$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: ilCe8eFOp/xkrIa+h/bcO0f/M6XY8a5vLCeeC76Fy7A= Subject key identifier: 0A:C1:55:DB:09:3F:9E:F7:7A:8E:51:40:2B:99:F7:A4:2D:60:DE:92 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C8D Signing time: Sat 04 Apr 2026 18:24:29 +0000 Manifest this update: Sat 04 Apr 2026 18:24:28 +0000 Manifest next update: Sat 11 Apr 2026 18:24:28 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: PXvT11gY9X5VUazNKz4ktycEgj44AZT9c9Maz1Tnf6A=) 2: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: D5fKc+44BFNosYF9mliDVf4cmNZpEtwAIPTStvxfd+8=) 3: 98B698EEE8A811F084817E76576F56BC.roa (hash: JBryeLEpdHknVs2/azmwAglPMtPdhkj/YFJ0rtMnNdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Apr 4 18:24:28 2026 GMT Not After : Apr 11 18:24:28 2026 GMT Subject: CN=69d1575d-0ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:40:8c:41:f5:89:d1:24:22:1c:b1:99:45: bb:47:56:48:3a:d9:5b:01:4a:c0:8f:f8:f9:da:62: ec:07:a5:89:6f:d7:88:78:40:f9:51:55:e6:54:ab: d8:35:59:83:4f:ac:b9:12:ec:6b:59:a4:6a:7a:c9: 96:d0:df:ea:04:a6:31:b9:13:c5:5d:d8:c0:91:9d: 35:49:52:58:59:39:25:17:12:9e:22:16:fd:df:08: 4e:5c:e4:05:29:de:27:c3:4b:f8:6e:0a:f1:06:3d: 46:c5:8d:79:59:af:9e:ca:90:25:2c:55:01:8d:9a: d2:fc:aa:6f:5b:3b:1a:0e:b5:73:8e:2f:75:f7:bd: 81:3c:7f:0c:64:0c:81:dd:74:61:f8:91:3c:06:b2: cf:4a:c7:65:5e:0a:d3:bb:36:30:b5:b8:84:d5:b5: 41:83:4c:b0:84:b7:64:5b:56:ad:51:8d:34:61:32: f5:3b:60:b4:e4:0f:35:85:1c:cf:99:09:01:44:46: 5c:f6:b5:be:f3:60:6b:d6:88:f8:2f:49:1e:59:07: 85:ce:ca:00:87:58:af:45:31:89:69:60:da:ab:f8: 70:20:7e:d8:8a:2b:89:52:0d:03:be:73:f2:83:b7: 9f:af:a0:12:c8:5d:50:c6:6f:9f:a0:7a:2c:25:c1: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C1:55:DB:09:3F:9E:F7:7A:8E:51:40:2B:99:F7:A4:2D:60:DE:92 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:10:a6:b1:d2:64:b1:3e:68:6c:cb:51:d9:28:43:4a:ff:17: 02:c6:11:f9:21:1f:11:ca:1f:ab:10:b1:55:ea:74:b3:ec:9e: 4d:a2:c7:54:fd:eb:6e:19:dd:03:76:1e:cb:5f:2c:98:d3:15: 0b:89:50:a9:dd:1b:22:f2:e1:5c:79:cc:a9:ba:d8:ab:7d:ce: 28:97:0b:72:62:89:b0:d3:d3:95:67:f9:fb:6d:52:ba:60:09: 3f:90:eb:d5:84:89:46:01:70:51:da:40:78:8e:02:c7:24:1b: b2:5a:ad:cc:a0:bc:a9:2b:28:3a:05:a6:16:a9:db:76:f3:06: 1a:6e:1b:b2:01:22:78:a1:0b:87:e7:0c:e5:a8:4a:db:f3:c9: 1b:2b:22:42:88:4b:1e:93:6f:c4:fb:a6:1d:26:8c:4d:fe:ef: 6d:9b:1e:fc:28:83:6b:98:0f:82:e7:54:16:01:f3:c0:ad:4a: 7f:34:72:1b:57:9d:df:2f:51:41:68:37:40:a7:37:e4:1e:f1: 60:1c:a9:bd:2a:50:e5:55:a9:a4:b1:95:e5:46:9e:f1:0d:20: 19:53:84:c1:47:04:71:23:2a:da:dd:a2:fb:9a:d1:b4:4c:13: 05:51:f1:b5:b3:3f:a4:73:06:ae:e9:1c:82:b2:e3:5d:c8:a4: f0:f6:4b:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjYwNDA0MTgyNDI4WhcNMjYwNDExMTgyNDI4WjAYMRYwFAYD VQQDEw02OWQxNTc1ZC0wYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzdAjEH1idEkIhyxmUW7R1ZIOtlbAUrAj/j52mLsB6WJb9eIeED5UVXmVKvY NVmDT6y5EuxrWaRqesmW0N/qBKYxuRPFXdjAkZ01SVJYWTklFxKeIhb93whOXOQF Kd4nw0v4bgrxBj1GxY15Wa+eypAlLFUBjZrS/KpvWzsaDrVzji91972BPH8MZAyB 3XRh+JE8BrLPSsdlXgrTuzYwtbiE1bVBg0ywhLdkW1atUY00YTL1O2C05A81hRzP mQkBREZc9rW+82Br1oj4L0keWQeFzsoAh1ivRTGJaWDaq/hwIH7YiiuJUg0DvnPy g7efr6ASyF1Qxm+foHosJcFz9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArBVdsJ P573eo5RQCuZ96QtYN6SMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASBCmsdJksT5obMtR2ShDSv8XAsYR+SEfEcofqxCxVep0s+yeTaLHVP3rbhnd A3Yey18smNMVC4lQqd0bIvLhXHnMqbrYq33OKJcLcmKJsNPTlWf5+21SumAJP5Dr 1YSJRgFwUdpAeI4CxyQbslqtzKC8qSsoOgWmFqnbdvMGGm4bsgEieKELh+cM5ahK 2/PJGysiQohLHpNvxPumHSaMTf7vbZse/CiDa5gPgudUFgHzwK1KfzRyG1ed3y9R QWg3QKc35B7xYBypvSpQ5VWppLGV5Uae8Q0gGVOEwUcEcSMq2t2i+5rRtEwTBVHx tbM/pHMGrukcgrLjXcik8PZLKQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:09:33 2026 by rpki-client