$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: 8rjd8Oy4IJnx5ZUUxMI2uUGg+y+MY6UVTntm4CubK84= Subject key identifier: 0E:F0:43:BB:D1:85:DA:A3:AE:1A:1C:23:F8:60:BB:D9:C9:24:92:7A Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: D2 Signing time: Fri 17 Apr 2026 06:24:29 +0000 Manifest this update: Fri 17 Apr 2026 06:24:28 +0000 Manifest next update: Fri 24 Apr 2026 06:24:28 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: /k/ki6AJ48jTGXu6vBSSSHoN1zOon6Grl5rFa6jgrJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Apr 17 06:24:28 2026 GMT Not After : Apr 24 06:24:28 2026 GMT Subject: CN=69e1d21d-20d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:ea:5f:bf:4f:a4:d0:85:27:4b:4c:34:ee: 89:d5:1c:f8:31:f9:b2:82:13:e6:17:65:c9:04:bb: 75:c6:83:c5:02:da:e3:44:00:67:8a:93:6a:6d:7f: c5:bc:a0:58:e2:bf:4e:7e:cf:23:4f:5b:d8:f5:cb: 47:61:b2:08:06:15:87:fa:af:3b:49:31:77:88:61: 05:ad:cf:a8:54:07:8a:3b:fc:c7:88:49:7b:11:28: f3:28:cc:2d:cb:89:25:08:39:75:f6:9e:4b:18:46: 31:1f:a2:dd:03:cd:80:db:03:80:c7:6c:6a:7d:0d: 5a:6a:bd:fb:69:65:08:16:76:25:72:8b:fb:32:dd: 29:f8:43:dd:6d:7a:9e:a6:f8:53:f9:cf:4e:86:79: de:aa:16:f7:b5:40:8c:7a:c8:00:a8:cc:26:f7:56: 67:42:2f:a5:fd:61:14:84:dd:26:ef:9f:f5:9b:d4: 6b:9c:39:6f:fb:80:3a:4c:96:92:14:c2:c5:79:1a: 0b:b7:f9:4a:2d:78:e5:a1:dc:c5:e2:f7:cc:13:a1: b8:6d:72:89:9a:df:de:32:84:72:ef:33:0f:f2:28: d0:e6:1f:3b:53:1e:cb:12:61:36:50:cc:fb:bc:8d: b5:3c:01:8c:ba:a5:38:9a:57:55:f4:56:91:11:1d: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F0:43:BB:D1:85:DA:A3:AE:1A:1C:23:F8:60:BB:D9:C9:24:92:7A X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:9e:8c:7d:ea:ae:5c:b5:c5:e5:7b:26:53:d6:88:46:2e: 02:8b:8e:0e:91:9f:f1:df:71:45:3c:8e:01:13:9b:4e:cc:21: b5:1e:2a:b5:ab:32:d3:25:25:6d:43:9f:20:4e:33:a9:ea:fa: 63:6a:f1:2e:18:0d:ef:be:3b:7a:5c:65:df:a2:95:34:99:ea: fe:34:e0:2f:3b:5c:e7:16:ae:38:05:99:ce:07:4e:c5:c9:0e: 14:12:43:7b:81:88:b9:8c:de:7a:fd:f5:26:86:cf:68:a3:ce: ef:29:69:b5:4a:a0:ab:4c:c9:f7:c4:dc:5f:14:18:17:71:15: 36:34:81:76:0f:b9:26:d5:0b:ac:3a:00:5a:5b:1a:58:2f:4e: 6a:6d:45:23:66:48:48:6f:4d:ec:9f:f5:cc:00:9e:3f:e2:a4: 95:22:e9:5b:2b:27:61:c1:6b:ca:4d:37:93:ef:06:0f:0d:ee: 60:29:2a:c8:0d:4f:af:4f:d5:57:bb:ae:8c:fc:8e:3d:da:d3: 90:d8:d8:44:43:20:27:b6:25:d7:04:ec:12:3b:22:b2:c0:94: f8:70:4b:e3:d0:3b:ed:f2:f4:7a:68:90:30:78:e1:df:01:ad: 13:64:62:bd:85:4f:7a:cc:dc:94:d3:e1:3e:93:ed:95:36:c4: 51:ee:77:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKEJEQTNFOEE4MjMxQzc4N0Y2QjdGMThCQzE0NkI5NUZC NUMwMzhFRDkwHhcNMjYwNDE3MDYyNDI4WhcNMjYwNDI0MDYyNDI4WjAYMRYwFAYD VQQDEw02OWUxZDIxZC0yMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLTqX79PpNCFJ0tMNO6J1Rz4MfmyghPmF2XJBLt1xoPFAtrjRABnipNqbX/F vKBY4r9Ofs8jT1vY9ctHYbIIBhWH+q87STF3iGEFrc+oVAeKO/zHiEl7ESjzKMwt y4klCDl19p5LGEYxH6LdA82A2wOAx2xqfQ1aar37aWUIFnYlcov7Mt0p+EPdbXqe pvhT+c9Ohnneqhb3tUCMesgAqMwm91ZnQi+l/WEUhN0m75/1m9RrnDlv+4A6TJaS FMLFeRoLt/lKLXjlodzF4vfME6G4bXKJmt/eMoRy7zMP8ijQ5h87Ux7LEmE2UMz7 vI21PAGMuqU4mldV9FaRER3gDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7wQ7vR hdqjrhocI/hgu9nJJJJ6MB8GA1UdIwQYMBaAFL2j6KgjHHh/a38YvBRrlftcA47Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy80QjAxQzRBNkY5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VIOXJmeGk4Rkd1Vi0xd0Rq dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy80QjAxQzRBNkY5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi92YVBvcUNNY2VI OXJmeGk4Rkd1Vi0xd0RqdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGkSejH3qrly1xeV7JlPWiEYuAouODpGf8d9xRTyOARObTswhtR4qtasy0yUl bUOfIE4zqer6Y2rxLhgN7747elxl36KVNJnq/jTgLztc5xauOAWZzgdOxckOFBJD e4GIuYzeev31JobPaKPO7ylptUqgq0zJ98TcXxQYF3EVNjSBdg+5JtULrDoAWlsa WC9Oam1FI2ZISG9N7J/1zACeP+KklSLpWysnYcFryk03k+8GDw3uYCkqyA1Pr0/V V7uujPyOPdrTkNjYREMgJ7Yl1wTsEjsissCU+HBL49A77fL0emiQMHjh3wGtE2Ri vYVPeszclNPhPpPtlTbEUe53cA== -----END CERTIFICATE-----Generated at Sat Apr 18 22:24:22 2026 by rpki-client