$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: 7Y8X+n7EByx5Pys1dTKHH+4hGGz0SlPLblYOJK4a0VQ= Subject key identifier: 6F:49:5E:F2:36:A1:36:96:B6:47:7A:E5:6D:19:7A:40:89:0A:79:1D Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 35CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 3585 Signing time: Mon 06 Apr 2026 14:22:03 +0000 Manifest this update: Mon 06 Apr 2026 14:22:02 +0000 Manifest next update: Mon 13 Apr 2026 14:22:02 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: H9y1JnMLAf1Mw5kS9ti6YE5TbVlPv23NqXEoyDnwqwk=) 2: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) 3: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 4: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) 5: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) 6: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=) 7: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) 8: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Apr 6 14:22:02 2026 GMT Not After : Apr 13 14:22:02 2026 GMT Subject: CN=69d3c18a-6ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:75:40:5e:84:84:e9:50:49:f0:40:00:c8: 54:9d:91:34:66:3b:d4:b6:a5:b3:de:1d:84:67:1a: a9:8d:d8:5c:eb:e1:b9:04:4f:7a:2f:69:a4:7b:f8: ef:35:32:e2:0d:42:6a:51:de:84:15:c5:b3:4f:42: b9:b2:54:b9:35:ce:55:86:21:43:8f:91:d6:ff:64: b6:e5:2b:c7:db:d6:42:b2:58:3b:1e:bf:3f:85:af: 13:71:a7:18:f8:e1:ac:a7:98:98:e8:fe:68:36:ee: 12:df:09:26:d9:ab:63:72:2a:14:80:3c:95:4d:64: 05:c1:89:83:20:fb:7d:56:75:32:0a:ae:14:13:40: 74:11:69:15:8f:10:1c:1b:28:2b:6e:c1:6d:fd:27: f1:d6:bc:c2:f3:c3:fc:2d:33:ca:d3:c4:98:57:88: 73:bf:6e:01:c2:20:75:bc:4f:0a:5d:5a:74:38:2c: b1:83:33:db:ea:7f:79:77:05:35:74:16:6f:39:08: d5:73:e4:f4:27:df:a4:43:b6:9e:62:cd:3f:2e:fe: 9e:96:8c:6a:12:9b:d8:23:c0:74:29:23:c2:6d:a6: f9:37:b6:dd:fa:d3:5b:55:f6:fd:9c:0e:76:a5:b8: 0b:85:4a:50:e0:d5:47:63:cc:87:0b:0b:db:ff:b4: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:49:5E:F2:36:A1:36:96:B6:47:7A:E5:6D:19:7A:40:89:0A:79:1D X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:39:59:2a:76:28:a0:9d:6a:1d:ea:6e:c4:b3:fd:da:2e:6b: d7:52:8d:c8:5c:d5:4f:4a:a6:d2:b6:e1:b0:12:40:84:3a:0c: dc:c6:a0:ec:bb:84:d3:8e:a0:37:59:bd:6e:0e:2f:e5:de:d4: 83:b6:16:a5:0c:ea:bd:c6:6a:54:9d:f4:82:04:ec:65:b6:b7: 5f:7b:99:02:6c:1f:c2:c9:5c:b6:51:99:bd:32:ad:d4:06:bd: 81:88:12:0d:cc:6e:ef:ab:94:f9:f5:9e:a2:38:74:91:4f:8b: a6:c2:58:c9:ac:4e:9d:97:6c:38:ed:60:57:ec:2d:59:d1:73: 8c:44:84:8b:db:24:7c:1e:9d:40:11:a0:74:a9:d3:54:d8:2e: a2:15:65:30:4b:bb:56:d2:ce:16:1f:98:38:ff:bb:1a:b2:2a: 70:64:59:6a:d1:6c:ce:16:f2:18:7d:27:98:87:99:f5:2d:88: 03:04:5c:73:d8:01:91:52:db:ed:13:65:e7:fe:3f:9e:aa:10: 8b:90:60:92:19:4f:49:ef:43:ef:0b:49:7a:58:63:ff:0f:88: b6:fe:7a:75:3e:c6:36:fd:21:dc:15:ec:69:77:f7:ee:d7:77: ea:42:40:c8:88:42:1b:98:59:64:75:b7:5e:42:05:16:e5:95: 41:27:82:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwNDA2MTQyMjAyWhcNMjYwNDEzMTQyMjAyWjAYMRYwFAYD VQQDEw02OWQzYzE4YS02ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zx1QF6EhOlQSfBAAMhUnZE0ZjvUtqWz3h2EZxqpjdhc6+G5BE96L2mke/jv NTLiDUJqUd6EFcWzT0K5slS5Nc5VhiFDj5HW/2S25SvH29ZCslg7Hr8/ha8TcacY +OGsp5iY6P5oNu4S3wkm2atjcioUgDyVTWQFwYmDIPt9VnUyCq4UE0B0EWkVjxAc GygrbsFt/Sfx1rzC88P8LTPK08SYV4hzv24BwiB1vE8KXVp0OCyxgzPb6n95dwU1 dBZvOQjVc+T0J9+kQ7aeYs0/Lv6eloxqEpvYI8B0KSPCbab5N7bd+tNbVfb9nA52 pbgLhUpQ4NVHY8yHCwvb/7RLZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9JXvI2 oTaWtkd65W0ZekCJCnkdMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgzlZKnYooJ1qHepuxLP92i5r11KNyFzVT0qm0rbhsBJAhDoM3Mag7LuE046g N1m9bg4v5d7Ug7YWpQzqvcZqVJ30ggTsZba3X3uZAmwfwslctlGZvTKt1Aa9gYgS Dcxu76uU+fWeojh0kU+LpsJYyaxOnZdsOO1gV+wtWdFzjESEi9skfB6dQBGgdKnT VNguohVlMEu7VtLOFh+YOP+7GrIqcGRZatFszhbyGH0nmIeZ9S2IAwRcc9gBkVLb 7RNl5/4/nqoQi5BgkhlPSe9D7wtJelhj/w+Itv56dT7GNv0h3BXsaXf37td36kJA yIhCG5hZZHW3XkIFFuWVQSeCAA== -----END CERTIFICATE-----Generated at Tue Apr 7 12:06:08 2026 by rpki-client