$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: n5PP/Ntk+vPRJFqTu4FMTBq8z418517XCILbvnz1VMA= Subject key identifier: 8C:27:51:3E:3E:D7:0C:BC:D2:0C:E8:87:9B:91:29:34:7B:6A:6F:FF Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: CA Signing time: Sun 05 Apr 2026 06:16:17 +0000 Manifest this update: Sun 05 Apr 2026 06:16:16 +0000 Manifest next update: Sun 12 Apr 2026 06:16:16 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: +U7eLC4ZnM44NS2cBT0c2N7gj/WBc0UsuxhuotUMIBw=) 2: 394CC63C2D2F11F19323886DBB833773.roa (hash: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: Apr 5 06:16:16 2026 GMT Not After : Apr 12 06:16:16 2026 GMT Subject: CN=69d1fe31-96f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:ab:e5:b2:6d:41:f7:09:7d:16:ba:c0:2e: 12:ec:4b:53:17:22:57:55:91:41:7e:25:2a:76:7a: c0:25:a6:ca:c0:2d:b9:c7:96:57:ec:fd:82:65:cd: dc:f6:d0:d4:4d:88:10:c5:6c:92:d1:6f:cc:61:27: 19:0a:f0:5e:b2:ed:df:a0:95:b7:c5:7c:d0:2f:3a: 9d:cf:62:9f:df:1a:fe:0f:4e:3e:8f:9f:50:e9:70: e9:b5:dc:15:af:a0:df:f8:50:0c:9c:15:06:b8:eb: 32:8e:3f:28:2c:bc:c7:f6:e4:1f:62:14:a8:30:61: 9c:ea:27:79:42:f9:89:3f:2b:8d:c0:37:f7:1f:26: d6:8f:9e:a1:84:5d:97:5e:3f:55:ce:46:c5:bc:c9: 63:13:60:a3:17:9f:f9:d9:8a:eb:1d:40:fa:24:ad: b8:a0:3d:0f:62:ee:47:6a:ca:7b:32:79:20:96:dc: a8:74:57:80:c2:98:75:1a:1f:dc:cb:6a:fb:16:02: f8:de:cf:a3:d4:d5:ee:c0:35:a3:b2:e5:de:57:10: f0:7f:e0:fd:ec:0f:66:4c:96:aa:31:60:cb:d1:8b: c5:0c:23:7f:e6:ff:40:59:e6:46:21:81:e7:fe:ae: 5d:b5:f6:29:5a:f3:79:f5:56:12:16:1f:a9:14:cf: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:27:51:3E:3E:D7:0C:BC:D2:0C:E8:87:9B:91:29:34:7B:6A:6F:FF X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:89:84:17:db:fc:81:df:9c:d9:21:37:8d:43:3c:de:2e:e3: 70:82:c9:4d:8a:75:20:89:80:a0:8b:d5:e4:43:5a:13:cb:d5: c4:f9:a2:5f:db:d8:7d:2b:6c:f2:2e:0b:d8:52:1e:70:99:67: 4d:c8:39:5e:ca:5c:4d:8b:c1:ca:48:c3:ea:b6:a0:e4:15:3c: 81:aa:c2:af:ba:b7:d1:66:fa:d8:fe:f9:7b:c4:ca:d6:a1:1d: f5:b4:10:c0:dc:46:30:96:a9:93:a0:0e:c5:4f:af:86:18:60: 00:1b:95:06:90:3c:dc:06:70:9b:c7:ee:90:fb:36:ec:5d:06: 2e:0c:f8:ea:a9:f3:bc:7b:75:c0:00:89:3e:b9:4f:9e:15:85: 6a:7e:d7:3c:1e:b0:b8:0d:59:25:0d:37:00:c9:5f:c0:69:6e: 23:44:64:9c:76:3e:2b:33:09:fa:6e:c0:04:2a:b3:89:c8:b4: f2:95:78:11:9f:aa:f0:7c:27:0c:a3:f7:8d:92:48:04:05:76: a1:2e:49:f0:56:71:af:e4:7c:f2:06:02:e7:cb:f5:d8:d0:f2: c9:c6:3d:83:f3:3b:57:01:7a:9c:bf:56:f9:36:d1:0c:e5:f3: e8:52:ec:6e:e8:f6:47:cd:5d:a3:f6:76:f4:17:3f:c6:a8:c4: 60:83:a1:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCOEQxMTAvBgNVBAUTKEJFNjM4MDM3MEY2NDA2RTYzRjc0NkZBRjUyQkM1MDFF QzREMEJENTIwHhcNMjYwNDA1MDYxNjE2WhcNMjYwNDEyMDYxNjE2WjAYMRYwFAYD VQQDEw02OWQxZmUzMS05NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Aqr5bJtQfcJfRa6wC4S7EtTFyJXVZFBfiUqdnrAJabKwC25x5ZX7P2CZc3c 9tDUTYgQxWyS0W/MYScZCvBesu3foJW3xXzQLzqdz2Kf3xr+D04+j59Q6XDptdwV r6Df+FAMnBUGuOsyjj8oLLzH9uQfYhSoMGGc6id5QvmJPyuNwDf3HybWj56hhF2X Xj9VzkbFvMljE2CjF5/52YrrHUD6JK24oD0PYu5Hasp7MnkgltyodFeAwph1Gh/c y2r7FgL43s+j1NXuwDWjsuXeVxDwf+D97A9mTJaqMWDL0YvFDCN/5v9AWeZGIYHn /q5dtfYpWvN59VYSFh+pFM+bYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwnUT4+ 1wy80gzoh5uRKTR7am//MB8GA1UdIwQYMBaAFL5jgDcPZAbmP3Rvr1K8UB7E0L1S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUI4RC8xQ0Y5QTg3QTAz RDExMUYwQjIzNEJDMTVDNEY5QUUwMi92bU9BTnc5a0J1WV9kRy12VXJ4UUhzVFF2 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUI4RC8xQ0Y5QTg3QTAzRDExMUYwQjIzNEJDMTVDNEY5QUUwMi92bU9BTnc5a0J1 WV9kRy12VXJ4UUhzVFF2VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoYmEF9v8gd+c2SE3jUM83i7jcILJTYp1IImAoIvV5ENaE8vVxPmiX9vYfSts 8i4L2FIecJlnTcg5XspcTYvBykjD6rag5BU8garCr7q30Wb62P75e8TK1qEd9bQQ wNxGMJapk6AOxU+vhhhgABuVBpA83AZwm8fukPs27F0GLgz46qnzvHt1wACJPrlP nhWFan7XPB6wuA1ZJQ03AMlfwGluI0RknHY+KzMJ+m7ABCqzici08pV4EZ+q8Hwn DKP3jZJIBAV2oS5J8FZxr+R88gYC58v12NDyycY9g/M7VwF6nL9W+TbRDOXz6FLs buj2R81do/Z29Bc/xqjEYIOhsg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:47 2026 by rpki-client