$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: Rs+lPkasHQBBvSPoaXdMZDkNistBsMquZ8EMpJuITcA= Subject key identifier: E4:FE:3A:59:B2:7B:95:61:A7:AF:48:AE:86:E0:67:30:9C:B2:5A:A6 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 3550 Signing time: Fri 06 Mar 2026 14:37:06 +0000 Manifest this update: Fri 06 Mar 2026 14:37:06 +0000 Manifest next update: Fri 13 Mar 2026 14:37:06 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: 4cMdl1DmCHXlEaps659VJBgdzJ91bpKGNAQdmhNgXj8=) 2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=) 4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13703 (0x3587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Mar 6 14:37:06 2026 GMT Not After : Mar 13 14:37:06 2026 GMT Subject: CN=69aae692-d912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:4f:1b:ba:41:23:bc:ac:b6:b5:3b:46:90: 23:4f:6a:6e:1a:b9:88:12:5c:58:c9:63:1b:17:b5: bc:95:0d:1b:80:05:cc:bd:6e:62:53:9e:52:b8:0a: 08:97:95:01:98:14:8e:a3:f4:f3:6c:85:72:6b:38: 68:b6:0d:f6:71:a9:e1:49:18:87:75:58:56:ae:0b: 08:1d:50:2a:52:04:6b:d6:6a:08:72:e4:98:c8:09: f4:38:82:d4:58:4e:5f:71:ab:26:87:e8:48:2e:ea: c7:ea:db:d5:63:2d:6d:cf:e2:ca:40:e7:4c:86:a1: 6e:d3:37:be:3d:e8:be:98:31:d8:2a:76:c3:7d:c5: 6b:9a:65:d8:52:64:9a:b4:8d:36:7f:8b:db:a1:ec: 04:5c:b9:c3:d8:3f:b4:a5:48:e9:58:e3:20:f6:ff: 34:31:d9:f6:38:93:a8:f1:b0:7f:f5:d2:58:f4:ae: 3c:d2:86:5b:8d:57:e8:3d:37:ee:29:b2:e8:46:8f: 87:7f:ba:40:3d:fe:95:00:17:2a:e2:55:5d:04:8c: ba:2f:5f:2e:80:08:b9:9f:74:5d:55:ce:9b:f1:de: db:51:89:e3:71:61:0f:78:46:6a:0b:f6:60:5e:aa: f6:3b:78:ee:2e:1d:a4:34:79:2f:e5:b2:5b:d8:da: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:3A:59:B2:7B:95:61:A7:AF:48:AE:86:E0:67:30:9C:B2:5A:A6 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:d1:6b:91:ae:58:27:8a:c3:f7:fc:ff:b9:3e:ed:66:41: 13:02:40:6c:97:3a:24:e6:87:44:1e:c9:d7:6f:f8:2c:78:06: e8:3b:f0:1f:1a:eb:b2:ba:ca:8f:9b:69:ba:df:a1:e6:b1:18: 8b:c2:af:a8:75:d6:36:ab:89:cd:a1:76:db:43:c0:a6:89:ae: b8:80:f8:40:34:61:66:3e:cd:83:ae:f8:82:f8:55:98:51:92: e3:f7:75:9f:ce:19:32:d6:2e:34:44:37:eb:29:83:8c:94:00: a2:5e:59:f5:ca:e8:38:ef:b1:85:f0:9c:8b:a9:a3:88:5c:19: 22:b0:df:6c:d9:81:bd:4f:4a:41:2f:7d:e8:d9:5b:e4:42:a8: 8d:cd:80:80:ed:f0:37:fb:5a:2a:ab:a0:7b:9f:c7:46:65:fb: ea:55:93:9f:ff:ea:e6:8c:c0:53:15:39:a6:0d:50:ae:1b:4b: 82:0a:d6:f8:3d:ac:0e:b1:fd:31:f9:d5:1b:09:e5:21:57:94: 68:81:1a:8a:e6:df:c7:a1:a7:c2:57:b7:9c:14:66:9b:98:72: ae:d1:00:8a:15:1d:bb:40:a2:9e:92:fe:db:58:5c:07:2a:fb: cd:cb:01:a5:8f:b5:83:1b:4b:db:16:ed:70:03:c9:0b:74:ee: 9c:aa:0a:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwMzA2MTQzNzA2WhcNMjYwMzEzMTQzNzA2WjAYMRYwFAYD VQQDEw02OWFhZTY5Mi1kOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiVPG7pBI7ystrU7RpAjT2puGrmIElxYyWMbF7W8lQ0bgAXMvW5iU55SuAoI l5UBmBSOo/TzbIVyazhotg32canhSRiHdVhWrgsIHVAqUgRr1moIcuSYyAn0OILU WE5fcasmh+hILurH6tvVYy1tz+LKQOdMhqFu0ze+Pei+mDHYKnbDfcVrmmXYUmSa tI02f4vboewEXLnD2D+0pUjpWOMg9v80Mdn2OJOo8bB/9dJY9K480oZbjVfoPTfu KbLoRo+Hf7pAPf6VABcq4lVdBIy6L18ugAi5n3RdVc6b8d7bUYnjcWEPeEZqC/Zg Xqr2O3juLh2kNHkv5bJb2NqwnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT+Olmy e5Vhp69IrobgZzCcslqmMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDvRa5GuWCeKw/f8/7k+7WZBEwJAbJc6JOaHRB7J12/4LHgG6DvwHxrrsrrK j5tput+h5rEYi8KvqHXWNquJzaF220PApomuuID4QDRhZj7Ng674gvhVmFGS4/d1 n84ZMtYuNEQ36ymDjJQAol5Z9croOO+xhfCci6mjiFwZIrDfbNmBvU9KQS996Nlb 5EKojc2AgO3wN/taKquge5/HRmX76lWTn//q5ozAUxU5pg1QrhtLggrW+D2sDrH9 MfnVGwnlIVeUaIEaiubfx6Gnwle3nBRmm5hyrtEAihUdu0CinpL+21hcByr7zcsB pY+1gxtL2xbtcAPJC3TunKoKPg== -----END CERTIFICATE-----Generated at Sat Mar 7 18:24:58 2026 by rpki-client