$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: QdyTAAfM3DiACKboqPXZFfxqg1UYBLzL7jmFDXVvS30= Subject key identifier: 54:4C:04:AB:7D:57:24:43:40:B4:C7:94:6E:6B:AB:D4:FE:B7:D6:7A Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 04C0 Signing time: Sat 04 Apr 2026 23:40:52 +0000 Manifest this update: Sat 04 Apr 2026 23:40:52 +0000 Manifest next update: Sat 11 Apr 2026 23:40:52 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: tW+KzFulZn3WD9o7iq5xNxz7p3r4/9nCG16hcrP3YuI=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Apr 4 23:40:52 2026 GMT Not After : Apr 11 23:40:52 2026 GMT Subject: CN=69d1a184-36b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:66:ee:ca:87:ad:54:e7:56:c6:f3:0c:5f: aa:f5:30:52:16:29:9f:26:57:6a:a5:eb:96:47:94: 0a:f5:e8:36:eb:12:bd:3d:3a:08:b4:c0:ff:95:2b: b6:e2:e7:7a:a4:ae:78:19:dd:e1:ce:a4:4b:a2:e1: a7:44:30:40:92:0e:f3:16:8a:8c:99:42:df:9c:9c: ed:ec:31:6e:d6:a1:78:23:ca:42:45:fd:57:41:43: be:3b:9d:c4:ac:18:1c:07:69:b9:d0:23:b8:d9:fb: bd:f3:ef:f0:85:59:bc:9b:f6:ef:2b:1c:64:1b:78: ee:4a:2f:6d:0b:6d:10:82:73:71:fc:a0:76:26:7e: 21:36:a2:57:de:8e:62:54:fc:6b:db:e1:92:21:23: e3:9c:ae:80:c7:55:f1:c9:07:c9:b5:e9:63:98:0c: bc:a5:6d:8d:2c:50:5e:d3:4f:05:e1:8b:2d:a7:20: 34:0c:b2:21:b9:c9:c4:44:ff:a5:af:a0:be:b0:a7: 96:e1:50:a8:90:73:93:e6:3e:62:fe:19:8a:0b:be: ac:14:f1:10:b6:87:d8:47:25:18:d3:05:f6:b3:95: 86:e6:7b:e8:a0:ac:cf:ca:95:72:2f:2e:49:86:e1: 04:39:b7:f0:60:eb:36:63:b9:be:e4:0e:35:d8:6c: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4C:04:AB:7D:57:24:43:40:B4:C7:94:6E:6B:AB:D4:FE:B7:D6:7A X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4a:d5:39:36:10:f9:7c:42:10:85:39:fd:db:b1:5a:51:2d: a9:4f:86:f1:2f:5b:af:5f:92:41:83:09:c1:6a:d4:f8:ae:11: f6:61:8a:65:1e:eb:59:e9:c8:f4:24:f0:01:15:9e:49:2c:9a: 04:2a:d8:3c:6c:61:49:23:9c:ac:24:15:5e:24:a1:bf:27:5e: e7:00:52:05:c1:3a:f5:0a:98:57:0e:98:a2:e5:77:76:1a:86: 24:dc:12:24:9a:5b:85:76:37:57:0a:70:8d:18:e7:dc:d0:78: dd:a8:ee:7b:f2:ac:7a:cd:63:82:7e:51:f7:72:c4:a8:7c:e5: ac:9b:f8:b4:82:48:ca:89:da:aa:6c:32:23:f4:06:04:13:41: d6:32:a1:96:3d:cf:63:c2:ed:91:a1:9d:25:50:e5:e8:23:10: f9:ad:c8:c9:4d:01:ec:77:c3:45:3f:29:f6:4a:42:e8:5b:d4: fa:5f:c9:77:39:9a:13:a7:4e:41:72:dd:9d:a3:ca:85:3a:b3: 4a:cc:a1:1b:ff:d4:d7:6d:da:68:b4:d7:5a:4d:2d:bb:92:dc: 0d:25:03:fd:b5:6b:0d:bf:7c:10:5b:84:3d:fc:a4:1f:25:8a: 86:ea:cf:cd:d0:fe:93:53:e7:1d:9e:c9:72:ce:35:ce:46:19: df:f7:83:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjYwNDA0MjM0MDUyWhcNMjYwNDExMjM0MDUyWjAYMRYwFAYD VQQDEw02OWQxYTE4NC0zNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8lm7sqHrVTnVsbzDF+q9TBSFimfJldqpeuWR5QK9eg26xK9PToItMD/lSu2 4ud6pK54Gd3hzqRLouGnRDBAkg7zFoqMmULfnJzt7DFu1qF4I8pCRf1XQUO+O53E rBgcB2m50CO42fu98+/whVm8m/bvKxxkG3juSi9tC20QgnNx/KB2Jn4hNqJX3o5i VPxr2+GSISPjnK6Ax1XxyQfJteljmAy8pW2NLFBe008F4YstpyA0DLIhucnERP+l r6C+sKeW4VCokHOT5j5i/hmKC76sFPEQtofYRyUY0wX2s5WG5nvooKzPypVyLy5J huEEObfwYOs2Y7m+5A412GySnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRMBKt9 VyRDQLTHlG5rq9T+t9Z6MB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkrVOTYQ+XxCEIU5/duxWlEtqU+G8S9br1+SQYMJwWrU+K4R9mGKZR7rWenI 9CTwARWeSSyaBCrYPGxhSSOcrCQVXiShvyde5wBSBcE69QqYVw6YouV3dhqGJNwS JJpbhXY3VwpwjRjn3NB43ajue/Kses1jgn5R93LEqHzlrJv4tIJIyonaqmwyI/QG BBNB1jKhlj3PY8LtkaGdJVDl6CMQ+a3IyU0B7HfDRT8p9kpC6FvU+l/JdzmaE6dO QXLdnaPKhTqzSsyhG//U123aaLTXWk0tu5LcDSUD/bVrDb98EFuEPfykHyWKhurP zdD+k1PnHZ7Jcs41zkYZ3/eD2w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:36 2026 by rpki-client