$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft File: vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft (raw, json) Hash identifier: DTmvZY40gaJBfJVerABH8xrFl99Tgwm9obod6vIDs68= Subject key identifier: C2:17:36:D0:0E:4A:F8:B3:28:E6:FD:E4:0E:DA:7C:1D:5A:33:0D:BF Authority key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48 Certificate issuer: /CN=A917FFCC/serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft Manifest number: 13 Signing time: Sun 05 Apr 2026 08:20:35 +0000 Manifest this update: Sun 05 Apr 2026 08:20:34 +0000 Manifest next update: Sun 12 Apr 2026 08:20:34 +0000 Files and hashes: 1: vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl (hash: fnaSfCr19iu+c7X2Ib/Jwre+KnxmchKusr9xWci9e98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48 Validity Not Before: Apr 5 08:20:34 2026 GMT Not After : Apr 12 08:20:34 2026 GMT Subject: CN=69d21b53-9ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:28:28:dc:b9:42:df:b2:ff:eb:65:c8:f6: 4b:07:5b:2f:fc:82:99:66:c6:b2:3b:a3:7f:b5:24: de:5b:64:f4:37:ed:95:9e:3b:df:f7:8c:fa:0c:97: 16:51:5e:a4:8e:c8:1f:b2:45:f4:03:b1:e6:b6:9c: d0:af:87:a0:5c:c1:4b:2b:b8:cc:a4:ee:b4:1e:92: 3d:60:e9:c4:45:00:b3:9b:18:17:dd:89:e4:7a:6c: 3d:64:f0:46:2c:09:d2:2b:f0:83:12:71:b5:15:ad: 99:6e:96:30:ae:00:77:57:f3:72:a7:e1:91:75:70: 55:5f:e9:01:66:40:2d:3a:76:16:49:cb:36:b3:b0: 83:48:88:63:fb:78:b7:48:97:79:06:53:da:59:ac: c7:c7:78:0b:6d:6e:62:c8:75:d7:93:20:f8:59:8f: b7:ac:a3:ca:10:f2:3a:93:20:84:8a:b7:d6:19:6a: 8e:a6:1c:1c:15:8c:b8:43:36:ec:bb:6b:84:36:ae: 03:07:aa:31:d5:08:35:ab:a9:9e:02:d9:c2:fc:ef: 65:a0:2d:b7:45:a7:d6:28:b4:da:57:42:da:5c:02: d6:e6:8c:b6:37:56:41:84:7b:55:1b:37:e2:02:b6: 35:a9:e7:3e:10:2e:81:77:1d:2d:ab:0f:ca:86:99: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:36:D0:0E:4A:F8:B3:28:E6:FD:E4:0E:DA:7C:1D:5A:33:0D:BF X509v3 Authority Key Identifier: keyid:BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2a:b4:37:34:3d:31:c2:25:14:90:dc:71:73:31:3b:3e:60: 9d:de:32:47:2e:cd:b2:0b:18:c7:88:59:59:fc:44:47:09:95: f3:09:4a:81:a9:90:2b:a1:73:45:eb:b4:17:bb:a0:2a:e0:5f: 2c:36:8c:93:b3:87:c8:b2:a7:a2:1e:30:a3:09:4b:e0:a8:e0: d4:a8:d8:d8:8c:d8:d1:c7:18:7c:d3:8b:b4:73:31:0a:56:f0: 4e:ae:2c:89:e3:50:a9:fc:d5:41:2b:f0:5e:2a:e9:18:c0:fc: 5d:c4:fc:cd:c9:95:57:5b:5d:a6:e6:06:3e:84:16:33:b3:ce: 11:00:73:0c:46:21:4a:88:c2:e5:8d:e1:34:c0:3a:01:3c:9f: aa:02:f3:d9:88:5d:6a:91:f6:98:e7:17:47:7d:46:2e:e2:69: 84:8c:fb:ca:e6:e2:7e:d9:11:ed:1c:de:c2:08:6c:02:14:56: ea:e7:d7:e9:25:75:b0:f9:13:6c:1b:c1:40:3a:e7:ae:ec:fc: 93:ce:96:0f:1e:3e:73:f5:89:cc:53:d2:7f:00:06:c5:1f:16: 21:33:b6:e2:51:af:4e:28:8e:0d:77:f8:01:05:eb:9f:25:97: 65:18:7e:20:c7:08:e4:6b:4b:e8:59:cc:d8:24:d4:d0:80:8e: c6:66:cf:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoQkU4NzRGOUU2Qzc2RkJDQjc4QjE0RkI3MEY0MTJBODc5 NzFGQ0U0ODAeFw0yNjA0MDUwODIwMzRaFw0yNjA0MTIwODIwMzRaMBgxFjAUBgNV BAMTDTY5ZDIxYjUzLTliYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa9Sgo3LlC37L/62XI9ksHWy/8gplmxrI7o3+1JN5bZPQ37ZWeO9/3jPoMlxZR XqSOyB+yRfQDsea2nNCvh6BcwUsruMyk7rQekj1g6cRFALObGBfdieR6bD1k8EYs CdIr8IMScbUVrZluljCuAHdX83Kn4ZF1cFVf6QFmQC06dhZJyzazsINIiGP7eLdI l3kGU9pZrMfHeAttbmLIddeTIPhZj7eso8oQ8jqTIISKt9YZao6mHBwVjLhDNuy7 a4Q2rgMHqjHVCDWrqZ4C2cL872WgLbdFp9YotNpXQtpcAtbmjLY3VkGEe1UbN+IC tjWp5z4QLoF3HS2rD8qGmVjnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwhc20A5K +LMo5v3kDtp8HVozDb8wHwYDVR0jBBgwFoAUvodPnmx2+8t4sU+3D0Eqh5cfzkgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzExQzc2Mzc4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0NHNVLTNEMEVxaDVjZnpr Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm9kUG5teDItOHQ0c1UtM0QwRXFoNWNmemtnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzExQzc2Mzc4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0 NHNVLTNEMEVxaDVjZnprZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQKrQ3ND0xwiUUkNxxczE7PmCd3jJHLs2yCxjHiFlZ/ERHCZXzCUqBqZAroXNF 67QXu6Aq4F8sNoyTs4fIsqeiHjCjCUvgqODUqNjYjNjRxxh804u0czEKVvBOriyJ 41Cp/NVBK/BeKukYwPxdxPzNyZVXW12m5gY+hBYzs84RAHMMRiFKiMLljeE0wDoB PJ+qAvPZiF1qkfaY5xdHfUYu4mmEjPvK5uJ+2RHtHN7CCGwCFFbq59fpJXWw+RNs G8FAOueu7PyTzpYPHj5z9YnMU9J/AAbFHxYhM7biUa9OKI4Nd/gBBeufJZdlGH4g xwjka0voWczYJNTQgI7GZs+b -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:14 2026 by rpki-client