nEA IVV6EtcS1o+Ezwx7xeVOog7v8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgd8Rk9 FHQWlY9IqTJtLiQQmTcpMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApiscKm04+j+UXnt5C+uJ+Qxowu2bXptw2yjc7D6u6wwxjAM/ifMJWtWkIALe D9RawagcqOIQPmgPFqDtzUdsbSIasMTUr921fUIS53JJskFobWnjdeFUU9rHFgAI k3JDXfrBPBrh4HPGFLfeujBUCUhD7VipH1FS9jvThsyYoIayczKdrcw49G2iz3YY wk69vUIhWHY1JlNvFqkRAGfDJqlpA7K2mlE6ZwosU0DG3MOO2a+Co03WuRdSz9xQ tGa2Eh+J1+2VUCERvPiBW1qBf9P8Ejy3HcGnQfKenzNiRrdb4U1olxgeeJgSZ7s/ DkS8Ptqqv1lFkYtFXnfz9gM1Cg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:53 2026 by rpki-client