$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft File: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json) Hash identifier: cm3wg1yCJqg8kRLfaiKVHQDwYnaIhS+tKXoqe6v3U/s= Subject key identifier: 24:F1:B7:51:C4:D4:D3:ED:CE:21:4A:A1:E5:48:7A:99:0C:C1:D1:43 Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18 Certificate issuer: /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft Manifest number: 20 Signing time: Sun 29 Mar 2026 08:33:02 +0000 Manifest this update: Sun 29 Mar 2026 08:33:02 +0000 Manifest next update: Sun 05 Apr 2026 08:33:02 +0000 Files and hashes: 1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: D/vYty1mIuXlac4fJUh5KqWPr2vMzgTQJVF0V1Fwhm4=) 2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: DthUWy6Hm+llw2ps4qbubO2gT5P5TYvR85rrtYYcYEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718 Validity Not Before: Mar 29 08:33:02 2026 GMT Not After : Apr 5 08:33:02 2026 GMT Subject: CN=69c8e3be-4a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:ff:d8:15:4a:77:1c:54:e6:2c:30:1a:c4: 00:ba:c2:9c:0d:21:70:7b:b4:23:ed:84:27:e7:f5: 6c:b0:d2:88:f7:be:e0:b2:ec:bc:58:53:57:7d:0e: 8b:81:3a:0a:eb:45:6b:51:23:3d:2e:cb:d8:38:b9: c0:37:8b:2a:b2:86:1b:86:db:ad:0c:5c:41:69:65: b2:36:93:89:f9:2c:b2:61:5d:55:f0:f1:cb:45:91: cd:f1:88:83:16:f7:d2:dc:4f:2b:af:af:bd:0a:0b: 27:a8:08:ae:18:e0:38:f4:8f:0b:74:ea:bb:4f:94: 87:5c:23:23:48:e1:36:db:cc:32:23:6b:c7:61:d3: 08:a8:c7:88:b0:3e:ca:45:d8:19:c1:91:c0:bb:4c: 51:4a:b6:b4:c8:b3:a6:59:7d:b0:da:07:8a:5f:c9: 65:2a:80:10:59:d5:97:3f:70:7e:bd:18:35:07:31: 9c:c1:3b:d4:e2:d1:5d:56:87:69:f8:7b:b7:18:00: aa:9a:f6:9f:66:49:77:e7:f2:f8:ea:71:64:1f:3d: 66:a9:ea:ea:a1:32:f7:f3:23:5f:d7:1a:13:89:65: b3:d1:b9:06:aa:6c:4e:5c:a3:ea:79:b5:78:9c:a0: 8f:3c:42:16:d9:6f:07:45:03:d9:d5:ce:fc:91:e9: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F1:B7:51:C4:D4:D3:ED:CE:21:4A:A1:E5:48:7A:99:0C:C1:D1:43 X509v3 Authority Key Identifier: keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:71:b1:d0:09:23:03:36:6b:19:70:c3:a4:a1:3a:ea:df:d4: 1e:0f:be:63:ee:da:3d:db:1b:fe:c6:4c:ff:9b:e5:40:84:1f: c1:0b:53:4d:e3:86:8a:d7:af:42:13:84:69:8b:5d:ec:e5:a9: 73:26:c2:0b:b3:44:9f:7d:2e:90:07:e0:71:2e:13:e6:db:13: 0d:96:7b:3d:ca:57:8e:7f:a9:e5:1a:cf:fc:06:b9:ed:09:da: e7:8d:bc:6e:46:1d:52:5c:7b:8d:c2:ab:ea:8c:34:a7:bf:f6: ba:d0:9f:7a:b8:e5:74:a0:35:7e:52:39:d4:7f:9c:64:1e:9e: 69:a4:d9:b4:20:38:71:e6:8c:44:7e:43:88:18:41:4c:3b:68: 2a:39:c1:59:6d:59:b7:74:2d:b7:19:47:59:2b:dd:bb:f0:3a: e7:fe:7f:6d:b6:0e:7c:c8:82:d3:db:9b:5a:70:af:90:6b:c5: 39:7b:c3:ad:69:ab:be:4d:71:ec:c9:e9:28:92:47:da:1a:43: 42:26:2d:8e:ce:a5:bd:ec:fa:bf:15:8b:c7:b8:09:b2:5e:0a: f7:ac:df:d7:90:55:9f:62:4a:45:89:f2:c1:69:88:bf:d3:d8: be:e6:7c:7b:51:f8:ca:93:9a:18:82:0c:66:d5:86:50:68:35: ee:f3:6c:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MDBEQzExMC8GA1UEBRMoNTVERTQyQjZCMThCRDU3OTlBMjZFODQyOTk2MTAzRkEz NEJDMTcxODAeFw0yNjAzMjkwODMzMDJaFw0yNjA0MDUwODMzMDJaMBgxFjAUBgNV BAMTDTY5YzhlM2JlLTRhN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1if/YFUp3HFTmLDAaxAC6wpwNIXB7tCPthCfn9Wyw0oj3vuCy7LxYU1d9DouB OgrrRWtRIz0uy9g4ucA3iyqyhhuG260MXEFpZbI2k4n5LLJhXVXw8ctFkc3xiIMW 99LcTyuvr70KCyeoCK4Y4Dj0jwt06rtPlIdcIyNI4TbbzDIja8dh0wiox4iwPspF 2BnBkcC7TFFKtrTIs6ZZfbDaB4pfyWUqgBBZ1Zc/cH69GDUHMZzBO9Ti0V1Wh2n4 e7cYAKqa9p9mSXfn8vjqcWQfPWap6uqhMvfzI1/XGhOJZbPRuQaqbE5co+p5tXic oI88QhbZbwdFA9nVzvyR6dD3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJPG3UcTU 0+3OIUqh5Uh6mQzB0UMwHwYDVR0jBBgwFoAUVd5CtrGL1XmaJuhCmWED+jS8Fxgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMERDLzJGQkJDMzZFMDAx ODExRjFCNkExMkExNDQyNkY1NkJDL1ZkNUN0ckdMMVhtYUp1aENtV0VELWpTOEZ4 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmQ1Q3RyR0wxWG1hSnVoQ21XRUQtalM4RnhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw MERDLzJGQkJDMzZFMDAxODExRjFCNkExMkExNDQyNkY1NkJDL1ZkNUN0ckdMMVht YUp1aENtV0VELWpTOEZ4Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfcbHQCSMDNmsZcMOkoTrq39QeD75j7to92xv+xkz/m+VAhB/BC1NN44aK169C E4Rpi13s5alzJsILs0SffS6QB+BxLhPm2xMNlns9yleOf6nlGs/8BrntCdrnjbxu Rh1SXHuNwqvqjDSnv/a60J96uOV0oDV+UjnUf5xkHp5ppNm0IDhx5oxEfkOIGEFM O2gqOcFZbVm3dC23GUdZK9278Drn/n9ttg58yILT25tacK+Qa8U5e8Otaau+TXHs yekokkfaGkNCJi2OzqW97Pq/FYvHuAmyXgr3rN/XkFWfYkpFifLBaYi/09i+5nx7 UfjKk5oYggxm1YZQaDXu82x2 -----END CERTIFICATE-----Generated at Mon Mar 30 13:17:47 2026 by rpki-client