$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: RDAiz8CccYBd2r+s3xiatTpaGSShzvrxIZY2kuabPBA= Subject key identifier: 84:08:5B:FA:A0:79:B7:09:14:A2:59:0C:25:E6:DD:12:C6:60:02:1E Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: 01C2 Signing time: Wed 25 Mar 2026 03:19:15 +0000 Manifest this update: Wed 25 Mar 2026 03:19:15 +0000 Manifest next update: Wed 01 Apr 2026 03:19:15 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: iD3dguyTQfmougqcJyvI1D+aTR25Aizmac5eafnCfbU=) 2: 6ADC0F18FF1D11F086C8691B85EE528E.roa (hash: qycwNFEwe0WCox3b0t6EEex0iXi3dr3ngBwrVkgIPLM=) 3: 6C8EE42AFF1D11F086C8691B85EE528E.roa (hash: ygZHjK4h/9c3mSuM0Vq1HpftrVdzEalSrtCYTdgxEeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: Mar 25 03:19:15 2026 GMT Not After : Apr 1 03:19:15 2026 GMT Subject: CN=69c35433-58c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:6f:d6:38:ed:ee:51:b5:45:d4:75:45:13: aa:7a:86:64:3a:d4:eb:89:03:a7:88:52:8f:9d:24: 16:77:2b:93:f4:c7:2b:09:17:21:69:c0:96:e6:7f: 97:ca:fb:e4:b4:ca:d1:51:65:e1:51:d3:47:ad:ef: 1f:5e:33:12:7e:61:3f:1e:5e:c2:cc:06:9a:13:a6: 8f:69:6b:36:e4:50:82:fb:69:71:a2:b0:30:50:70: b8:91:e9:c3:30:cb:96:42:a5:c9:be:45:58:b4:cd: a9:5e:28:61:fb:4b:c1:d8:6b:ca:73:83:d0:d7:74: cd:60:9f:62:3f:82:c7:e8:fc:5d:c7:16:a6:35:cf: ad:21:7f:46:6b:5c:c7:de:52:1b:af:9c:75:7f:7a: 1d:23:2d:50:7b:2c:f1:0a:ca:0b:62:6e:68:59:2b: 12:98:ac:5f:1c:b9:00:6e:1a:d9:c1:d0:64:dc:9c: 7e:6e:ce:1f:77:34:f0:a2:ec:5b:b6:d2:29:b9:dd: 22:a0:8d:ee:f3:de:4d:bd:35:e5:59:70:e8:a3:c5: ae:2a:0b:31:d3:c6:aa:68:e3:29:3f:9d:63:8a:6d: c3:1a:db:44:09:33:c0:f7:ab:65:5c:a4:6e:79:8b: fe:a0:d8:31:68:da:67:e1:e7:61:a6:1d:ea:f9:04: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:08:5B:FA:A0:79:B7:09:14:A2:59:0C:25:E6:DD:12:C6:60:02:1E X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:8a:e2:0d:9e:bd:7c:df:8e:c7:8f:06:86:a1:e1:7c:cf: 76:69:44:32:6a:03:98:65:d3:f3:55:5d:90:87:62:9b:12:0e: c9:39:7d:f3:03:0f:cb:e5:b2:25:73:78:63:6f:ec:e4:fb:23: 1b:86:cd:df:c2:e7:00:4f:54:f6:b9:85:2f:fd:b3:58:97:8e: 76:1c:4b:1f:e8:0e:e3:fe:3e:e0:55:8f:a9:fa:2d:28:5f:4e: cf:55:6f:03:d8:3e:58:d9:5c:9c:7a:44:79:44:03:71:07:7b: 51:17:99:d5:16:4f:fe:b8:b9:a2:de:30:ac:8d:64:47:c3:97: 40:a5:f0:4c:58:e8:62:d3:db:40:e2:8c:84:71:61:f7:0a:a7: a8:fa:c0:2a:09:a4:36:7d:7b:7d:71:78:04:e8:1d:ab:f8:1d: b4:9a:e3:51:79:ac:bb:fc:e1:8b:dd:38:0d:9f:6a:cc:a0:be: 00:dc:7b:fd:bb:88:ac:59:f2:57:04:65:40:eb:64:33:05:39: 68:38:5f:5d:00:1a:ba:2b:5e:88:61:63:12:f9:73:42:09:c3: 7b:15:b6:2d:3a:89:28:f9:a0:3b:5d:bd:1d:cd:e3:31:6a:c8: af:4b:6a:14:be:88:95:90:d2:bb:b6:3b:38:3f:6e:1b:7b:35: bb:d3:f2:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC NEU5ODU3QzEwHhcNMjYwMzI1MDMxOTE1WhcNMjYwNDAxMDMxOTE1WjAYMRYwFAYD VQQDEw02OWMzNTQzMy01OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKRv1jjt7lG1RdR1RROqeoZkOtTriQOniFKPnSQWdyuT9McrCRchacCW5n+X yvvktMrRUWXhUdNHre8fXjMSfmE/Hl7CzAaaE6aPaWs25FCC+2lxorAwUHC4kenD MMuWQqXJvkVYtM2pXihh+0vB2GvKc4PQ13TNYJ9iP4LH6PxdxxamNc+tIX9Ga1zH 3lIbr5x1f3odIy1QeyzxCsoLYm5oWSsSmKxfHLkAbhrZwdBk3Jx+bs4fdzTwouxb ttIpud0ioI3u895NvTXlWXDoo8WuKgsx08aqaOMpP51jim3DGttECTPA96tlXKRu eYv+oNgxaNpn4edhph3q+QRdSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQIW/qg ebcJFKJZDCXm3RLGYAIeMB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjEwMy8yRkI5ODUwODkzRkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16 amNtMFFDd1N1dHkwNllWOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/WK4g2evXzfjsePBoah4XzPdmlEMmoDmGXT81VdkIdimxIOyTl98wMPy+Wy JXN4Y2/s5PsjG4bN38LnAE9U9rmFL/2zWJeOdhxLH+gO4/4+4FWPqfotKF9Oz1Vv A9g+WNlcnHpEeUQDcQd7UReZ1RZP/ri5ot4wrI1kR8OXQKXwTFjoYtPbQOKMhHFh 9wqnqPrAKgmkNn17fXF4BOgdq/gdtJrjUXmsu/zhi904DZ9qzKC+ANx7/buIrFny VwRlQOtkMwU5aDhfXQAauiteiGFjEvlzQgnDexW2LTqJKPmgO129Hc3jMWrIr0tq FL6IlZDSu7Y7OD9uG3s1u9PyfA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:44 2026 by rpki-client