$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: RjhPOC6+SWZQjpbrouJQnTPjHQeM+xsFDF6FR5N8Ios= Subject key identifier: 20:43:01:46:D8:D9:EB:00:BC:75:DE:B5:9B:ED:0A:11:DC:A9:C5:37 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 354D Signing time: Mon 02 Mar 2026 00:11:20 +0000 Manifest this update: Mon 02 Mar 2026 00:11:18 +0000 Manifest next update: Mon 09 Mar 2026 00:11:18 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: 0f+TOerJ8qpQOe5YpetjaxW00IyTgd3JXPpZMzCD85I=) 2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=) 3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=) 4: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13700 (0x3584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Mar 2 00:11:18 2026 GMT Not After : Mar 9 00:11:18 2026 GMT Subject: CN=69a4d5a7-7b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:6f:cb:d7:5d:6b:6c:1b:7e:fd:0c:29:9a: df:90:e9:23:47:c5:79:08:72:d7:53:4f:8c:0a:27: 5f:b3:fa:a5:fa:fc:86:a8:eb:7a:62:7f:f6:af:86: 46:51:1d:7e:fd:24:54:10:ee:c8:2f:ee:74:30:5f: 96:6b:b4:6d:44:5e:17:ce:d0:28:68:55:79:98:c2: 80:b5:ae:06:59:b5:99:5f:98:45:d1:1c:c9:f4:c5: 1d:be:5d:0f:d0:f5:d8:d7:8f:3f:32:eb:ea:7d:3c: 03:86:19:49:f9:a5:65:41:39:1a:13:1c:40:ff:32: f4:63:a7:e9:b6:56:9d:31:ec:96:43:26:0d:a1:25: 92:0b:3b:39:29:4d:5b:6d:d0:d3:08:2b:c4:11:c4: 53:8f:f9:fc:c4:84:0d:cc:65:2a:16:a8:2c:f6:da: e8:5d:71:b4:87:2d:76:5c:b9:01:01:15:2d:3f:fd: ab:13:76:02:94:2b:9a:1b:43:0c:7c:3b:67:2a:35: eb:1d:ec:8d:cd:c7:88:df:e5:1f:bb:ec:d8:b3:b1: 55:a0:5b:52:30:49:c2:28:93:fd:85:8a:21:56:26: a7:6f:d4:50:01:da:67:6c:d5:08:ed:14:e1:ac:41: c8:0a:d0:df:f0:24:cd:9f:a5:e4:70:ea:ce:c1:ef: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:01:46:D8:D9:EB:00:BC:75:DE:B5:9B:ED:0A:11:DC:A9:C5:37 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:44:5a:f4:6d:d1:23:01:7e:00:b7:23:37:04:4b:b2:fa:b1: 6d:4d:e7:bf:f8:e9:5d:dd:17:5d:ec:7e:f5:0e:70:67:b5:8f: 3e:1a:e0:73:52:04:cb:c7:8a:07:74:1c:91:f1:5c:a6:09:e6: 8e:ab:a5:d9:4a:5f:df:84:ef:9b:2b:60:d5:c8:34:df:86:83: a4:bd:7d:17:8a:74:7b:76:d3:0d:87:bd:32:15:63:df:e6:45: 08:93:6c:35:67:90:04:2a:7a:0f:85:4d:a2:7f:f9:fb:2f:8b: 76:83:2c:26:cc:cf:ee:35:f8:53:74:f8:59:3a:8c:37:35:87: 9d:33:df:bc:ed:d2:d8:92:05:50:7c:e9:35:d0:56:e8:93:ef: 4d:46:58:c7:b7:7f:fc:58:39:2f:fb:22:87:87:02:07:4f:bc: 39:6d:58:69:e2:c4:3d:c7:37:90:ef:be:db:7d:fc:d5:cb:32: 0c:d8:17:91:db:78:c2:67:97:8f:c2:38:b1:ff:48:26:6d:7d: 5e:a3:96:b7:b4:c2:92:9b:de:eb:d0:6f:64:fc:00:3e:3b:5c: 18:33:6e:36:84:be:52:1c:60:b7:04:45:5d:41:b1:a9:38:3d: d6:83:37:22:6c:f7:e4:f2:71:1c:7b:2d:cb:74:0b:a3:5c:91: 48:10:46:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjYwMzAyMDAxMTE4WhcNMjYwMzA5MDAxMTE4WjAYMRYwFAYD VQQDEw02OWE0ZDVhNy03YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlypvy9dda2wbfv0MKZrfkOkjR8V5CHLXU0+MCidfs/ql+vyGqOt6Yn/2r4ZG UR1+/SRUEO7IL+50MF+Wa7RtRF4XztAoaFV5mMKAta4GWbWZX5hF0RzJ9MUdvl0P 0PXY148/MuvqfTwDhhlJ+aVlQTkaExxA/zL0Y6fptladMeyWQyYNoSWSCzs5KU1b bdDTCCvEEcRTj/n8xIQNzGUqFqgs9troXXG0hy12XLkBARUtP/2rE3YClCuaG0MM fDtnKjXrHeyNzceI3+Ufu+zYs7FVoFtSMEnCKJP9hYohVianb9RQAdpnbNUI7RTh rEHICtDf8CTNn6XkcOrOwe+4nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBDAUbY 2esAvHXetZvtChHcqcU3MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnERa9G3RIwF+ALcjNwRLsvqxbU3nv/jpXd0XXex+9Q5wZ7WPPhrgc1IEy8eK B3QckfFcpgnmjqul2Upf34Tvmytg1cg034aDpL19F4p0e3bTDYe9MhVj3+ZFCJNs NWeQBCp6D4VNon/5+y+LdoMsJszP7jX4U3T4WTqMNzWHnTPfvO3S2JIFUHzpNdBW 6JPvTUZYx7d//Fg5L/sih4cCB0+8OW1YaeLEPcc3kO++23381csyDNgXkdt4wmeX j8I4sf9IJm19XqOWt7TCkpve69BvZPwAPjtcGDNuNoS+UhxgtwRFXUGxqTg91oM3 Imz35PJxHHsty3QLo1yRSBBG9Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:13 2026 by rpki-client