$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: K02wH/2v3HxRoLGdjMZUsGZ2P8jQTHUddzTdilTIVXo= Subject key identifier: 43:C6:5E:8A:94:7D:31:65:09:64:3D:AF:06:2C:DB:5F:54:B2:7A:11 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0CFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0CEF Signing time: Mon 02 Mar 2026 18:06:34 +0000 Manifest this update: Mon 02 Mar 2026 18:06:34 +0000 Manifest next update: Mon 09 Mar 2026 18:06:34 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: 6GsMaaC6CogfQQbzgM5UGUCEEuSPJoRGZOuU6Xv3RbM=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3322 (0xcfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Mar 2 18:06:34 2026 GMT Not After : Mar 9 18:06:34 2026 GMT Subject: CN=69a5d1aa-33d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:3a:64:63:eb:6c:03:d6:7c:d4:ca:b8:0d: 4c:73:cf:2f:ea:3b:76:21:e8:59:98:a6:63:10:95: 7e:ff:7e:a7:aa:92:56:78:8f:da:b1:3d:8b:ea:f0: 0d:b5:30:44:44:69:ee:25:5d:49:fb:d2:b4:83:50: 28:02:07:12:17:62:58:41:a0:8b:11:cd:65:9d:20: dd:39:ff:10:3d:55:16:6b:fe:50:bb:8e:85:9d:13: aa:c1:18:ad:72:60:5f:27:63:97:5d:53:35:6c:ba: 49:a5:c5:8f:bb:51:77:f1:79:a3:e9:34:e2:82:5a: d0:6f:3d:ac:42:c3:ee:e5:25:30:56:2c:cb:bf:d4: d4:84:04:87:9e:cf:d7:c7:fc:47:2a:86:d8:0e:09: fe:58:4c:e3:7d:d1:fb:02:06:93:86:c3:c7:d5:3d: d7:d3:02:33:cf:8f:52:a9:b4:03:46:84:ad:0e:ac: af:eb:a8:99:bc:e1:d2:c5:7e:5f:6f:9a:63:89:da: 1f:53:25:19:66:0d:8e:2d:1f:0b:e1:a2:28:37:3f: ef:b0:fa:9d:af:06:11:cc:82:45:bb:53:4c:b4:35: 39:0b:dc:16:98:e5:3a:c7:b9:bb:f1:e4:8f:f9:60: 39:14:f3:5f:3d:33:bb:ea:cd:92:6f:f2:1a:d9:3e: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:5E:8A:94:7D:31:65:09:64:3D:AF:06:2C:DB:5F:54:B2:7A:11 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ad:0e:73:23:c4:a0:60:1e:2d:87:15:53:47:4d:76:43:ef: 49:11:6d:a9:d0:6f:fd:e7:68:f3:1b:f1:31:fb:ec:e3:b3:06: 5a:40:11:55:3e:d5:2c:4c:29:bb:7a:a3:12:1e:af:bf:9c:f0: 89:be:48:95:4f:f2:e2:fb:0d:60:45:f1:77:ce:7b:ba:b3:9d: a2:02:15:1f:cc:17:86:5b:66:f0:0f:53:e4:f5:1b:f5:c1:74: 36:09:a5:2e:64:f6:a5:82:d1:15:7f:4d:ff:8c:9f:f7:05:1b: 68:09:be:31:ba:1e:d0:d7:b7:b4:71:d1:c3:b4:25:de:59:85: 42:66:b5:73:45:59:61:9a:78:36:e4:9f:bf:13:89:67:28:10: 64:b3:a1:a4:b2:02:fe:71:46:f5:97:e9:96:44:09:77:ee:37: ba:00:b5:bf:77:b6:f8:8d:de:84:72:2b:a9:e6:23:3c:5a:2f: 37:cb:08:5a:20:ea:b3:f3:24:12:e0:31:cc:2a:68:29:9b:fd: d7:0c:4a:7e:5e:84:20:a3:7b:ce:3a:6a:f9:25:51:da:9b:b4: 5a:1f:40:9d:d3:30:39:10:0f:6d:1f:23:0d:75:57:16:81:65: dc:4d:ab:3f:04:a8:ca:34:f5:6b:1e:bf:68:24:e5:8b:45:b6: a7:2e:96:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwMzAyMTgwNjM0WhcNMjYwMzA5MTgwNjM0WjAYMRYwFAYD VQQDEw02OWE1ZDFhYS0zM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHc6ZGPrbAPWfNTKuA1Mc88v6jt2IehZmKZjEJV+/36nqpJWeI/asT2L6vAN tTBERGnuJV1J+9K0g1AoAgcSF2JYQaCLEc1lnSDdOf8QPVUWa/5Qu46FnROqwRit cmBfJ2OXXVM1bLpJpcWPu1F38Xmj6TTiglrQbz2sQsPu5SUwVizLv9TUhASHns/X x/xHKobYDgn+WEzjfdH7AgaThsPH1T3X0wIzz49SqbQDRoStDqyv66iZvOHSxX5f b5pjidofUyUZZg2OLR8L4aIoNz/vsPqdrwYRzIJFu1NMtDU5C9wWmOU6x7m78eSP +WA5FPNfPTO76s2Sb/Ia2T5HkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPGXoqU fTFlCWQ9rwYs219UsnoRMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD60OcyPEoGAeLYcVU0dNdkPvSRFtqdBv/edo8xvxMfvs47MGWkARVT7VLEwp u3qjEh6vv5zwib5IlU/y4vsNYEXxd857urOdogIVH8wXhltm8A9T5PUb9cF0Ngml LmT2pYLRFX9N/4yf9wUbaAm+Mboe0Ne3tHHRw7Ql3lmFQma1c0VZYZp4NuSfvxOJ ZygQZLOhpLIC/nFG9ZfplkQJd+43ugC1v3e2+I3ehHIrqeYjPFovN8sIWiDqs/Mk EuAxzCpoKZv91wxKfl6EIKN7zjpq+SVR2pu0Wh9AndMwORAPbR8jDXVXFoFl3E2r PwSoyjT1ax6/aCTli0W2py6Wag== -----END CERTIFICATE-----Generated at Mon Mar 2 23:56:28 2026 by rpki-client