$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: k1ekdGR4EHdVQ0foP4WSfNzLo9qO2yWBLYShoFDNwRs= Subject key identifier: 66:91:7A:34:B0:4A:C2:77:A6:05:11:48:A1:5E:2B:8B:5F:80:8D:92 Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 0174 Signing time: Sun 05 Apr 2026 04:09:06 +0000 Manifest this update: Sun 05 Apr 2026 04:09:05 +0000 Manifest next update: Sun 12 Apr 2026 04:09:05 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: AEhB80rQNX5OIz9/OBcdg5l9tTKuEwRguNi98ksAvNI=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: sBqGDzVDqdsPkrknp4C6rLHvQjOcX3zI0i8iLqmfuUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Apr 5 04:09:05 2026 GMT Not After : Apr 12 04:09:05 2026 GMT Subject: CN=69d1e061-d656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:67:eb:e2:88:57:22:d8:7c:a8:b2:c9:7c: fb:94:26:3c:24:da:4e:06:69:5b:72:3c:35:e6:66: d3:b1:1c:86:c5:17:80:1d:41:b3:89:b1:0e:14:f0: 9e:9f:ca:de:e9:bd:db:70:db:03:10:1e:3e:41:14: 73:33:66:e3:bb:53:df:1e:85:b4:92:f5:66:2f:94: ee:40:7e:f2:52:fc:93:7c:0e:d1:f4:46:e7:36:e6: 91:fe:57:bf:f3:9c:35:13:af:07:f1:e5:fc:6e:77: a0:d6:2e:25:31:89:24:50:b2:4c:4f:0a:fa:5a:cc: 33:9e:68:08:e1:4b:fe:a2:9f:aa:09:a3:cd:a6:9a: ee:40:2a:a4:0f:d0:5b:49:e8:8a:1b:f1:77:6b:2f: 6d:40:a1:07:12:1d:db:21:94:72:da:5f:b6:6e:5d: ce:75:00:99:c9:7a:13:d2:b4:d8:1f:68:7d:68:78: cb:0e:d6:87:b4:4c:e0:86:03:14:aa:62:5a:a6:c4: df:58:f7:79:85:eb:5e:95:ad:63:e9:fe:5a:6e:71: 60:ab:d7:6f:11:db:00:92:2b:81:0c:df:99:86:9c: 10:2c:f8:36:0b:1a:da:30:4b:91:57:7d:3c:37:c7: 3f:b3:ea:d7:13:af:9e:b4:1c:5b:62:7b:0e:78:5a: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:7A:34:B0:4A:C2:77:A6:05:11:48:A1:5E:2B:8B:5F:80:8D:92 X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:67:dd:f3:33:09:14:13:25:0b:d0:4d:a9:5c:c4:0a:09: 30:39:af:b6:26:dd:09:e3:f3:34:06:94:a5:ec:5a:e8:24:8e: e9:03:91:57:f5:4f:ce:06:eb:6a:cd:84:e8:93:38:e4:3c:ff: 20:3b:a0:98:59:90:63:56:22:ef:e7:4c:21:c2:f3:a7:08:03: 1c:68:84:bf:a8:ee:4b:ba:ed:ba:76:c8:ed:00:cb:57:fc:37: b2:68:cc:ef:ec:90:ab:ef:70:1a:f0:71:7d:55:38:2d:b3:e4: cd:d9:57:a9:f0:e9:df:59:e6:9e:43:57:62:9e:fa:62:8b:3b: 11:31:e8:45:f8:c5:ad:cf:57:18:04:7e:44:4d:e3:ba:b0:06: e6:3f:70:e8:5c:ef:21:66:14:8b:3c:45:29:a2:13:db:70:fa: 87:0e:3e:18:c0:65:08:5d:ee:3f:75:06:dc:0c:16:9f:e7:e5: 33:57:66:67:26:ea:d3:4b:7c:1c:1f:23:7c:df:e9:86:88:96: 94:cc:1d:64:a1:8f:24:df:b2:1b:11:d2:4d:ac:4e:d0:c2:c2: 1d:dc:76:41:1b:8b:bc:d7:11:15:a9:0f:fd:e7:33:ba:74:1a: e0:88:ef:77:71:21:7c:ed:af:8e:d6:4b:85:e3:da:bc:95:5c: b2:ed:52:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjYwNDA1MDQwOTA1WhcNMjYwNDEyMDQwOTA1WjAYMRYwFAYD VQQDEw02OWQxZTA2MS1kNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui1n6+KIVyLYfKiyyXz7lCY8JNpOBmlbcjw15mbTsRyGxReAHUGzibEOFPCe n8re6b3bcNsDEB4+QRRzM2bju1PfHoW0kvVmL5TuQH7yUvyTfA7R9EbnNuaR/le/ 85w1E68H8eX8bneg1i4lMYkkULJMTwr6WswznmgI4Uv+op+qCaPNppruQCqkD9Bb SeiKG/F3ay9tQKEHEh3bIZRy2l+2bl3OdQCZyXoT0rTYH2h9aHjLDtaHtEzghgMU qmJapsTfWPd5hetela1j6f5abnFgq9dvEdsAkiuBDN+ZhpwQLPg2CxraMEuRV308 N8c/s+rXE6+etBxbYnsOeFou0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaRejSw SsJ3pgURSKFeK4tfgI2SMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl7hn3fMzCRQTJQvQTalcxAoJMDmvtibdCePzNAaUpexa6CSO6QORV/VPzgbr as2E6JM45Dz/IDugmFmQY1Yi7+dMIcLzpwgDHGiEv6juS7rtunbI7QDLV/w3smjM 7+yQq+9wGvBxfVU4LbPkzdlXqfDp31nmnkNXYp76Yos7ETHoRfjFrc9XGAR+RE3j urAG5j9w6FzvIWYUizxFKaIT23D6hw4+GMBlCF3uP3UG3AwWn+flM1dmZybq00t8 HB8jfN/phoiWlMwdZKGPJN+yGxHSTaxO0MLCHdx2QRuLvNcRFakP/eczunQa4Ijv d3EhfO2vjtZLhePavJVcsu1S9g== -----END CERTIFICATE-----Generated at Mon Apr 6 13:35:14 2026 by rpki-client