$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: OuOUav2dLL0rnZp2bcWKMxKPXwcjAcgR2SW3ovTQdNE= Subject key identifier: 62:71:4E:98:00:1B:3C:16:D6:C6:47:41:1D:6C:1B:FE:B4:09:15:ED Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: 0133 Signing time: Sun 05 Apr 2026 04:57:36 +0000 Manifest this update: Sun 05 Apr 2026 04:57:35 +0000 Manifest next update: Sun 12 Apr 2026 04:57:35 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: z1tKUWMhhgodN5/YIsrEu/+4E8RpjUqQoGi+Jo/Pnrk=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Apr 5 04:57:35 2026 GMT Not After : Apr 12 04:57:35 2026 GMT Subject: CN=69d1ebbf-e736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:a4:76:5e:5f:01:27:16:ca:4f:97:1f:6c: 14:3a:f3:e9:b5:84:9d:0f:06:45:08:f8:98:7d:dc: 11:c9:4e:92:f1:ae:ca:bb:cc:2d:b5:e3:a7:df:de: dc:f6:93:02:0a:00:2f:dc:c3:91:ed:a0:f5:1a:8a: 27:27:68:8f:db:31:be:19:e7:eb:a6:fc:f6:e8:3f: 78:56:1b:77:1d:4a:f7:9d:58:35:9f:ee:93:45:16: 71:64:c9:e9:38:c1:0e:8b:ba:20:03:63:52:b1:ed: 0f:4b:3d:cb:b8:03:7b:ea:3b:81:e3:0e:be:cb:ef: dc:43:38:4d:77:ef:67:d0:67:43:39:57:e2:dc:05: ca:f0:5a:b3:24:35:17:60:77:3d:1d:52:09:ce:bc: ff:86:51:9f:58:ee:fc:1c:d0:19:51:d7:39:ac:93: b6:8a:64:49:97:9d:81:a3:bc:90:33:cb:39:c1:5a: 3e:15:78:bc:78:ad:b0:fe:4c:1f:02:17:ec:5d:0e: cf:e2:d9:1f:6a:df:91:67:65:5e:a7:6a:02:54:e7: a1:ea:6c:2f:09:d0:be:0d:9a:1e:20:04:cd:e3:90: 8d:86:17:32:31:be:d6:6e:3d:4e:5f:23:4c:ff:e7: ff:0b:f8:cd:a3:80:96:18:06:99:09:eb:3c:c7:b7: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:71:4E:98:00:1B:3C:16:D6:C6:47:41:1D:6C:1B:FE:B4:09:15:ED X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:e9:96:6e:05:85:e7:61:54:8c:12:39:11:da:d5:8a:23: 4a:5c:dd:c5:f2:4b:ea:29:da:83:34:f4:1f:03:5f:ea:fd:b7: b3:08:3f:22:40:f4:6d:e5:40:1b:d4:08:9d:10:f6:66:18:ae: c0:4b:af:2e:79:26:c2:23:94:3b:11:24:6b:d7:06:a2:b7:37: f0:89:a7:a0:31:17:3c:12:45:f6:64:8a:36:b8:f2:38:45:3e: 04:96:8f:cf:1f:58:f8:9c:27:35:87:6c:25:36:13:f2:bc:f7: a9:f6:d9:2e:47:d6:5a:16:e3:ca:57:a8:ba:c5:0a:90:42:c2: 08:fd:d3:6c:0a:a8:8b:98:79:c5:b9:f5:fa:f7:f7:8e:22:54: 8f:05:eb:9b:5d:31:60:88:79:62:c2:52:1c:cf:e4:f2:f9:a3: 33:e3:4c:89:a5:78:97:9c:c2:65:a6:08:20:f9:65:4c:69:8e: d7:5f:8c:42:58:f3:35:e5:e7:81:c8:79:e6:b1:5a:39:4a:7f: 5f:5a:7c:71:d4:27:a9:e1:3b:fa:97:53:74:6d:f9:13:b9:fd: 95:a7:d0:30:04:22:6f:3f:93:6f:32:82:0b:e6:28:55:2c:70: 6d:be:07:7a:e1:ef:de:b9:e0:23:b8:da:25:ed:40:5e:76:af: a1:2d:b9:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjYwNDA1MDQ1NzM1WhcNMjYwNDEyMDQ1NzM1WjAYMRYwFAYD VQQDEw02OWQxZWJiZi1lNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZWkdl5fAScWyk+XH2wUOvPptYSdDwZFCPiYfdwRyU6S8a7Ku8wtteOn397c 9pMCCgAv3MOR7aD1GoonJ2iP2zG+Gefrpvz26D94Vht3HUr3nVg1n+6TRRZxZMnp OMEOi7ogA2NSse0PSz3LuAN76juB4w6+y+/cQzhNd+9n0GdDOVfi3AXK8FqzJDUX YHc9HVIJzrz/hlGfWO78HNAZUdc5rJO2imRJl52Bo7yQM8s5wVo+FXi8eK2w/kwf AhfsXQ7P4tkfat+RZ2Vep2oCVOeh6mwvCdC+DZoeIATN45CNhhcyMb7Wbj1OXyNM /+f/C/jNo4CWGAaZCes8x7e1UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJxTpgA GzwW1sZHQR1sG/60CRXtMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxrplm4FhedhVIwSORHa1YojSlzdxfJL6inagzT0HwNf6v23swg/IkD0beVA G9QInRD2ZhiuwEuvLnkmwiOUOxEka9cGorc38ImnoDEXPBJF9mSKNrjyOEU+BJaP zx9Y+JwnNYdsJTYT8rz3qfbZLkfWWhbjyleousUKkELCCP3TbAqoi5h5xbn1+vf3 jiJUjwXrm10xYIh5YsJSHM/k8vmjM+NMiaV4l5zCZaYIIPllTGmO11+MQljzNeXn gch55rFaOUp/X1p8cdQnqeE7+pdTdG35E7n9lafQMAQibz+TbzKCC+YoVSxwbb4H euHv3rngI7jaJe1AXnavoS25Fg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:07 2026 by rpki-client