$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: XlpOdwRSAcWuBhoCfBdGEgoMSl9CTnKNj79VGRl7A/g= Subject key identifier: 24:F3:BC:BF:98:2E:35:CB:C5:4E:CE:76:C1:87:DE:D4:F8:F5:BA:0F Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 28A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 287D Signing time: Sat 04 Apr 2026 15:33:13 +0000 Manifest this update: Sat 04 Apr 2026 15:33:12 +0000 Manifest next update: Sat 11 Apr 2026 15:33:12 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: QaXrLsEJBlL6N64lvMxnT0gWLHKR7SwzNk5pEKIVeF4=) 2: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: 9GVylNABRiUF/bNFB+XBrQ4aT79hVzEVLhbNM6JQTPs=) 3: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: QOUfW1TvLM3TNftLaWNGliib5JWln6/7ufAzFMko72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10401 (0x28a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Apr 4 15:33:12 2026 GMT Not After : Apr 11 15:33:12 2026 GMT Subject: CN=69d12f39-f4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:66:b8:ac:a7:7a:f6:b7:74:9d:1f:bb:2d: 03:00:2b:2e:86:d8:fd:1e:aa:69:2c:34:ae:d6:02: 63:05:ab:af:56:c8:1e:30:6f:b9:5a:53:49:a8:63: 04:09:a3:24:9f:24:1c:bd:0b:9b:45:00:a1:d9:9b: 95:a0:58:4e:f2:ea:5c:c7:4c:82:5a:b4:0c:a6:2f: e1:8b:47:34:32:f4:90:25:f2:d2:58:98:1c:a8:41: 65:df:ea:e8:26:20:66:c0:2e:2e:1b:ab:c2:19:28: 49:69:d9:07:5a:9c:4d:2c:41:5a:94:aa:97:de:48: e2:70:28:16:5b:b5:18:a5:53:d1:b0:d6:4a:2a:4d: 46:bd:aa:83:66:af:f1:2c:35:28:0d:42:75:64:6b: f0:90:33:9a:a6:2e:f5:45:57:b5:dc:11:fc:2a:ef: 4f:ad:3b:60:c8:25:da:05:90:02:a0:4d:88:e9:e2: fb:41:8e:91:3c:83:8f:82:bb:10:48:fc:c1:9c:65: 7f:ee:26:93:ff:d9:25:32:61:91:1e:19:b5:0d:fe: 1a:12:69:ab:0e:28:99:65:08:e3:0d:ab:dd:7c:27: 55:96:41:e8:09:b0:a8:55:60:b1:b2:0f:c5:ec:3f: 4d:c2:f9:84:74:bb:c8:1f:55:ca:d4:e4:61:1e:5c: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F3:BC:BF:98:2E:35:CB:C5:4E:CE:76:C1:87:DE:D4:F8:F5:BA:0F X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:81:5d:2e:2b:00:78:fc:f4:cd:4c:e6:ec:b4:16:6f:f6:43: d9:fa:71:5f:9f:73:e4:e8:a5:f7:39:7b:b8:c4:77:78:5c:d8: e2:32:87:a1:0d:07:1c:ca:43:47:89:cf:d1:25:5f:a6:57:b7: 3f:02:ac:6a:87:07:29:11:42:b9:0d:72:f6:9e:81:df:68:25: e2:25:a3:57:57:4d:b3:00:97:46:92:34:2a:2a:64:48:a9:16: d1:d3:6b:14:aa:15:a7:0d:23:ae:42:6b:97:57:97:d1:5d:1d: 06:79:9b:c6:3f:4b:6f:5c:3e:56:ed:3a:2f:e1:39:3c:12:55: 77:ea:e1:fb:55:f0:29:3e:04:1b:4d:77:b4:11:84:19:b3:9c: 94:b9:51:b3:18:16:21:00:2d:3a:65:f7:59:be:e9:d3:aa:02: 21:d6:70:82:db:71:37:20:d2:36:78:ca:0c:a9:56:c5:de:c8: bf:c5:61:98:a3:6b:f7:ea:7d:70:09:d5:c0:5d:c2:74:6f:d3: 1d:41:6d:71:ba:f3:4f:bb:28:d7:e6:cd:27:61:db:4e:99:f4: 4b:a6:ca:1e:33:60:df:0b:fe:0f:53:5c:22:ed:6f:79:c1:9e: 96:cf:43:36:f4:8e:52:25:a1:0f:54:2a:18:6c:d7:6b:eb:95: 40:16:6f:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwNDA0MTUzMzEyWhcNMjYwNDExMTUzMzEyWjAYMRYwFAYD VQQDEw02OWQxMmYzOS1mNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+BmuKyneva3dJ0fuy0DACsuhtj9HqppLDSu1gJjBauvVsgeMG+5WlNJqGME CaMknyQcvQubRQCh2ZuVoFhO8upcx0yCWrQMpi/hi0c0MvSQJfLSWJgcqEFl3+ro JiBmwC4uG6vCGShJadkHWpxNLEFalKqX3kjicCgWW7UYpVPRsNZKKk1GvaqDZq/x LDUoDUJ1ZGvwkDOapi71RVe13BH8Ku9PrTtgyCXaBZACoE2I6eL7QY6RPIOPgrsQ SPzBnGV/7iaT/9klMmGRHhm1Df4aEmmrDiiZZQjjDavdfCdVlkHoCbCoVWCxsg/F 7D9NwvmEdLvIH1XK1ORhHlxM6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTzvL+Y LjXLxU7OdsGH3tT49boPMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYFdLisAePz0zUzm7LQWb/ZD2fpxX59z5Oil9zl7uMR3eFzY4jKHoQ0HHMpD R4nP0SVfple3PwKsaocHKRFCuQ1y9p6B32gl4iWjV1dNswCXRpI0KipkSKkW0dNr FKoVpw0jrkJrl1eX0V0dBnmbxj9Lb1w+Vu06L+E5PBJVd+rh+1XwKT4EG013tBGE GbOclLlRsxgWIQAtOmX3Wb7p06oCIdZwgttxNyDSNnjKDKlWxd7Iv8VhmKNr9+p9 cAnVwF3CdG/THUFtcbrzT7so1+bNJ2HbTpn0S6bKHjNg3wv+D1NcIu1vecGels9D NvSOUiWhD1QqGGzXa+uVQBZvww== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:05 2026 by rpki-client