$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: xC9VeVGPe/8ETjgsHWYIPmM85D6GaDubbPJ1+tOaH+E= Subject key identifier: 95:73:1D:D4:8D:6E:63:10:5E:5A:70:D3:2D:AB:01:8D:D8:69:B6:5D Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0D10 Signing time: Sat 04 Apr 2026 17:57:41 +0000 Manifest this update: Sat 04 Apr 2026 17:57:40 +0000 Manifest next update: Sat 11 Apr 2026 17:57:40 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: pR/8q6w/iZq+f6h0G/Nk2ZYnEeCz4CZJM1x5uZbR1JI=) 2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=) 3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Apr 4 17:57:40 2026 GMT Not After : Apr 11 17:57:40 2026 GMT Subject: CN=69d15115-0393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:ba:0d:3e:76:e7:03:d3:3e:9e:5e:87:f8: 97:71:c5:b2:8b:f9:c9:55:5b:af:c9:dc:d6:5e:33: 49:0c:af:04:ad:61:de:a9:1d:4e:0c:c6:4f:2f:c2: 8a:30:e7:8e:99:bb:96:c4:32:0b:83:f7:34:4b:73: ee:3c:e9:c2:bf:5b:88:81:81:a3:d9:f6:36:2e:75: 23:d2:05:f3:75:4c:ec:b2:1d:56:b0:a8:37:2e:d4: 30:36:a2:71:c2:76:61:e4:50:ff:e4:cd:fc:22:c9: a8:a7:a9:45:9d:06:dc:9c:21:8e:3d:20:dc:ce:3f: ab:92:f6:14:13:4d:6f:8f:9a:e2:a3:97:15:cd:49: cc:07:6f:e9:96:e0:e3:cc:a5:fd:82:35:39:5b:ac: 46:d1:9c:a9:2b:d1:2d:fa:13:8c:d1:04:a5:c8:46: 9a:ec:39:a6:52:77:af:8b:c1:7d:5d:e9:5c:ab:9e: 8c:4e:76:fa:b4:b9:c2:30:03:02:2a:20:3a:e7:6d: 3c:dc:12:22:fc:4d:8e:0c:26:1f:84:bb:aa:7f:9f: fb:c1:c7:44:70:23:b9:2d:b0:c0:46:8e:06:d9:02: 24:88:bd:c9:8f:64:d6:c0:31:fa:d1:e2:73:8b:c4: c3:62:f9:81:b1:6c:49:05:45:0a:38:ce:57:e8:4b: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:1D:D4:8D:6E:63:10:5E:5A:70:D3:2D:AB:01:8D:D8:69:B6:5D X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:8b:d7:c9:76:38:f7:8c:12:81:64:68:52:68:52:ac:bc: a9:0c:a2:3a:51:62:cc:8e:21:f1:9e:ec:da:a8:1d:c8:87:62: e7:7d:05:a3:f8:b9:94:9d:99:0e:1e:52:60:4b:ae:55:fa:ef: fd:06:26:b9:a3:4e:1e:45:47:99:c5:95:04:b2:fe:9c:85:c0: 96:09:6b:b5:e3:98:28:79:25:81:c3:05:67:0b:52:c1:af:d6: 1c:f3:2f:ce:9d:11:1b:d4:56:07:60:ff:4e:fb:25:24:5e:fd: 25:85:f9:bf:13:30:60:b0:01:c5:d0:6a:3e:66:6b:a7:54:51: 20:5a:fb:75:bf:b8:0f:a3:71:8c:d0:93:0c:ca:df:52:b6:40: 41:bd:4a:2f:0d:20:36:88:2e:ad:38:0b:af:32:dd:8e:58:52: 27:1f:b7:0c:bc:1a:0b:07:24:55:c9:92:9e:8b:fd:43:58:b8: 88:95:d7:fb:2e:fc:ec:d8:09:1d:88:da:b4:5c:b5:29:fe:30: ae:53:b4:06:77:e2:37:bf:a6:d6:bb:54:06:a3:d1:d7:c3:45: 36:ba:51:50:9a:a8:60:12:35:5f:14:83:f2:2f:1b:e1:2a:a9: 41:81:d5:e9:66:02:96:3d:0a:33:15:b2:ac:f9:f5:a4:fe:d5: 39:2e:2d:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjYwNDA0MTc1NzQwWhcNMjYwNDExMTc1NzQwWjAYMRYwFAYD VQQDEw02OWQxNTExNS0wMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdm6DT525wPTPp5eh/iXccWyi/nJVVuvydzWXjNJDK8ErWHeqR1ODMZPL8KK MOeOmbuWxDILg/c0S3PuPOnCv1uIgYGj2fY2LnUj0gXzdUzssh1WsKg3LtQwNqJx wnZh5FD/5M38Ismop6lFnQbcnCGOPSDczj+rkvYUE01vj5rio5cVzUnMB2/pluDj zKX9gjU5W6xG0ZypK9Et+hOM0QSlyEaa7DmmUnevi8F9Xelcq56MTnb6tLnCMAMC KiA652083BIi/E2ODCYfhLuqf5/7wcdEcCO5LbDARo4G2QIkiL3Jj2TWwDH60eJz i8TDYvmBsWxJBUUKOM5X6EuJ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVzHdSN bmMQXlpw0y2rAY3YabZdMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4+L18l2OPeMEoFkaFJoUqy8qQyiOlFizI4h8Z7s2qgdyIdi530Fo/i5lJ2Z Dh5SYEuuVfrv/QYmuaNOHkVHmcWVBLL+nIXAlglrteOYKHklgcMFZwtSwa/WHPMv zp0RG9RWB2D/TvslJF79JYX5vxMwYLABxdBqPmZrp1RRIFr7db+4D6NxjNCTDMrf UrZAQb1KLw0gNogurTgLrzLdjlhSJx+3DLwaCwckVcmSnov9Q1i4iJXX+y787NgJ HYjatFy1Kf4wrlO0BnfiN7+m1rtUBqPR18NFNrpRUJqoYBI1XxSD8i8b4SqpQYHV 6WYClj0KMxWyrPn1pP7VOS4teQ== -----END CERTIFICATE-----Generated at Mon Apr 6 12:47:53 2026 by rpki-client