$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: LE3v0sSE9ObXDpKqlu06z5AGzx+DFMJ/1lz1LoJ3Uak= Subject key identifier: 5C:0F:5A:CA:59:DE:E5:C7:9B:02:10:24:7D:4A:67:D9:A5:CF:5E:C8 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 010C Signing time: Sun 01 Mar 2026 07:05:27 +0000 Manifest this update: Sun 01 Mar 2026 07:05:27 +0000 Manifest next update: Sun 08 Mar 2026 07:05:27 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: zL3Xp+eDJ7Qg2rkZrB/3CyWnz4UmprQyaU+inXLNEv0=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: hQ+Gx7Vv9Bqml1yrkYB3EZZ2s/v+ssA89alsVLHowuc=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: 3sSuU9QTymYHLk6nKJf8ZY9J70HL/WV6OzgAH7Dy+z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Mar 1 07:05:27 2026 GMT Not After : Mar 8 07:05:27 2026 GMT Subject: CN=69a3e537-df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:9a:07:c4:72:6d:57:15:86:6f:36:8f:92: 75:0c:98:c5:04:dd:b8:da:c6:5e:d2:46:b4:d6:79: 21:00:9c:75:d8:a3:f0:55:ad:3d:bb:b9:65:b3:2c: 97:7f:53:5c:31:20:46:7d:60:c2:f8:d7:40:64:a9: 71:86:cf:a9:dc:74:05:f5:68:03:a6:26:f3:ad:65: 5f:0d:ce:9f:cb:74:fb:36:6a:a7:82:14:16:7b:a0: 68:7f:e7:38:0c:d4:a6:42:ba:a2:ec:3f:7e:b3:e2: 3d:e6:52:95:27:1c:b4:b5:07:30:1a:8f:ff:37:9a: 04:e9:2d:43:00:86:98:12:af:5b:8f:b7:ff:df:ad: 00:d5:c6:23:93:e7:cd:d1:a8:c6:86:0b:e0:46:d2: cc:27:ef:9b:96:e5:44:c3:af:56:c2:22:02:e4:5f: 35:33:24:4e:7d:29:55:20:42:68:76:85:b1:42:d7: 73:b1:9a:b6:0c:dd:fc:01:65:57:5e:31:c7:7a:3c: f6:fd:88:a0:a3:14:65:5b:9a:66:21:1e:9c:16:c1: 8f:8d:c0:2c:e1:a1:42:0a:a0:da:dc:00:6a:02:4e: a3:c5:f4:6b:80:69:a3:65:e8:b4:6e:1e:bc:2e:81: f8:71:23:c0:81:72:e9:5d:5c:bb:c7:e3:1c:e8:c9: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:5A:CA:59:DE:E5:C7:9B:02:10:24:7D:4A:67:D9:A5:CF:5E:C8 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1a:af:f7:8b:20:5f:09:79:ba:73:9d:0c:8c:2d:cd:0e:9d: 7b:1f:e4:dc:53:80:8d:a2:60:da:d1:6a:ed:05:c0:98:82:56: a7:d5:cb:17:2f:e1:ba:7f:9b:33:96:c6:9a:04:b1:e1:26:aa: 73:6c:02:18:a5:fd:ad:61:c1:59:d3:e3:7b:36:65:6b:4d:27: c4:f8:12:1c:ef:aa:d2:8d:37:ed:58:16:8f:3e:80:dd:1a:15: da:59:5f:d6:19:42:52:e2:2a:ac:53:a2:ce:0b:11:d4:b1:c9: 16:bf:35:a7:fd:ed:0b:c5:69:83:3b:67:5b:82:62:b5:51:ea: e1:ba:df:e1:9f:fb:f6:1b:42:d3:26:ec:1a:98:dc:44:80:7e: 80:ff:c3:c7:83:ef:15:f9:20:ac:e1:fd:c9:e6:d6:40:80:9b: 51:d6:00:31:50:0e:0d:01:90:92:98:4a:fa:8f:f8:e3:1b:a0: ad:6a:f8:55:e0:37:00:95:88:39:7c:ba:e0:c9:82:cd:46:01: f0:fe:6c:1e:6c:0e:94:47:49:c8:ea:2f:3d:4a:82:67:61:5f: f4:8d:8d:73:91:2a:bb:06:ef:7e:06:49:b7:18:27:53:15:9c: 62:d2:6c:72:c4:37:f7:71:02:57:c0:53:46:3e:f6:75:4e:46: a8:cb:80:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjYwMzAxMDcwNTI3WhcNMjYwMzA4MDcwNTI3WjAYMRYwFAYD VQQDEw02OWEzZTUzNy1kZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5iaB8RybVcVhm82j5J1DJjFBN242sZe0ka01nkhAJx12KPwVa09u7llsyyX f1NcMSBGfWDC+NdAZKlxhs+p3HQF9WgDpibzrWVfDc6fy3T7NmqnghQWe6Bof+c4 DNSmQrqi7D9+s+I95lKVJxy0tQcwGo//N5oE6S1DAIaYEq9bj7f/360A1cYjk+fN 0ajGhgvgRtLMJ++bluVEw69WwiIC5F81MyROfSlVIEJodoWxQtdzsZq2DN38AWVX XjHHejz2/YigoxRlW5pmIR6cFsGPjcAs4aFCCqDa3ABqAk6jxfRrgGmjZei0bh68 LoH4cSPAgXLpXVy7x+Mc6Mlj7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwPWspZ 3uXHmwIQJH1KZ9mlz17IMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUhqv94sgXwl5unOdDIwtzQ6dex/k3FOAjaJg2tFq7QXAmIJWp9XLFy/hun+b M5bGmgSx4Saqc2wCGKX9rWHBWdPjezZla00nxPgSHO+q0o037VgWjz6A3RoV2llf 1hlCUuIqrFOizgsR1LHJFr81p/3tC8VpgztnW4JitVHq4brf4Z/79htC0ybsGpjc RIB+gP/Dx4PvFfkgrOH9yebWQICbUdYAMVAODQGQkphK+o/44xugrWr4VeA3AJWI OXy64MmCzUYB8P5sHmwOlEdJyOovPUqCZ2Ff9I2Nc5EquwbvfgZJtxgnUxWcYtJs csQ393ECV8BTRj72dU5GqMuAqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:17:36 2026 by rpki-client