$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: iqOPpENSpgzsQ/eOSnHQ/3/Ym6Ml8yN97nh4eN+XQ3E= Subject key identifier: 13:BA:33:D6:D7:FC:D2:89:D3:04:F3:AC:7F:10:BE:E3:72:93:EA:6F Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 03FB Signing time: Sun 05 Apr 2026 00:18:32 +0000 Manifest this update: Sun 05 Apr 2026 00:18:32 +0000 Manifest next update: Sun 12 Apr 2026 00:18:32 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: roHggBy36MGYFr/OUJ3uS0d7V2AiOJOWVFdGWQeO+DI=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 68w9XoY27nHlUrF1DZKt5CH4xTH8y7IDX4gf6ZSbWdc=) 3: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: C7ArPIYFNK5A4mOStnsyTHFMTUZf+fChC6QWQfJwx3M=) 4: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: RbczHDkY+8sVzpWSrDkIgwTXiD6ekKL+fyMLf3ByibE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Apr 5 00:18:32 2026 GMT Not After : Apr 12 00:18:32 2026 GMT Subject: CN=69d1aa58-f706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:04:48:e8:a5:8f:7d:d1:48:8f:93:b3:ef: f1:26:ee:52:9d:0b:ee:7b:11:13:e0:a4:80:1b:e5: ab:7c:ed:3e:a4:5b:d0:a0:d6:33:18:2c:62:b0:98: ba:a6:b9:da:b8:86:11:7d:f9:b7:4b:87:66:73:1c: 1b:db:4b:12:61:e5:18:05:45:5d:1c:0b:b1:d2:32: 99:4b:5d:91:12:e4:71:92:f0:11:85:c5:1d:7e:83: 12:3c:85:af:41:23:37:76:3e:b4:49:0b:5e:89:e7: 28:52:3a:6c:65:1a:c1:1d:dd:79:e4:52:ec:95:dc: 30:72:f8:96:3c:87:0f:cc:12:61:b3:af:a8:4e:1c: f7:b0:4d:b7:a3:d6:53:64:36:ee:16:dc:56:66:c9: 9c:15:ec:37:22:21:ec:dc:e8:66:b8:63:fe:1b:e7: 11:04:ab:46:08:8e:e3:cf:e6:72:1d:55:14:53:47: 09:71:3a:f5:e4:63:21:d0:4e:93:a0:da:4e:95:61: f7:43:8b:26:b1:11:2d:0c:a5:5c:bf:41:e2:54:be: 23:60:ee:83:f1:6e:d6:4b:88:b8:8f:98:7c:7a:ed: 96:74:de:26:36:1f:d5:79:e6:79:7e:f5:40:da:4e: 64:87:a2:16:39:29:78:e6:73:c7:05:04:ea:82:96: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BA:33:D6:D7:FC:D2:89:D3:04:F3:AC:7F:10:BE:E3:72:93:EA:6F X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b0:21:18:bc:45:5e:db:03:a6:a7:ac:59:e1:ae:b4:42:10: b6:e5:4a:73:7c:4b:4c:8e:a9:7a:fb:d3:23:bf:5d:45:b0:78: 2e:f9:56:08:a6:fe:5c:7f:d7:ad:ce:eb:17:8f:ad:d9:aa:cc: 32:f6:d6:ac:36:e8:0a:71:3a:42:35:eb:41:05:f5:29:61:39: b7:20:28:8e:f1:69:23:3f:2e:c5:e6:8a:a4:bf:fd:e3:de:02: d8:ed:08:35:94:fe:0a:f3:a2:07:8a:70:70:57:df:17:4d:57: 84:e1:6c:e6:c2:b2:2f:4e:de:10:c8:23:1b:a9:0f:fa:e8:49: fd:40:28:79:e5:73:ce:93:51:8f:53:60:1a:91:c5:35:99:f0: 25:f7:30:70:c9:8b:e4:2f:85:8a:df:e7:bc:cb:0c:0c:01:2e: 1c:df:07:1c:80:60:83:96:c4:0b:43:9e:1a:68:8d:ad:7d:53: 37:99:6e:e8:e3:6d:55:d2:fa:5a:e7:aa:6d:51:ff:fa:8d:65: 26:69:13:7b:44:18:4f:01:17:4c:0b:0b:32:cd:25:19:c1:86: 3b:ff:59:ea:24:0f:16:b5:52:3e:d9:d1:fe:52:e7:ad:e7:9e: 28:a9:21:99:91:b7:3e:dd:07:0c:cd:57:73:cb:79:f9:bf:86: 95:59:2c:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwNDA1MDAxODMyWhcNMjYwNDEyMDAxODMyWjAYMRYwFAYD VQQDEw02OWQxYWE1OC1mNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8UESOilj33RSI+Ts+/xJu5SnQvuexET4KSAG+WrfO0+pFvQoNYzGCxisJi6 prnauIYRffm3S4dmcxwb20sSYeUYBUVdHAux0jKZS12REuRxkvARhcUdfoMSPIWv QSM3dj60SQteiecoUjpsZRrBHd155FLsldwwcviWPIcPzBJhs6+oThz3sE23o9ZT ZDbuFtxWZsmcFew3IiHs3OhmuGP+G+cRBKtGCI7jz+ZyHVUUU0cJcTr15GMh0E6T oNpOlWH3Q4smsREtDKVcv0HiVL4jYO6D8W7WS4i4j5h8eu2WdN4mNh/VeeZ5fvVA 2k5kh6IWOSl45nPHBQTqgpZ2UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBO6M9bX /NKJ0wTzrH8QvuNyk+pvMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdrAhGLxFXtsDpqesWeGutEIQtuVKc3xLTI6pevvTI79dRbB4LvlWCKb+XH/X rc7rF4+t2arMMvbWrDboCnE6QjXrQQX1KWE5tyAojvFpIz8uxeaKpL/9494C2O0I NZT+CvOiB4pwcFffF01XhOFs5sKyL07eEMgjG6kP+uhJ/UAoeeVzzpNRj1NgGpHF NZnwJfcwcMmL5C+Fit/nvMsMDAEuHN8HHIBgg5bEC0OeGmiNrX1TN5lu6ONtVdL6 WueqbVH/+o1lJmkTe0QYTwEXTAsLMs0lGcGGO/9Z6iQPFrVSPtnR/lLnreeeKKkh mZG3Pt0HDM1Xc8t5+b+GlVks5w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:32 2026 by rpki-client