$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: oI2j6/lG6bU/muhL0N6qyel+PV/YORByBvrDY3WEPbM= Subject key identifier: 18:4E:AD:0C:94:65:BD:B8:49:DA:9D:64:4B:9B:84:B7:6D:01:42:AC Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 94 Signing time: Sun 05 Apr 2026 06:57:45 +0000 Manifest this update: Sun 05 Apr 2026 06:57:44 +0000 Manifest next update: Sun 12 Apr 2026 06:57:44 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: dCSiVEs8A56MuP4pMoXWlDhlsYljlhp4/tUHYcHa8ow=) 2: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: zli8UWvhlCj/6OfJgReWS/J0Zy5c1SeMbcyJruIVEGs=) 3: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: PaNCeOBgBausBmkVaNGCZJiD6DTSxbMiBGDU8oOrlo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Apr 5 06:57:44 2026 GMT Not After : Apr 12 06:57:44 2026 GMT Subject: CN=69d207e8-6a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:b4:63:a6:b2:c7:29:33:6f:2a:ee:b2:cd: 6a:d8:f1:8d:00:6a:72:07:58:4e:a7:47:a5:c5:ea: fc:a0:b5:c1:7b:3a:ed:4f:a9:21:36:86:22:7c:f2: 76:0f:84:10:e3:27:02:6d:8f:10:73:07:e6:27:61: b1:b9:ae:56:9d:eb:1e:51:4f:e7:23:f4:1c:3f:51: d2:f1:d0:71:9a:be:5b:75:eb:45:08:5a:04:b0:f8: 1f:c9:bd:f7:7b:ff:ab:cc:31:3b:1b:ea:31:7f:62: d1:b7:26:2c:7b:62:3d:b1:61:cf:85:2e:06:39:17: dc:f0:c4:e5:5e:4f:d0:59:86:47:8f:3c:bc:15:4c: 28:6e:97:87:c0:42:d0:7a:5b:2c:31:32:9d:d5:5b: d1:6d:3e:b1:41:d6:a6:42:d8:d8:02:56:ef:0d:dd: fe:d3:31:1c:28:b0:23:74:37:10:47:30:64:f0:4a: d5:29:d9:c2:a2:77:40:1b:2f:9a:d5:98:72:4d:86: 7b:f3:7d:66:2c:d6:5d:92:7c:a1:9b:29:bf:f0:fc: 74:2a:89:7c:c4:03:12:6a:7e:21:97:2f:7a:67:0b: 5d:9e:ba:46:58:93:01:b1:67:ca:7b:b9:ab:cd:1e: 19:e5:d9:a0:fd:9c:44:44:c7:ef:e9:a2:15:f4:29: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:AD:0C:94:65:BD:B8:49:DA:9D:64:4B:9B:84:B7:6D:01:42:AC X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f4:24:2f:f4:b0:27:45:73:2f:03:98:0c:89:1d:bf:9e:22: 9e:c6:1d:ca:74:ad:9e:8a:e8:28:8f:de:0d:c2:9f:59:e9:40: d4:eb:44:ba:92:df:b0:61:43:58:05:d5:f0:be:5d:d3:e6:ae: ae:5e:0b:3b:a9:70:68:72:cc:64:e6:af:ea:ed:e8:dc:29:8d: ba:bb:cc:2a:63:0d:57:28:2d:c7:59:a4:25:7f:55:4a:92:2e: a3:6b:a6:ca:62:5d:b6:b7:1a:9d:9c:05:65:cd:91:2d:f1:ea: 4a:7a:91:65:1d:96:b1:ec:95:00:6f:8b:af:b6:e6:57:d8:40: 41:74:e5:e3:43:8d:43:72:05:27:69:3e:81:86:2b:23:8c:1b: 7e:b0:da:37:b2:96:4b:d3:62:a7:27:39:0c:a6:e2:b7:09:3a: 3a:bc:62:5f:f0:ac:1d:09:b8:51:4b:d7:eb:77:1b:d5:0c:ca: 93:16:2d:41:bf:44:52:4f:97:74:ef:9b:38:b6:90:e9:14:90: 05:db:2b:18:df:07:07:ca:1d:e2:30:6e:3f:61:83:ad:fa:17: 42:58:1f:ab:ee:93:89:c4:26:87:f9:9d:9e:f8:4c:8d:97:66: 67:57:e3:09:aa:ec:4b:1b:1a:d4:2c:79:e1:b4:b9:10:fd:6a: 73:bf:f9:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxOEMxMTAvBgNVBAUTKEJFNDMwMUUyQTQwQjRGNkE0N0UxODVBNjc1N0Q5QTZF OEQ3Qzc0NDIwHhcNMjYwNDA1MDY1NzQ0WhcNMjYwNDEyMDY1NzQ0WjAYMRYwFAYD VQQDEw02OWQyMDdlOC02YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu20Y6ayxykzbyruss1q2PGNAGpyB1hOp0elxer8oLXBezrtT6khNoYifPJ2 D4QQ4ycCbY8QcwfmJ2Gxua5WneseUU/nI/QcP1HS8dBxmr5bdetFCFoEsPgfyb33 e/+rzDE7G+oxf2LRtyYse2I9sWHPhS4GORfc8MTlXk/QWYZHjzy8FUwobpeHwELQ elssMTKd1VvRbT6xQdamQtjYAlbvDd3+0zEcKLAjdDcQRzBk8ErVKdnCondAGy+a 1ZhyTYZ7831mLNZdknyhmym/8Px0Kol8xAMSan4hly96ZwtdnrpGWJMBsWfKe7mr zR4Z5dmg/ZxERMfv6aIV9Cl9OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhOrQyU Zb24SdqdZEubhLdtAUKsMB8GA1UdIwQYMBaAFL5DAeKkC09qR+GFpnV9mm6NfHRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzE4Qy9DRTlCMDlFRTYx NTQxMUYwQkI1MEZBMzdDNEY5QUUwMi92a01CNHFRTFQycEg0WVdtZFgyYWJvMThk RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzE4Qy9DRTlCMDlFRTYxNTQxMUYwQkI1MEZBMzdDNEY5QUUwMi92a01CNHFRTFQy cEg0WVdtZFgyYWJvMThkRUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifQkL/SwJ0VzLwOYDIkdv54insYdynStnoroKI/eDcKfWelA1OtEupLfsGFD WAXV8L5d0+aurl4LO6lwaHLMZOav6u3o3CmNurvMKmMNVygtx1mkJX9VSpIuo2um ymJdtrcanZwFZc2RLfHqSnqRZR2WseyVAG+Lr7bmV9hAQXTl40ONQ3IFJ2k+gYYr I4wbfrDaN7KWS9Nipyc5DKbitwk6OrxiX/CsHQm4UUvX63cb1QzKkxYtQb9EUk+X dO+bOLaQ6RSQBdsrGN8HB8od4jBuP2GDrfoXQlgfq+6TicQmh/mdnvhMjZdmZ1fj CarsSxsa1Cx54bS5EP1qc7/5Hw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:24 2026 by rpki-client