$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: 1oW3T7ZiMj1REcwqGHn5OpPtU65bJCRtTdp0dQUhjnI= Subject key identifier: 10:8B:AF:C7:19:29:5C:1F:CA:70:30:76:F7:4D:F6:63:D9:74:0C:52 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 01FA Signing time: Sun 05 Apr 2026 02:47:33 +0000 Manifest this update: Sun 05 Apr 2026 02:47:33 +0000 Manifest next update: Sun 12 Apr 2026 02:47:33 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: erJbjShFxkslqbkDuDdF7p5t3GXHVRdpaGhgYr0382c=) 2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Apr 5 02:47:33 2026 GMT Not After : Apr 12 02:47:33 2026 GMT Subject: CN=69d1cd45-8f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:d6:aa:ac:77:04:f0:c3:62:d6:52:18:af: b9:80:b2:d0:ea:fb:b0:46:3f:61:60:1b:f0:72:f9: 5d:f3:33:fa:94:b0:b1:72:19:f8:8d:6b:db:ea:d2: f3:bc:54:2f:07:9a:dc:3b:eb:78:00:2b:85:2e:c6: 20:91:56:54:7b:b4:51:c4:28:7b:cf:11:9e:7d:a0: 06:a5:17:aa:0b:7c:4d:d0:1c:e5:38:b0:1e:15:e9: ac:27:ec:8e:4e:2c:40:43:3b:84:76:28:4c:25:05: 3d:50:db:69:cf:aa:44:4d:ef:ce:77:31:9b:b2:2b: a9:49:cd:04:71:b2:7c:42:83:c3:29:79:b4:f3:f1: 67:32:d4:0f:1a:29:89:29:e2:b1:b6:82:7f:6b:97: 4d:0e:4e:fb:47:d4:d6:72:5b:11:a5:2d:a5:72:c8: 47:c1:a0:81:13:3b:de:ba:ec:c1:8e:b8:c9:7a:c0: b0:8d:da:c1:78:29:44:ad:f2:05:f9:0a:4d:9c:5c: 48:06:e7:f7:1d:42:00:38:73:1e:22:d7:5b:3b:46: 58:01:c4:e0:48:7e:03:91:0c:d5:46:f7:09:01:8a: 10:4e:22:61:85:62:16:12:45:59:01:14:7d:23:f9: 9c:53:9e:26:54:cf:73:ae:ea:f8:65:d1:6f:7c:f6: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:AF:C7:19:29:5C:1F:CA:70:30:76:F7:4D:F6:63:D9:74:0C:52 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d3:f7:7f:b8:04:a4:99:d2:e1:d4:75:70:f0:e1:d0:da:f6: 7b:fa:a3:d2:44:9b:86:2b:c1:2e:b9:9b:5d:85:de:05:ba:41: ee:16:0f:35:5b:17:b9:5a:15:bd:87:87:c2:a5:ca:51:cb:b7: 0f:6d:e8:50:6a:c1:81:e2:9b:5c:87:48:e0:53:f2:7f:07:0f: 11:a4:e2:45:19:38:21:f8:ba:89:40:5c:33:06:5c:68:f9:5b: 61:32:8b:97:45:d4:b7:80:63:89:76:e8:7d:db:d1:cd:37:41: fa:4c:cd:58:f7:ae:76:81:89:aa:d3:65:ca:a4:7b:35:af:6c: cd:ee:89:4b:ab:aa:08:48:26:a9:7f:2b:51:5a:47:dc:1e:dd: 35:8e:0b:29:43:a9:26:92:1e:77:cc:d2:d2:1f:51:06:f5:c5: b7:61:a0:17:e7:29:f3:63:46:9f:34:7f:c4:e4:bb:af:0e:3b: 23:8d:db:81:44:95:ec:44:77:56:d3:07:d9:5a:ce:37:87:75: 0e:40:06:2e:fd:31:3d:7c:de:c0:dd:b4:5f:64:85:c6:f1:25: 57:dd:c3:ec:2f:cd:d5:a4:57:3f:2c:ca:28:34:b8:d3:85:80: cc:89:3b:d7:38:a8:dd:75:c0:f3:e3:25:e8:4f:c3:08:72:d7: 24:ef:88:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjYwNDA1MDI0NzMzWhcNMjYwNDEyMDI0NzMzWjAYMRYwFAYD VQQDEw02OWQxY2Q0NS04ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VPWqqx3BPDDYtZSGK+5gLLQ6vuwRj9hYBvwcvld8zP6lLCxchn4jWvb6tLz vFQvB5rcO+t4ACuFLsYgkVZUe7RRxCh7zxGefaAGpReqC3xN0BzlOLAeFemsJ+yO TixAQzuEdihMJQU9UNtpz6pETe/OdzGbsiupSc0EcbJ8QoPDKXm08/FnMtQPGimJ KeKxtoJ/a5dNDk77R9TWclsRpS2lcshHwaCBEzveuuzBjrjJesCwjdrBeClErfIF +QpNnFxIBuf3HUIAOHMeItdbO0ZYAcTgSH4DkQzVRvcJAYoQTiJhhWIWEkVZARR9 I/mcU54mVM9zrur4ZdFvfPa4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCLr8cZ KVwfynAwdvdN9mPZdAxSMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNP3f7gEpJnS4dR1cPDh0Nr2e/qj0kSbhivBLrmbXYXeBbpB7hYPNVsXuVoV vYeHwqXKUcu3D23oUGrBgeKbXIdI4FPyfwcPEaTiRRk4Ifi6iUBcMwZcaPlbYTKL l0XUt4BjiXbofdvRzTdB+kzNWPeudoGJqtNlyqR7Na9sze6JS6uqCEgmqX8rUVpH 3B7dNY4LKUOpJpIed8zS0h9RBvXFt2GgF+cp82NGnzR/xOS7rw47I43bgUSV7ER3 VtMH2VrON4d1DkAGLv0xPXzewN20X2SFxvElV93D7C/N1aRXPyzKKDS404WAzIk7 1zio3XXA8+Ml6E/DCHLXJO+Inw== -----END CERTIFICATE-----Generated at Mon Apr 6 19:52:45 2026 by rpki-client