$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: W1DYt9+UfNt0sJ47Ts03h+O+ljALik9kUp/OKEA+uvE= Subject key identifier: 6F:DA:31:25:BC:3B:92:58:B2:1E:B9:A1:B5:B0:E7:82:68:5D:01:77 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 027B Signing time: Sun 05 Apr 2026 01:30:33 +0000 Manifest this update: Sun 05 Apr 2026 01:30:32 +0000 Manifest next update: Sun 12 Apr 2026 01:30:32 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: Oym3VA70wbF8SWvoZGqeJaE16KVZir/mjIlhkTcmHSI=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Apr 5 01:30:32 2026 GMT Not After : Apr 12 01:30:32 2026 GMT Subject: CN=69d1bb38-47d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:24:cb:0f:52:f3:98:f9:af:95:5a:dc:56: d1:a7:b6:fb:5b:5d:4a:42:f2:b2:82:d3:57:0a:a9: 2f:c2:e5:b5:1b:19:d6:a7:2a:4b:18:7f:e3:70:02: 04:8d:5a:79:98:4c:42:20:90:79:05:eb:4e:9a:e3: ab:eb:7a:b8:3f:f5:86:00:a5:8b:0b:69:b6:50:f6: 42:fa:29:a0:d4:ed:cb:65:16:89:8e:d8:38:4f:a2: 15:2d:5e:fc:7f:87:d7:09:2e:71:ab:62:2e:35:16: 0e:af:dc:f1:8c:e9:ea:8a:a8:56:fd:e2:54:53:21: d8:c9:b1:0a:fc:e9:46:70:52:8f:d3:7e:95:61:34: 50:7d:29:a8:15:00:7a:8d:6d:bb:2c:3c:fc:a9:76: 2c:8a:41:3b:a6:df:18:d1:5b:9c:cb:5f:72:6c:fe: be:29:29:3f:34:41:ce:e4:0c:d7:ef:1b:76:5f:d4: 4f:16:7a:40:89:b9:fe:98:06:e0:66:0f:81:d8:fe: e1:dc:71:e4:f3:0a:39:36:38:75:dd:ba:27:5c:dc: ff:b6:a1:f3:ac:1f:eb:dd:5f:38:64:f6:e0:5a:4a: 8f:7b:2d:20:87:32:9b:8f:b9:36:74:78:a5:1e:e1: 05:3d:7d:09:e2:03:09:b5:a6:ea:b7:3c:dd:90:73: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DA:31:25:BC:3B:92:58:B2:1E:B9:A1:B5:B0:E7:82:68:5D:01:77 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9c:12:09:c4:cf:67:5c:b5:87:8f:e1:68:d4:03:30:fb:32: 9e:b5:56:1b:26:04:1b:55:75:d4:be:cd:73:47:6f:70:52:fe: 3a:54:e3:9d:0b:bb:01:ed:85:7c:e5:b5:d5:fa:68:c5:c8:b4: 54:23:b4:ef:47:d7:47:98:ef:8b:fd:7a:b0:0a:46:ec:de:7d: 94:af:56:d9:1d:c4:72:37:12:aa:44:eb:2c:1d:dc:0c:01:be: f6:45:c6:a3:59:82:3c:89:71:b3:a7:55:9c:e1:4d:10:37:10: e3:8c:7d:4e:f4:65:cb:33:26:2e:c4:d6:fb:2d:59:38:00:ea: f4:cf:64:00:e5:a5:dc:e1:2f:2b:da:dc:d6:a8:f3:be:d7:73: 15:ad:cc:b0:2c:0a:f6:06:c8:96:77:77:6d:98:f4:73:43:a0: 9c:71:6b:d7:03:a5:0a:35:5c:bc:04:17:71:f2:8b:a0:ba:84: 67:11:9a:d0:f2:7e:7f:38:45:0d:93:c9:e2:b9:a6:f9:55:8e: 0d:eb:8e:d7:3e:ce:55:43:0b:5b:77:e8:a2:69:b5:4a:a7:e4: 00:ae:21:e2:a8:d4:5e:c9:f5:c4:7a:7a:71:3d:e6:e6:c8:c3: 78:75:63:14:9e:0f:ee:3c:ea:d3:22:81:16:f9:e5:c1:9c:c8: 27:b1:8d:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjYwNDA1MDEzMDMyWhcNMjYwNDEyMDEzMDMyWjAYMRYwFAYD VQQDEw02OWQxYmIzOC00N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLckyw9S85j5r5Va3FbRp7b7W11KQvKygtNXCqkvwuW1GxnWpypLGH/jcAIE jVp5mExCIJB5BetOmuOr63q4P/WGAKWLC2m2UPZC+img1O3LZRaJjtg4T6IVLV78 f4fXCS5xq2IuNRYOr9zxjOnqiqhW/eJUUyHYybEK/OlGcFKP036VYTRQfSmoFQB6 jW27LDz8qXYsikE7pt8Y0Vucy19ybP6+KSk/NEHO5AzX7xt2X9RPFnpAibn+mAbg Zg+B2P7h3HHk8wo5Njh13bonXNz/tqHzrB/r3V84ZPbgWkqPey0ghzKbj7k2dHil HuEFPX0J4gMJtabqtzzdkHO9tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/aMSW8 O5JYsh65obWw54JoXQF3MB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjpwSCcTPZ1y1h4/haNQDMPsynrVWGyYEG1V11L7Nc0dvcFL+OlTjnQu7Ae2F fOW11fpoxci0VCO070fXR5jvi/16sApG7N59lK9W2R3EcjcSqkTrLB3cDAG+9kXG o1mCPIlxs6dVnOFNEDcQ44x9TvRlyzMmLsTW+y1ZOADq9M9kAOWl3OEvK9rc1qjz vtdzFa3MsCwK9gbIlnd3bZj0c0OgnHFr1wOlCjVcvAQXcfKLoLqEZxGa0PJ+fzhF DZPJ4rmm+VWODeuO1z7OVUMLW3foomm1SqfkAK4h4qjUXsn1xHp6cT3m5sjDeHVj FJ4P7jzq0yKBFvnlwZzIJ7GN7w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:03 2026 by rpki-client