$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: xwcJ+McqNY5WsdmmeGS0LaDFJIYvxL8SAzjUBkYIV3k= Subject key identifier: 8F:06:1B:30:85:B3:37:0A:F3:66:EF:89:AA:EC:9D:18:26:B2:F7:16 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 03F5 Signing time: Sun 05 Apr 2026 00:15:15 +0000 Manifest this update: Sun 05 Apr 2026 00:15:15 +0000 Manifest next update: Sun 12 Apr 2026 00:15:15 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: W3N2JpQvOHJOYiVzeSDXxVe5i/9Rvqko5Z6KmBLMuuM=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 84Ty7wcmoehSksw6QkgqM/3dAcuuvgPeVakKxHJDpTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Apr 5 00:15:15 2026 GMT Not After : Apr 12 00:15:15 2026 GMT Subject: CN=69d1a993-0c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:c5:8a:4b:bb:44:6f:27:7a:76:71:ea:64: cd:51:81:db:85:14:30:22:9d:c4:68:d7:2f:02:d2: ce:d7:a8:61:c3:65:21:0d:30:30:34:e3:ed:f9:a0: 15:01:1e:02:22:83:ca:9c:90:26:1c:86:c5:c3:69: 01:c4:f5:27:1a:03:b1:01:4a:54:9f:0a:13:b7:00: 60:fa:28:c1:1b:14:91:66:63:4f:c7:a2:e6:a6:cf: 6c:7e:26:01:49:0e:15:ac:83:8a:8c:89:4d:69:03: 36:2b:d7:4d:07:2e:e6:b8:b3:13:9f:95:3f:13:d4: 82:74:e1:e9:d3:e1:6c:32:d0:cd:c4:b0:b5:60:f8: da:79:9a:e0:67:0b:7f:d2:81:da:f6:c7:b5:2b:09: 08:bc:a4:e2:98:26:44:f2:2a:83:2a:72:3e:c6:9a: 90:a3:95:32:77:12:8a:d0:3e:d1:0d:6c:37:a5:c8: 2d:f6:5f:4f:ed:9a:a9:c8:7d:62:a9:64:d9:6e:84: c7:6c:c7:2f:f1:ad:75:e6:0d:21:d2:e1:fd:9a:b5: 1c:09:30:2b:96:a1:81:02:31:45:19:4c:a5:8b:78: 36:5c:69:17:a4:24:b2:b0:14:3c:3b:99:46:df:f7: d9:ac:cd:41:c1:fc:72:c6:94:a3:02:7e:16:10:cb: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:1B:30:85:B3:37:0A:F3:66:EF:89:AA:EC:9D:18:26:B2:F7:16 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:18:5c:7d:f8:79:2a:99:f2:f9:d4:4a:cf:57:32:55:35:af: f9:56:6a:50:fa:b3:bf:51:9f:a1:66:ee:29:b5:85:0b:6d:84: cf:d7:56:c0:a0:b2:a9:fb:f3:eb:94:a6:1b:44:0e:28:78:84: 6b:b7:36:08:04:0c:0f:05:f5:3e:f4:57:67:19:f1:3e:0d:ce: 86:09:19:40:c8:48:23:ec:26:d7:46:97:fa:eb:be:5b:a4:14: b0:0e:f9:13:eb:41:9f:39:f8:45:a5:d4:2c:d6:5b:70:7c:6b: af:2e:a1:c3:8e:e5:66:51:f2:d0:c2:87:aa:2c:10:1b:6b:5a: 6b:5b:f8:01:8b:21:da:d7:4c:4d:59:bd:90:83:90:a8:72:ca: f4:71:05:62:6e:e1:3a:1f:a4:f0:97:1b:df:3c:08:b2:84:73: 2c:dc:20:50:9c:a5:66:60:df:94:3a:00:b7:a0:62:b4:90:4a: 43:69:0e:ed:88:44:72:fb:e5:b8:c1:28:04:f8:1b:79:b4:15: b5:ea:1f:f5:a7:c9:30:23:8a:35:3b:5b:63:c6:f3:d5:49:60: 85:f3:cf:4f:6c:51:05:63:fb:8e:61:8e:06:a6:ce:15:cb:45: f1:5f:3f:13:40:b8:fe:89:e5:11:b3:62:68:b3:5f:60:17:2c: 3a:ac:b8:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjYwNDA1MDAxNTE1WhcNMjYwNDEyMDAxNTE1WjAYMRYwFAYD VQQDEw02OWQxYTk5My0wYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyPFiku7RG8nenZx6mTNUYHbhRQwIp3EaNcvAtLO16hhw2UhDTAwNOPt+aAV AR4CIoPKnJAmHIbFw2kBxPUnGgOxAUpUnwoTtwBg+ijBGxSRZmNPx6Lmps9sfiYB SQ4VrIOKjIlNaQM2K9dNBy7muLMTn5U/E9SCdOHp0+FsMtDNxLC1YPjaeZrgZwt/ 0oHa9se1KwkIvKTimCZE8iqDKnI+xpqQo5UydxKK0D7RDWw3pcgt9l9P7ZqpyH1i qWTZboTHbMcv8a115g0h0uH9mrUcCTArlqGBAjFFGUyli3g2XGkXpCSysBQ8O5lG 3/fZrM1BwfxyxpSjAn4WEMtJ9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8GGzCF szcK82bviarsnRgmsvcWMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAshhcffh5Kpny+dRKz1cyVTWv+VZqUPqzv1GfoWbuKbWFC22Ez9dWwKCyqfvz 65SmG0QOKHiEa7c2CAQMDwX1PvRXZxnxPg3OhgkZQMhII+wm10aX+uu+W6QUsA75 E+tBnzn4RaXULNZbcHxrry6hw47lZlHy0MKHqiwQG2taa1v4AYsh2tdMTVm9kIOQ qHLK9HEFYm7hOh+k8Jcb3zwIsoRzLNwgUJylZmDflDoAt6BitJBKQ2kO7YhEcvvl uMEoBPgbebQVteof9afJMCOKNTtbY8bz1UlghfPPT2xRBWP7jmGOBqbOFctF8V8/ E0C4/onlEbNiaLNfYBcsOqy4XQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:12 2026 by rpki-client