$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: K7xHEBfxyIo/aLaoZ/EJc1BT9V/j8vKOcTHvkBmtefY= Subject key identifier: E9:AC:C7:52:FD:BF:CD:88:C2:BB:9D:22:64:6C:9A:94:7D:E9:2F:EE Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 026C Signing time: Mon 02 Mar 2026 01:08:51 +0000 Manifest this update: Mon 02 Mar 2026 01:08:49 +0000 Manifest next update: Mon 09 Mar 2026 01:08:49 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: num4/qLBkJ6qxtZ4zGF8XJnUaecWD9iwFThsumVxH28=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: ByTjShjzlXNDkMN69/J18p3VnbTj5vjjzwheoKvtWG4=) 3: 232F9552F80D11F0AED4E007706F56BC.roa (hash: 1VQhLb/1DZcPUazmrGPc7TJ13JYFfVY10cAzsAWEN8k=) 4: 05F505961AA311F0A475D464C4F9AE02.roa (hash: xZbkhabGis/U5mUU9RekGm8eUQ6rFKaSmoEBRgqnHq8=) 5: 020607A2498711EFBB260663C4F9AE02.roa (hash: NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Mar 2 01:08:49 2026 GMT Not After : Mar 9 01:08:49 2026 GMT Subject: CN=69a4e323-35f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b0:91:19:16:d9:d8:d7:df:0d:89:d6:ca:e6: f2:b4:fa:8a:78:9e:bc:02:10:e6:89:09:83:1f:5f: 47:12:29:32:25:80:ab:10:ac:d4:1c:8a:7e:36:7e: 47:59:8c:03:2a:b3:3c:21:01:7a:b2:04:e8:5f:fb: 09:b3:94:2d:c5:9e:14:ad:b5:c7:07:42:bd:a0:9b: 8e:4c:fb:2f:73:8c:2f:f6:7d:e5:be:1e:ce:f5:67: 67:6a:9c:63:93:4a:d8:02:fa:7b:0e:bc:82:32:63: 4f:67:25:ec:ee:7a:d5:c7:40:3a:6b:d3:4c:be:74: 62:6f:7d:b0:de:66:e2:a2:77:8d:10:d2:31:e5:93: b0:a2:b1:3f:31:e5:07:40:ed:b6:70:3f:3c:e9:f5: 81:8c:da:ee:e6:6d:96:b5:37:7e:c6:5c:b2:81:7d: 4b:1a:2a:fc:02:c0:53:e4:22:f4:75:e2:a4:58:40: 18:98:d4:1e:6c:ad:e1:39:03:60:5c:a1:5b:11:df: dc:3f:4c:97:07:39:bd:49:9b:c4:e7:6c:24:c4:19: f5:06:3b:1c:39:73:11:f7:9b:b7:c7:55:65:e7:6a: ad:f5:f1:f7:d1:fc:14:5c:a5:57:9e:33:e5:25:be: 00:4d:eb:dc:77:5b:08:f4:aa:b1:f0:5c:e3:b3:65: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:C7:52:FD:BF:CD:88:C2:BB:9D:22:64:6C:9A:94:7D:E9:2F:EE X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1e:d8:5f:c3:2e:74:65:75:03:0c:2b:e3:62:80:de:25:be: d1:f0:89:65:cd:06:4b:f5:d3:68:ff:17:e4:13:d7:df:4d:43: 74:cd:25:11:72:6c:6d:c8:c3:56:54:38:34:c8:b8:df:f4:3b: 17:3f:43:d6:bb:30:76:3a:9b:b0:b9:32:8e:76:40:fe:f7:45: 8f:92:40:05:9d:78:23:35:6f:50:1d:6e:6b:07:1b:be:5b:c3: 83:88:37:b9:ea:51:0a:66:c2:03:6a:ea:c9:60:0e:11:b5:cb: a8:2a:62:5b:c9:45:31:bd:57:d2:91:15:39:f9:8c:e3:31:e1: bb:5d:25:ea:0e:a5:bb:e5:a6:d0:2d:97:a6:0d:93:7b:d9:80: 84:83:6b:8b:45:98:d3:b2:90:6e:85:64:32:a4:6b:8c:c1:49: 79:d6:a2:a6:5e:7a:a8:d8:aa:7b:db:94:03:b4:45:36:5d:a3: b8:5d:49:07:47:25:74:7d:35:0d:96:c7:e9:99:d2:0d:de:5a: a9:7c:fc:94:bc:f8:f2:68:89:21:ce:83:ed:ab:59:fe:cd:89: 76:0f:3f:98:af:ef:9a:22:a1:55:ff:93:78:3b:c7:72:a9:8d: 49:7f:0a:49:21:a9:3d:23:28:71:bf:ba:4b:d6:b3:51:19:38: 14:44:fc:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwMzAyMDEwODQ5WhcNMjYwMzA5MDEwODQ5WjAYMRYwFAYD VQQDEw02OWE0ZTMyMy0zNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rCRGRbZ2NffDYnWyubytPqKeJ68AhDmiQmDH19HEikyJYCrEKzUHIp+Nn5H WYwDKrM8IQF6sgToX/sJs5QtxZ4UrbXHB0K9oJuOTPsvc4wv9n3lvh7O9Wdnapxj k0rYAvp7DryCMmNPZyXs7nrVx0A6a9NMvnRib32w3mbioneNENIx5ZOworE/MeUH QO22cD886fWBjNru5m2WtTd+xlyygX1LGir8AsBT5CL0deKkWEAYmNQebK3hOQNg XKFbEd/cP0yXBzm9SZvE52wkxBn1BjscOXMR95u3x1Vl52qt9fH30fwUXKVXnjPl Jb4ATevcd1sI9Kqx8Fzjs2V3vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmsx1L9 v82IwrudImRsmpR96S/uMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACh7YX8MudGV1Awwr42KA3iW+0fCJZc0GS/XTaP8X5BPX301DdM0lEXJsbcjD VlQ4NMi43/Q7Fz9D1rswdjqbsLkyjnZA/vdFj5JABZ14IzVvUB1uawcbvlvDg4g3 uepRCmbCA2rqyWAOEbXLqCpiW8lFMb1X0pEVOfmM4zHhu10l6g6lu+Wm0C2Xpg2T e9mAhINri0WY07KQboVkMqRrjMFJedaipl56qNiqe9uUA7RFNl2juF1JB0cldH01 DZbH6ZnSDd5aqXz8lLz48miJIc6D7atZ/s2Jdg8/mK/vmiKhVf+TeDvHcqmNSX8K SSGpPSMocb+6S9azURk4FET8kQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:19:58 2026 by rpki-client