$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: pbVNnLm8EUQ8gPCouPn0MU3Ufmnf3lH9NLMFc1Elo7Y= Subject key identifier: F6:94:97:97:82:E6:F3:2A:BA:DB:59:B3:77:55:DD:AD:5A:45:FD:19 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 01A8 Signing time: Fri 17 Apr 2026 03:50:18 +0000 Manifest this update: Fri 17 Apr 2026 03:50:18 +0000 Manifest next update: Fri 24 Apr 2026 03:50:18 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: JLQDzIMKSqpZ8eWgJ7aRJqfAlbpd7SNYdUM4sFgXiHg=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Apr 17 03:50:18 2026 GMT Not After : Apr 24 03:50:18 2026 GMT Subject: CN=69e1adfa-c056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:80:19:64:9f:e3:79:85:b0:2b:24:29:c6: 8d:d6:15:60:2a:a6:46:b2:ab:c2:84:0d:bb:77:20: d8:87:a3:9f:01:bc:4f:95:f8:cd:f0:d2:07:96:59: 4e:0c:fd:4b:9f:0b:35:d7:d2:8e:62:28:fd:2c:bf: fa:c5:d9:a4:b9:38:0a:8e:0a:7f:8f:7c:49:5f:4f: de:b4:99:ad:a1:35:f7:d1:cd:3d:66:ab:eb:e0:0f: 2b:ef:8c:47:2f:a5:1c:49:71:b4:a0:1c:82:e8:4f: e0:46:93:75:fb:0c:ae:e1:b2:e6:be:18:86:6d:8e: f9:9b:2e:a8:50:07:a2:01:aa:43:0b:3b:67:ee:7a: 42:67:44:0e:a3:4c:a3:59:17:7a:9d:26:01:d0:9d: df:4b:0b:41:8b:a3:ef:e5:fd:c1:a8:94:58:a8:42: 77:cd:f1:f2:c2:e5:8f:a7:c5:d0:19:66:5f:6e:f8: 6e:32:b8:be:e5:22:9f:9c:49:64:00:98:0a:01:13: 9f:3b:31:09:15:8a:23:34:07:93:20:7c:e6:4d:f1: 2c:c1:3b:a1:21:06:50:24:a8:37:eb:0d:b2:ef:a5: 8f:ca:c2:c4:9f:69:e9:cd:6b:80:18:97:45:16:ed: fc:3f:50:30:f6:55:73:b3:33:e8:86:32:6b:4c:3a: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:94:97:97:82:E6:F3:2A:BA:DB:59:B3:77:55:DD:AD:5A:45:FD:19 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:ad:d2:dc:05:41:08:4f:2a:34:87:0b:f5:64:56:45:2c: 9e:eb:b3:9f:31:6c:2f:bf:29:9d:de:11:4b:3c:dc:a9:69:1a: e6:df:78:67:5a:d5:69:f2:e7:29:45:bd:40:f0:f3:73:99:bd: a8:d5:4b:82:64:95:b9:77:ae:6a:c6:89:f3:25:e5:59:57:51: e0:80:b1:2b:5b:63:f8:68:5b:f4:ae:a0:3f:67:67:58:52:88: cf:1e:37:75:73:0a:e7:04:60:2c:a1:e0:40:d9:ef:0b:a9:a4: 2e:cb:32:2b:40:51:fe:78:52:99:92:99:cd:dd:05:16:11:5b: 04:27:15:05:64:b4:5a:c0:d6:d4:d4:db:bb:28:94:5e:87:c7: 34:da:e7:33:0f:64:99:7f:b7:15:df:58:54:d3:55:d0:7b:e3: 65:b9:87:31:31:34:49:d5:c4:ce:30:06:8b:a9:c1:a6:ed:f0: 4a:fe:c5:9b:7e:56:fa:15:30:b4:e4:1d:86:fc:60:12:20:4f: 80:93:9a:0f:18:8c:a5:d1:9e:7d:b2:c9:a8:e7:42:47:13:fd: 61:a5:83:bd:61:4f:e0:0c:97:17:cb:e1:c8:0c:36:ab:fe:ce: 49:82:e1:0f:48:ec:3a:45:f8:c8:80:75:4c:ee:88:4e:4f:5f: f7:0c:c1:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjYwNDE3MDM1MDE4WhcNMjYwNDI0MDM1MDE4WjAYMRYwFAYD VQQDEw02OWUxYWRmYS1jMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBOAGWSf43mFsCskKcaN1hVgKqZGsqvChA27dyDYh6OfAbxPlfjN8NIHlllO DP1Lnws119KOYij9LL/6xdmkuTgKjgp/j3xJX0/etJmtoTX30c09Zqvr4A8r74xH L6UcSXG0oByC6E/gRpN1+wyu4bLmvhiGbY75my6oUAeiAapDCztn7npCZ0QOo0yj WRd6nSYB0J3fSwtBi6Pv5f3BqJRYqEJ3zfHywuWPp8XQGWZfbvhuMri+5SKfnElk AJgKAROfOzEJFYojNAeTIHzmTfEswTuhIQZQJKg36w2y76WPysLEn2npzWuAGJdF Fu38P1Aw9lVzszPohjJrTDqQPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaUl5eC 5vMquttZs3dV3a1aRf0ZMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnjKt0twFQQhPKjSHC/VkVkUsnuuznzFsL78pnd4RSzzcqWka5t94Z1rVafLn KUW9QPDzc5m9qNVLgmSVuXeuasaJ8yXlWVdR4ICxK1tj+Ghb9K6gP2dnWFKIzx43 dXMK5wRgLKHgQNnvC6mkLssyK0BR/nhSmZKZzd0FFhFbBCcVBWS0WsDW1NTbuyiU XofHNNrnMw9kmX+3Fd9YVNNV0HvjZbmHMTE0SdXEzjAGi6nBpu3wSv7Fm35W+hUw tOQdhvxgEiBPgJOaDxiMpdGefbLJqOdCRxP9YaWDvWFP4AyXF8vhyAw2q/7OSYLh D0jsOkX4yIB1TO6ITk9f9wzBRg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:48 2026 by rpki-client