$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: S1KOKucfeEzQwvV64hzQ5ekOmPY6sT8R433W7SV11r8= Subject key identifier: AD:36:5D:4B:24:83:C4:35:BB:82:DA:89:83:CE:2A:4C:09:02:AB:DA Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: DA Signing time: Wed 25 Mar 2026 05:59:35 +0000 Manifest this update: Wed 25 Mar 2026 05:59:34 +0000 Manifest next update: Wed 01 Apr 2026 05:59:34 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: sUgd6uHvyfLckx8JHi2bcbTcAUzzacQ8OKp5EN1zPWk=) 2: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=) 3: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Mar 25 05:59:34 2026 GMT Not After : Apr 1 05:59:34 2026 GMT Subject: CN=69c379c7-76bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:e2:b3:e9:be:e9:00:0f:0f:c4:40:34:4e: 6e:d2:9b:ce:22:20:88:83:be:8a:81:3f:f1:85:c6: e2:0e:eb:80:1d:37:f1:b9:42:45:44:8e:01:8d:a2: 2d:df:17:12:b9:45:f7:b0:ad:8c:90:8f:c2:fb:40: 12:34:3d:56:be:d8:c1:b3:5b:ae:12:24:48:da:8c: 2e:7d:cb:85:d6:8d:84:05:a5:a2:3c:87:15:db:d1: d8:4b:19:62:a1:d4:5a:42:c9:64:4e:af:2b:89:e9: a1:3f:59:dc:82:0f:25:0e:fb:39:38:09:e0:fe:21: cb:5d:44:7a:ac:bc:ab:7e:21:11:39:a5:ef:af:cb: c0:2e:50:5f:1d:35:9d:d8:66:7f:95:f6:8c:3c:46: cb:36:67:63:e4:f7:09:66:3a:a4:a8:28:ff:d4:92: 84:62:21:10:c7:a9:00:05:68:7d:4d:5e:4e:fe:1e: ef:8a:14:d0:89:19:39:e1:91:71:eb:60:18:d9:4d: ca:bc:7c:90:d7:8c:d8:27:c6:06:9d:f9:5e:16:00: cc:19:51:47:ea:62:76:63:dd:9b:d9:53:cb:1e:a8: 39:ce:50:35:e2:f9:9a:93:69:07:86:60:5f:f0:0c: 47:0d:d5:0f:2c:d9:66:a3:b8:3c:85:2e:42:27:9a: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:36:5D:4B:24:83:C4:35:BB:82:DA:89:83:CE:2A:4C:09:02:AB:DA X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5e:6c:77:b0:31:c0:58:d0:e8:6d:3a:1a:4b:b2:0a:8b:e7: 9c:1a:54:b4:82:59:96:91:3d:d6:89:8e:2d:6a:06:8e:d6:3f: 95:e7:29:e1:8a:86:50:1d:21:c5:ed:1e:bc:db:bb:52:66:37: 0e:a8:d6:48:43:82:95:81:5a:7f:f4:9d:6e:aa:2e:63:07:2b: db:a5:83:60:f1:5a:30:03:21:d3:b3:a0:0b:62:7c:f2:a4:90: a3:de:11:3f:c3:b2:1d:2a:61:7c:4e:7d:5f:93:05:71:c8:0c: 0e:55:a7:ca:72:0f:a7:3e:60:f5:2d:fb:65:13:4c:85:77:c6: 3e:7f:55:2a:c7:f4:bf:4b:9a:b4:51:2c:b7:92:46:10:a2:7b: f2:f8:33:81:c4:8b:7b:37:17:09:90:79:d2:a7:5f:d0:1e:1d: 49:d8:a1:59:43:cd:98:c1:84:3f:f4:79:de:4e:21:a0:bd:27: 6d:e1:81:96:51:24:d8:31:d2:d7:18:76:9c:96:7c:c5:6c:8e: ba:99:fe:34:de:1b:a3:ed:92:be:16:80:b3:05:07:a0:65:91: ce:23:54:95:1b:45:e0:4d:1e:27:cb:7f:73:3c:b1:38:f8:0e: 0d:a4:6f:f5:73:04:9a:54:2f:cb:69:7e:6b:e3:cd:c9:09:67: 03:5e:54:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjYwMzI1MDU1OTM0WhcNMjYwNDAxMDU1OTM0WjAYMRYwFAYD VQQDEw02OWMzNzljNy03NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHzis+m+6QAPD8RANE5u0pvOIiCIg76KgT/xhcbiDuuAHTfxuUJFRI4BjaIt 3xcSuUX3sK2MkI/C+0ASND1WvtjBs1uuEiRI2owufcuF1o2EBaWiPIcV29HYSxli odRaQslkTq8riemhP1ncgg8lDvs5OAng/iHLXUR6rLyrfiEROaXvr8vALlBfHTWd 2GZ/lfaMPEbLNmdj5PcJZjqkqCj/1JKEYiEQx6kABWh9TV5O/h7vihTQiRk54ZFx 62AY2U3KvHyQ14zYJ8YGnfleFgDMGVFH6mJ2Y92b2VPLHqg5zlA14vmak2kHhmBf 8AxHDdUPLNlmo7g8hS5CJ5oRawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK02XUsk g8Q1u4LaiYPOKkwJAqvaMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa15sd7AxwFjQ6G06GkuyCovnnBpUtIJZlpE91omOLWoGjtY/lecp4YqGUB0h xe0evNu7UmY3DqjWSEOClYFaf/SdbqouYwcr26WDYPFaMAMh07OgC2J88qSQo94R P8OyHSphfE59X5MFccgMDlWnynIPpz5g9S37ZRNMhXfGPn9VKsf0v0uatFEst5JG EKJ78vgzgcSLezcXCZB50qdf0B4dSdihWUPNmMGEP/R53k4hoL0nbeGBllEk2DHS 1xh2nJZ8xWyOupn+NN4bo+2SvhaAswUHoGWRziNUlRtF4E0eJ8t/czyxOPgODaRv 9XMEmlQvy2l+a+PNyQlnA15Uog== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:57 2026 by rpki-client