$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: NiGvwHI/yulfPCdxG32zlzDQnrfmf7cyDLe9pzBZ3rs= Subject key identifier: 14:04:D8:16:0E:49:84:6D:B4:A6:92:C5:8A:05:E1:D4:AB:7A:1D:0C Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0D00 Signing time: Sat 04 Apr 2026 17:59:29 +0000 Manifest this update: Sat 04 Apr 2026 17:59:29 +0000 Manifest next update: Sat 11 Apr 2026 17:59:29 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: hlW90ypDAqlnF58jRxcT16/FI0WP1dGro3EZyaEN5V4=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Apr 4 17:59:29 2026 GMT Not After : Apr 11 17:59:29 2026 GMT Subject: CN=69d15181-0a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:df:15:64:58:27:23:fe:4a:82:43:63:01: 4b:1a:02:25:5b:57:e5:4a:13:3a:97:05:68:19:ac: a9:b1:36:45:0a:03:7b:26:69:01:69:89:d8:e5:b2: 3e:c7:03:2f:75:d6:bc:e7:97:a3:df:00:d9:ae:db: ce:bb:2b:8c:a6:c9:db:c7:0f:40:aa:41:c7:7a:43: 7f:66:04:c3:88:eb:28:e0:9b:b2:33:94:f1:2a:5c: 3f:f2:ab:1a:3e:4d:f1:7a:4f:7f:9e:0a:1d:7a:f4: 4a:8a:9e:c7:3b:dd:4d:e1:72:cc:57:41:2b:39:fd: 02:04:3e:30:14:d5:4a:bd:19:88:bd:a6:4f:d6:69: 6a:46:86:0d:0d:a2:38:5c:19:61:c5:65:4f:27:4d: 52:8c:6f:4d:dd:07:69:2d:81:c3:37:32:2b:f5:f1: 9d:c9:89:95:2d:88:8f:62:f7:f1:e0:aa:0b:f0:39: 7d:e6:58:33:94:9f:8e:97:6b:1d:28:b5:27:63:90: ac:9c:1c:f0:4e:fe:27:da:f4:82:1e:4d:b5:f8:d9: c0:8a:bd:49:52:f5:6a:9d:18:e3:5a:8f:7a:fe:fb: 23:55:4d:b9:93:ac:c1:cc:68:aa:44:5b:99:d2:e9: 2e:18:7e:eb:f9:d5:f2:1a:ca:e8:ab:51:54:84:2d: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:04:D8:16:0E:49:84:6D:B4:A6:92:C5:8A:05:E1:D4:AB:7A:1D:0C X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:4d:da:35:39:ae:35:56:bc:ad:e5:ab:e8:e2:0a:6b:2b: 31:d0:72:6b:2c:ee:60:3f:6f:91:1a:c5:8f:c1:23:1c:0c:3a: 4a:5e:98:23:80:fa:a1:53:e0:d8:19:0b:d6:15:fc:96:4f:bd: f8:35:28:ab:e6:e2:80:16:2d:78:09:a8:3b:50:74:8d:41:21: ad:0c:a5:95:36:f8:09:db:8b:2e:70:08:07:ee:d0:dc:6b:4a: da:11:84:8d:22:df:c3:b0:57:f0:cc:18:b7:09:d0:f2:17:e1: 7e:e4:20:50:ce:6d:0e:26:a6:eb:cb:1f:c1:37:32:23:22:68: 84:74:d8:7b:59:da:5b:1b:f0:31:e3:90:66:f8:87:88:37:f7: 03:41:79:70:ad:a4:f8:e2:0d:23:65:0b:ee:07:e4:e0:f6:6a: aa:aa:61:2f:d0:36:69:24:70:c4:ec:ee:e2:36:d8:4a:3e:49: 09:27:eb:0b:96:06:b4:63:a1:67:37:8a:8b:8a:da:4d:6e:2e: 43:d3:d6:ea:cf:7c:8e:e0:4a:9b:2e:f7:e6:10:2f:07:ce:b1: fc:e6:45:19:2e:13:a3:39:1c:cd:4a:51:f2:8d:fd:4f:8d:98: f9:32:23:c8:11:2e:bd:34:96:8b:8f:29:ae:28:e0:66:d8:8c: 96:a5:5a:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwNDA0MTc1OTI5WhcNMjYwNDExMTc1OTI5WjAYMRYwFAYD VQQDEw02OWQxNTE4MS0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSTfFWRYJyP+SoJDYwFLGgIlW1flShM6lwVoGaypsTZFCgN7JmkBaYnY5bI+ xwMvdda855ej3wDZrtvOuyuMpsnbxw9AqkHHekN/ZgTDiOso4JuyM5TxKlw/8qsa Pk3xek9/ngodevRKip7HO91N4XLMV0ErOf0CBD4wFNVKvRmIvaZP1mlqRoYNDaI4 XBlhxWVPJ01SjG9N3QdpLYHDNzIr9fGdyYmVLYiPYvfx4KoL8Dl95lgzlJ+Ol2sd KLUnY5CsnBzwTv4n2vSCHk21+NnAir1JUvVqnRjjWo96/vsjVU25k6zBzGiqRFuZ 0ukuGH7r+dXyGsroq1FUhC1H7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQE2BYO SYRttKaSxYoF4dSreh0MMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOSFN2jU5rjVWvK3lq+jiCmsrMdByayzuYD9vkRrFj8EjHAw6Sl6YI4D6oVPg 2BkL1hX8lk+9+DUoq+bigBYteAmoO1B0jUEhrQyllTb4CduLLnAIB+7Q3GtK2hGE jSLfw7BX8MwYtwnQ8hfhfuQgUM5tDiam68sfwTcyIyJohHTYe1naWxvwMeOQZviH iDf3A0F5cK2k+OINI2UL7gfk4PZqqqphL9A2aSRwxOzu4jbYSj5JCSfrC5YGtGOh ZzeKi4raTW4uQ9PW6s98juBKmy735hAvB86x/OZFGS4TozkczUpR8o39T42Y+TIj yBEuvTSWi48prijgZtiMlqVa1w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:14 2026 by rpki-client