$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: SYKSe/BocIloMFkx1aikYVUBqRqt6N76YUEP/Vx1hXM= Subject key identifier: 7B:C8:8A:96:5A:83:0F:C9:37:6C:1B:3E:95:8A:CD:12:62:0E:6E:8B Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0CE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0CCE Signing time: Sat 04 Apr 2026 18:13:52 +0000 Manifest this update: Sat 04 Apr 2026 18:13:52 +0000 Manifest next update: Sat 11 Apr 2026 18:13:52 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: /17k+cPEkoC0pM7REV1H7He93pmnTmNpf5wd07AkYoA=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: PLVzOLnz/S3yAyLEYTQXk6jeemE0Coa5Zb4ZLWaW+pE=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: OtV6b8befwkPsOuYarHGh5SRZOjkzLz1qANk490i9b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3298 (0xce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Apr 4 18:13:52 2026 GMT Not After : Apr 11 18:13:52 2026 GMT Subject: CN=69d154e0-28c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:d2:aa:01:3d:f4:fd:fc:5c:e5:77:27:5d: 97:a4:96:70:92:21:36:46:0c:24:24:da:53:01:32: bf:e4:ed:87:93:b5:83:48:d8:53:6d:e3:25:85:15: bc:0a:f7:3c:3f:e2:cc:50:84:1a:bb:b1:4e:9a:42: 31:8f:67:f1:76:60:8e:fa:0b:ac:a1:48:a9:b8:9d: b2:dd:3a:d3:70:bb:17:32:6c:9d:c4:a0:37:95:69: d7:47:8a:80:19:02:d4:5f:2b:21:c5:23:74:25:30: 1a:da:d7:ab:7a:51:40:45:98:b5:10:e6:c0:e3:6d: a8:59:9c:8b:98:54:47:44:e2:50:ce:02:23:43:b7: 0d:6d:03:48:a6:22:15:06:f6:dd:95:40:c3:f4:67: 0b:32:bc:62:f7:6f:dc:72:05:5e:49:fc:4b:30:39: 45:65:ed:a8:0b:7e:f9:57:08:57:84:2f:eb:b2:02: c7:7c:cd:ef:1e:e2:34:9a:fb:a6:b7:80:ab:b6:09: 55:20:cb:44:fc:5b:64:26:6f:f5:d0:f2:08:20:8f: ff:1b:fd:ec:f6:06:bf:b2:69:05:7c:d8:92:b6:7e: 86:bf:eb:79:ed:32:ce:23:dc:27:47:26:30:40:b5: 8e:5d:54:74:7d:8d:d0:6f:03:b9:d3:91:1f:0b:d6: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C8:8A:96:5A:83:0F:C9:37:6C:1B:3E:95:8A:CD:12:62:0E:6E:8B X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2f:8f:9d:a9:0c:47:db:a6:36:05:a0:5d:34:7b:bc:3a:27: 94:0d:0f:3b:f0:0a:a2:16:7b:a9:ba:0d:8a:e8:61:d3:b3:8e: 76:b7:5a:fc:c0:82:90:2b:f0:92:2b:bc:3d:b0:53:36:e3:45: 8f:b3:0b:6c:cd:0b:a8:63:07:f4:12:9e:ca:84:7b:fa:bd:d4: 3e:01:0a:42:91:fe:69:05:9d:96:58:52:10:a3:13:d8:81:f2: cd:19:fc:6d:32:64:1b:85:ee:9b:68:e1:ee:1e:05:fa:56:3a: 26:ea:84:c5:51:0d:6d:c9:bb:de:01:81:3f:81:94:3d:9b:ae: fe:de:91:4d:51:29:4a:3f:a8:cb:1a:22:4f:5e:8d:10:ac:3b: da:92:e3:53:dc:dc:1d:bf:e5:a6:9b:b5:4b:df:07:54:79:9b: b0:45:5f:dc:26:84:78:74:50:96:2f:f8:8e:6a:94:a0:21:15: 32:5d:4f:7b:56:d5:95:b9:24:67:2e:91:64:33:08:a0:9a:ae: 2d:fa:54:b8:a9:e2:20:5b:af:63:06:c2:ca:80:da:0c:36:11: 54:42:ae:19:1b:3a:d0:01:da:8a:bb:27:7f:8b:11:73:ae:cb: 9b:1d:c8:5b:19:3f:ae:99:54:b5:af:a2:59:bd:b6:9f:c6:c1: 86:f5:c9:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwNDA0MTgxMzUyWhcNMjYwNDExMTgxMzUyWjAYMRYwFAYD VQQDEw02OWQxNTRlMC0yOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ijSqgE99P38XOV3J12XpJZwkiE2RgwkJNpTATK/5O2Hk7WDSNhTbeMlhRW8 Cvc8P+LMUIQau7FOmkIxj2fxdmCO+gusoUipuJ2y3TrTcLsXMmydxKA3lWnXR4qA GQLUXyshxSN0JTAa2terelFARZi1EObA422oWZyLmFRHROJQzgIjQ7cNbQNIpiIV BvbdlUDD9GcLMrxi92/ccgVeSfxLMDlFZe2oC375VwhXhC/rsgLHfM3vHuI0mvum t4CrtglVIMtE/FtkJm/10PIIII//G/3s9ga/smkFfNiStn6Gv+t57TLOI9wnRyYw QLWOXVR0fY3QbwO505EfC9bx6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvIipZa gw/JN2wbPpWKzRJiDm6LMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAai+PnakMR9umNgWgXTR7vDonlA0PO/AKohZ7qboNiuhh07OOdrda/MCCkCvw kiu8PbBTNuNFj7MLbM0LqGMH9BKeyoR7+r3UPgEKQpH+aQWdllhSEKMT2IHyzRn8 bTJkG4Xum2jh7h4F+lY6JuqExVENbcm73gGBP4GUPZuu/t6RTVEpSj+oyxoiT16N EKw72pLjU9zcHb/lppu1S98HVHmbsEVf3CaEeHRQli/4jmqUoCEVMl1Pe1bVlbkk Zy6RZDMIoJquLfpUuKniIFuvYwbCyoDaDDYRVEKuGRs60AHairsnf4sRc67Lmx3I Wxk/rplUta+iWb22n8bBhvXJkw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:17 2026 by rpki-client