$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: ki75lqXOu/c1zn85FaBHrrmdNjyVCgE55qPjf+C8Wuk= Subject key identifier: 9A:E7:57:8A:C1:2A:8E:5E:06:31:03:3B:54:9F:BA:5D:66:22:8A:DB Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0CE0 Signing time: Sat 04 Apr 2026 18:07:45 +0000 Manifest this update: Sat 04 Apr 2026 18:07:45 +0000 Manifest next update: Sat 11 Apr 2026 18:07:45 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 5ezbZR667gckgoG++Fbv5Ls/2AuSAffcNdrvGCIbHWU=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Apr 4 18:07:45 2026 GMT Not After : Apr 11 18:07:45 2026 GMT Subject: CN=69d15371-2900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:72:93:39:a8:05:8e:7b:ee:bf:e7:7e:32: da:a3:8e:a2:4d:b1:54:c7:e1:6a:60:f9:da:2c:e1: cd:65:4e:d4:af:ae:d6:30:14:4c:a0:0a:8a:1a:07: 10:e1:2f:4b:c7:26:96:4b:93:2b:c1:b5:6f:6a:a6: ee:5d:b7:e3:49:24:01:a0:73:92:e0:62:56:a0:3c: 71:c9:2c:18:f3:0d:ae:1f:48:ed:73:7b:02:7f:9f: c0:a7:74:01:6b:c9:52:e5:d7:f0:76:9a:95:78:d3: 9c:f2:13:4a:4f:63:7d:25:be:7e:f1:6a:2b:2d:98: 9a:19:de:91:86:6a:04:5c:db:f4:3e:06:9f:82:b8: 88:6e:df:23:48:5e:4f:c9:49:b4:bd:5e:0c:57:d9: 71:fb:72:08:8f:cf:11:5e:90:40:fc:bf:d7:22:b8: d1:2f:e7:4f:91:02:8f:93:83:c7:04:15:ab:93:0a: a6:aa:e0:80:cc:dd:84:7f:d2:3b:e2:d2:9f:1f:8d: 6b:ba:1f:c4:19:f0:05:c8:4a:ce:11:86:82:34:cb: 61:d4:b2:bb:d2:40:14:80:db:fc:68:1e:5a:06:52: e1:80:10:4a:6c:9c:13:09:31:06:47:5c:4d:7b:fd: 4d:8b:15:8d:bd:91:4e:fc:e6:00:03:7f:99:13:70: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E7:57:8A:C1:2A:8E:5E:06:31:03:3B:54:9F:BA:5D:66:22:8A:DB X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:51:11:ec:76:68:87:c5:a6:f5:1b:29:ae:ba:5d:48:18:b6: da:1b:32:20:e1:87:2a:6e:c1:b9:e3:b1:fe:6b:f9:d0:fb:82: f9:c9:6a:57:a6:2c:09:96:99:1d:31:ec:9c:75:59:cb:f5:a2: e5:05:22:03:7a:20:dc:6c:70:65:68:01:a4:67:56:bc:c4:76: 82:a7:52:27:c2:21:18:0c:82:64:62:16:29:4a:98:97:54:ba: 06:c9:6a:22:e6:dd:3e:7f:dd:d8:8c:7b:84:b1:1b:65:44:dd: 50:21:bb:ec:b6:74:4f:09:33:ce:09:1d:53:6b:d8:aa:5f:fe: c7:45:35:fa:0f:61:d6:a3:7b:c9:f9:10:67:c8:18:06:4a:6a: 9d:0e:1f:d6:ad:b5:30:a1:b1:89:d2:24:9c:2c:e5:83:70:8c: 53:9c:d3:b3:60:e6:20:9b:a7:cd:b2:1e:ab:95:b1:0e:ec:ee: 35:73:f1:28:ee:ef:7e:34:b9:7d:c4:fb:59:96:6d:ab:e4:2a: 08:8d:f4:df:1c:ef:8e:47:86:1d:ef:83:7b:34:10:58:7a:e8: b5:78:9e:cc:29:04:91:69:bc:b7:08:4f:92:06:fa:1d:00:cf: 50:8d:ce:92:50:59:50:4e:d0:ee:15:5d:50:f8:37:21:43:26: 83:7d:a1:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjYwNDA0MTgwNzQ1WhcNMjYwNDExMTgwNzQ1WjAYMRYwFAYD VQQDEw02OWQxNTM3MS0yOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwftykzmoBY577r/nfjLao46iTbFUx+FqYPnaLOHNZU7Ur67WMBRMoAqKGgcQ 4S9LxyaWS5MrwbVvaqbuXbfjSSQBoHOS4GJWoDxxySwY8w2uH0jtc3sCf5/Ap3QB a8lS5dfwdpqVeNOc8hNKT2N9Jb5+8WorLZiaGd6RhmoEXNv0PgafgriIbt8jSF5P yUm0vV4MV9lx+3IIj88RXpBA/L/XIrjRL+dPkQKPk4PHBBWrkwqmquCAzN2Ef9I7 4tKfH41ruh/EGfAFyErOEYaCNMth1LK70kAUgNv8aB5aBlLhgBBKbJwTCTEGR1xN e/1NixWNvZFO/OYAA3+ZE3DVIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrnV4rB Ko5eBjEDO1Sful1mIorbMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzlER7HZoh8Wm9RsprrpdSBi22hsyIOGHKm7BueOx/mv50PuC+clqV6YsCZaZ HTHsnHVZy/Wi5QUiA3og3GxwZWgBpGdWvMR2gqdSJ8IhGAyCZGIWKUqYl1S6Bslq IubdPn/d2Ix7hLEbZUTdUCG77LZ0TwkzzgkdU2vYql/+x0U1+g9h1qN7yfkQZ8gY BkpqnQ4f1q21MKGxidIknCzlg3CMU5zTs2DmIJunzbIeq5WxDuzuNXPxKO7vfjS5 fcT7WZZtq+QqCI303xzvjkeGHe+DezQQWHrotXiezCkEkWm8twhPkgb6HQDPUI3O klBZUE7Q7hVdUPg3IUMmg32hyw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:20:40 2026 by rpki-client