$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: q2DdTIZpEbV7MWRjJqs1fPfiEl5l+V1ybTqE4K4LdWY= Subject key identifier: 05:A9:D3:DE:20:3B:F0:10:CF:D8:B9:FF:F3:7A:49:E1:71:DE:5B:D7 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0D06 Signing time: Thu 16 Apr 2026 18:03:32 +0000 Manifest this update: Thu 16 Apr 2026 18:03:31 +0000 Manifest next update: Thu 23 Apr 2026 18:03:31 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: BKZOG5/7M8Ek2kDW30lsgu5lhmUw7iKHaxyXk8lhQ2A=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Apr 16 18:03:31 2026 GMT Not After : Apr 23 18:03:31 2026 GMT Subject: CN=69e12473-5a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:42:cc:ff:b3:79:c4:00:87:2c:99:a9:f8: 9b:66:e0:b3:4a:2c:f3:76:db:d1:d8:fe:a7:69:e5: 48:d7:60:46:1f:15:7b:82:f5:2c:63:ea:24:27:84: 90:5b:da:4a:c8:b1:23:8a:b6:e0:cf:e1:45:e1:2b: a0:7a:da:96:99:aa:55:d2:69:58:56:d2:45:23:cc: 29:e3:38:6d:a1:76:dc:16:5e:f1:66:db:7f:70:02: 3a:9c:50:93:20:64:ca:98:b4:c0:1c:25:e6:88:9a: 72:62:e3:93:a4:a8:5d:d3:74:ce:af:6b:92:4c:db: 38:d3:7e:f7:58:0c:5a:9a:e1:b2:ec:ad:8a:d2:c6: d3:2e:39:be:9f:71:f0:b0:02:f2:fe:1d:d0:a0:f0: f7:10:17:8c:70:c3:aa:ec:b2:ef:28:ad:1e:42:28: b7:75:07:6c:c8:76:a3:aa:e5:cb:49:61:4a:63:92: f9:51:7e:c9:a5:ec:4c:bc:14:fb:4b:31:c3:20:a1: 80:3c:ee:c0:f9:90:15:8f:6f:13:3c:1d:09:be:75: 2e:e9:b8:95:70:22:47:a8:35:fc:75:20:be:a6:d7: 48:45:37:47:74:5c:96:ac:40:8e:92:fa:fd:84:22: 5c:b0:d7:bd:c9:39:29:31:cc:79:3d:75:c7:60:14: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:D3:DE:20:3B:F0:10:CF:D8:B9:FF:F3:7A:49:E1:71:DE:5B:D7 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:37:bd:b9:75:53:3c:ec:e6:63:e5:f5:35:7f:44:87:ce:a1: bf:5e:79:df:99:8b:5b:db:22:c7:ee:d7:56:11:a0:0a:28:a5: df:b4:ec:31:79:88:98:ca:3e:08:94:37:ba:f4:e9:99:68:d8: 4a:24:17:82:a5:d2:0e:20:d1:4a:c4:2c:96:3b:fe:b7:9f:90: ed:49:fe:df:09:5d:88:4f:78:63:89:89:95:32:36:f1:3e:09: 97:1a:eb:bb:2a:66:90:4d:61:ff:63:bc:06:75:38:c9:de:c1: 61:6d:83:8b:d2:75:68:c6:be:a6:e2:7b:d2:0c:c1:b8:64:a0: 5a:a2:6f:11:33:bb:29:fb:5c:30:9e:4b:84:1a:ad:12:81:be: f8:94:65:2a:40:44:25:11:ae:d6:cc:34:66:ca:b7:1f:fc:a0: 40:50:4b:e1:76:47:28:a9:02:f4:75:96:1b:b1:35:e5:77:56: 62:39:6b:ce:c7:a2:38:20:e0:de:39:3c:99:07:6b:fc:4d:c6: d8:03:da:82:95:5c:05:58:fd:61:81:d6:c6:47:c3:91:17:78: 55:bd:f4:2a:30:9f:c1:3c:fc:10:89:60:d1:0f:26:09:cf:68: 5c:24:06:d9:00:20:40:ff:36:49:68:88:33:da:04:8f:45:20: d2:08:00:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwNDE2MTgwMzMxWhcNMjYwNDIzMTgwMzMxWjAYMRYwFAYD VQQDEw02OWUxMjQ3My01YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlZCzP+zecQAhyyZqfibZuCzSizzdtvR2P6naeVI12BGHxV7gvUsY+okJ4SQ W9pKyLEjirbgz+FF4SugetqWmapV0mlYVtJFI8wp4zhtoXbcFl7xZtt/cAI6nFCT IGTKmLTAHCXmiJpyYuOTpKhd03TOr2uSTNs40373WAxamuGy7K2K0sbTLjm+n3Hw sALy/h3QoPD3EBeMcMOq7LLvKK0eQii3dQdsyHajquXLSWFKY5L5UX7JpexMvBT7 SzHDIKGAPO7A+ZAVj28TPB0JvnUu6biVcCJHqDX8dSC+ptdIRTdHdFyWrECOkvr9 hCJcsNe9yTkpMcx5PXXHYBTkPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWp094g O/AQz9i5//N6SeFx3lvXMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTe9uXVTPOzmY+X1NX9Eh86hv15535mLW9six+7XVhGgCiil37TsMXmImMo+ CJQ3uvTpmWjYSiQXgqXSDiDRSsQsljv+t5+Q7Un+3wldiE94Y4mJlTI28T4Jlxrr uypmkE1h/2O8BnU4yd7BYW2Di9J1aMa+puJ70gzBuGSgWqJvETO7KftcMJ5LhBqt EoG++JRlKkBEJRGu1sw0Zsq3H/ygQFBL4XZHKKkC9HWWG7E15XdWYjlrzseiOCDg 3jk8mQdr/E3G2APagpVcBVj9YYHWxkfDkRd4Vb30KjCfwTz8EIlg0Q8mCc9oXCQG 2QAgQP82SWiIM9oEj0Ug0ggAyw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:16 2026 by rpki-client