$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: gOsmU7G2AVtBgCUL8UlmfaJnv/okGIlLlyCG4thRZFk= Subject key identifier: F4:A1:A9:C9:85:46:57:72:AE:27:51:0E:8E:E6:4B:A3:39:CB:CF:25 Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: 01A3 Signing time: Fri 17 Apr 2026 03:55:52 +0000 Manifest this update: Fri 17 Apr 2026 03:55:51 +0000 Manifest next update: Fri 24 Apr 2026 03:55:51 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: zaIulr0coGUz08cNbpWbMkWPWFauS2uHldznlrK9pVs=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: s2McCJvzrvLO2L5m921n+BYOsXPsp44AliQovvr+vWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: Apr 17 03:55:51 2026 GMT Not After : Apr 24 03:55:51 2026 GMT Subject: CN=69e1af48-2b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:f6:ab:90:fb:02:d7:e5:5a:f9:02:a7:68: 48:0a:40:a8:fc:73:fb:50:6e:c9:f6:40:6c:12:09: 93:5c:f3:50:c7:16:cb:c2:83:49:2d:bc:e3:c0:1e: a5:11:78:2f:cd:d9:73:2a:12:27:2c:4e:50:41:e8: a0:30:ad:ff:eb:1b:4b:7f:03:d9:f7:4c:06:f8:af: 83:83:cb:f8:54:25:92:06:ba:8c:9d:72:59:8a:72: d9:cb:76:23:e9:55:dd:53:06:04:9f:d1:13:99:68: e7:24:91:cc:ae:df:bf:24:ce:39:3c:fa:e0:91:aa: 70:09:60:f7:ba:41:cd:36:19:1d:bb:3b:e3:ad:d2: 45:72:c6:03:1a:93:35:4c:bb:10:ff:fa:f3:91:a5: ab:6a:be:d5:c2:f5:53:52:46:82:bb:f2:8f:db:a5: 4f:5d:9c:3e:ea:cb:57:7d:21:4a:c6:28:e8:69:54: fc:50:25:e2:c4:d0:bf:34:b3:be:8d:c9:ca:83:5e: 7c:2d:45:11:56:5f:d1:44:2a:6a:23:a3:80:38:29: cb:63:aa:74:50:3a:5c:e7:5b:2b:f4:b2:a8:f3:72: 2a:2c:13:d0:26:8b:ac:e9:56:b4:d8:89:75:d6:a7: fb:28:c3:09:c2:4d:60:42:ad:0a:20:de:a6:3f:b1: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A1:A9:C9:85:46:57:72:AE:27:51:0E:8E:E6:4B:A3:39:CB:CF:25 X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:71:0c:01:41:0e:1e:68:a3:31:ba:a8:27:4a:66:9a:65:85: 66:44:44:c4:aa:22:c3:8f:20:b7:5d:26:cd:02:01:05:27:4a: b9:dd:b9:3f:4b:d3:1c:fd:e0:4f:c5:90:51:b2:28:36:db:7b: a3:c5:8b:f5:7e:a3:17:49:38:a7:ac:76:a8:d7:24:08:1f:66: db:47:52:95:28:69:f7:20:19:14:53:6e:ac:5d:d6:86:0e:16: 8e:f2:0e:b5:96:65:3f:72:c7:e1:fc:a5:b4:8f:71:f1:ae:4d: 2e:e8:6c:e6:39:64:64:25:ef:83:0f:95:61:02:e5:db:1d:26: 12:e3:19:db:79:b1:e7:44:9c:b6:2f:c3:42:b9:df:9d:65:89: 56:0f:1d:73:56:1c:9b:67:d4:68:f0:00:54:38:af:4d:87:82: 36:98:e6:94:36:36:30:38:04:a8:a2:8b:7c:3f:f6:94:23:c4: 57:42:64:8e:7a:47:d2:b3:a0:71:41:70:a9:81:50:29:96:6e: ba:a0:c3:83:90:6c:76:05:6f:8e:2b:24:ab:c8:65:5e:15:69: 95:0a:74:5e:5e:16:df:c7:40:ed:38:5c:76:5e:06:40:77:6b: 1d:f1:b7:c1:f2:03:8d:91:b5:a0:4c:86:ae:3c:15:fa:e7:20: f7:0b:92:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2 MkUzN0E4Q0QwHhcNMjYwNDE3MDM1NTUxWhcNMjYwNDI0MDM1NTUxWjAYMRYwFAYD VQQDEw02OWUxYWY0OC0yYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEb2q5D7AtflWvkCp2hICkCo/HP7UG7J9kBsEgmTXPNQxxbLwoNJLbzjwB6l EXgvzdlzKhInLE5QQeigMK3/6xtLfwPZ90wG+K+Dg8v4VCWSBrqMnXJZinLZy3Yj 6VXdUwYEn9ETmWjnJJHMrt+/JM45PPrgkapwCWD3ukHNNhkduzvjrdJFcsYDGpM1 TLsQ//rzkaWrar7VwvVTUkaCu/KP26VPXZw+6stXfSFKxijoaVT8UCXixNC/NLO+ jcnKg158LUURVl/RRCpqI6OAOCnLY6p0UDpc51sr9LKo83IqLBPQJous6Va02Il1 1qf7KMMJwk1gQq0KIN6mP7GG6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPShqcmF RldyridRDo7mS6M5y88lMB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL WDZrdnhPdGRMdDVpNDNxTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3EMAUEOHmijMbqoJ0pmmmWFZkRExKoiw48gt10mzQIBBSdKud25P0vTHP3g T8WQUbIoNtt7o8WL9X6jF0k4p6x2qNckCB9m20dSlShp9yAZFFNurF3Whg4WjvIO tZZlP3LH4fyltI9x8a5NLuhs5jlkZCXvgw+VYQLl2x0mEuMZ23mx50Scti/DQrnf nWWJVg8dc1Ycm2fUaPAAVDivTYeCNpjmlDY2MDgEqKKLfD/2lCPEV0JkjnpH0rOg cUFwqYFQKZZuuqDDg5BsdgVvjiskq8hlXhVplQp0Xl4W38dA7Thcdl4GQHdrHfG3 wfIDjZG1oEyGrjwV+ucg9wuSIg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:44 2026 by rpki-client