$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: 6M4UI3/T77bX3b3ubkzjnwf27r7VpYOA3CdwuyjSWrM= Subject key identifier: 56:FB:C8:0D:B3:E3:06:5D:63:5C:49:8E:F9:69:CA:A4:26:2D:F7:04 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0CD4 Signing time: Thu 16 Apr 2026 18:17:54 +0000 Manifest this update: Thu 16 Apr 2026 18:17:54 +0000 Manifest next update: Thu 23 Apr 2026 18:17:54 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: fCZeI9l1e9QSTzQ271k6Tx22pnZsLE30iIBF3KBO28o=) 2: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: OtV6b8befwkPsOuYarHGh5SRZOjkzLz1qANk490i9b8=) 3: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: PLVzOLnz/S3yAyLEYTQXk6jeemE0Coa5Zb4ZLWaW+pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Apr 16 18:17:54 2026 GMT Not After : Apr 23 18:17:54 2026 GMT Subject: CN=69e127d2-d36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:2d:bf:8f:f7:ef:06:49:6c:31:01:50:6f: 2a:9f:c5:2c:12:b8:c0:e0:e0:34:6f:96:04:11:e6: ce:4d:cd:0f:c1:0b:a2:a2:09:82:54:9f:22:28:00: a4:79:0a:e3:77:de:c6:85:81:b3:38:eb:7b:2b:93: 3c:d0:9c:ee:0c:b2:40:cf:38:ae:e6:c9:93:ce:7a: 1c:90:a2:68:86:c8:3b:ca:cd:d7:7c:38:ca:02:c5: fd:4e:dc:ae:79:6c:e2:ce:fe:c3:68:d2:f9:25:35: 23:84:7d:df:d4:60:ef:11:2e:82:89:0f:c2:2a:58: 61:09:d9:38:b9:9a:c4:a9:2a:78:e6:d4:7c:4c:59: e5:28:98:d1:d0:3c:2c:77:17:a3:5d:af:4a:e9:1d: de:52:f6:27:47:ad:c3:29:f3:44:5a:2b:b8:6c:3f: 47:a9:e8:e9:f7:79:97:2a:e2:3a:a2:af:ab:c9:15: cf:0a:75:2b:32:53:27:d9:4f:e5:b3:07:0e:6e:4e: 14:d9:e7:6d:36:4e:82:93:bf:c2:4c:65:11:d9:a0: c8:aa:73:9e:f3:55:8e:3b:9d:5c:50:51:62:97:df: 02:6b:67:1c:4c:6a:db:87:74:30:3f:27:a2:53:de: 31:fe:1e:5c:c9:d5:99:de:3e:19:38:6c:b6:b3:d6: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:C8:0D:B3:E3:06:5D:63:5C:49:8E:F9:69:CA:A4:26:2D:F7:04 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:31:da:a7:4a:89:d0:25:63:2b:53:d2:c5:41:1c:a3:40: a2:3e:80:8d:90:1b:8b:0f:3a:73:5c:30:25:dd:36:0e:cc:19: 33:76:12:38:57:c1:a1:54:86:45:92:85:b6:61:ef:98:5b:fd: a9:71:91:56:d8:df:75:83:9d:37:2f:71:15:cd:56:63:c3:d6: 35:46:99:59:96:12:02:a4:cb:a6:ad:9f:ad:8a:4f:0c:9a:fd: 5c:83:37:d3:78:ec:c1:c7:16:fa:5b:af:09:28:85:f7:4a:6d: 12:5c:60:02:1e:a5:01:5a:bd:d0:bd:83:d0:1d:18:f7:f6:32: 6f:56:70:d9:9c:b9:c7:2a:07:75:9f:9f:4f:75:8c:7b:21:8e: 7b:3c:20:d8:93:63:42:73:04:80:16:1f:f9:c7:82:df:31:eb: f3:f3:e6:b8:13:df:74:dd:ae:e3:bc:58:30:fb:3f:45:f3:4a: b9:9f:e3:8f:d2:6a:40:0a:3d:fa:24:74:b2:ad:fb:c8:38:e1: 42:4c:2b:d5:47:05:8f:ae:1e:ff:26:15:70:86:4c:d3:f7:06: f9:22:fb:7b:c8:74:6b:e3:9f:63:04:4e:2b:58:e4:3d:fd:fb: 50:1c:91:23:8b:b1:42:3b:83:cd:3c:bf:fc:83:43:e2:fd:82: c6:01:2b:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjYwNDE2MTgxNzU0WhcNMjYwNDIzMTgxNzU0WjAYMRYwFAYD VQQDEw02OWUxMjdkMi1kMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQotv4/37wZJbDEBUG8qn8UsErjA4OA0b5YEEebOTc0PwQuiogmCVJ8iKACk eQrjd97GhYGzOOt7K5M80JzuDLJAzziu5smTznockKJohsg7ys3XfDjKAsX9Ttyu eWzizv7DaNL5JTUjhH3f1GDvES6CiQ/CKlhhCdk4uZrEqSp45tR8TFnlKJjR0Dws dxejXa9K6R3eUvYnR63DKfNEWiu4bD9Hqejp93mXKuI6oq+ryRXPCnUrMlMn2U/l swcObk4U2edtNk6Ck7/CTGUR2aDIqnOe81WOO51cUFFil98Ca2ccTGrbh3QwPyei U94x/h5cydWZ3j4ZOGy2s9ZoewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb7yA2z 4wZdY1xJjvlpyqQmLfcEMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKcx2qdKidAlYytT0sVBHKNAoj6AjZAbiw86c1wwJd02DswZM3YSOFfBoVSG RZKFtmHvmFv9qXGRVtjfdYOdNy9xFc1WY8PWNUaZWZYSAqTLpq2frYpPDJr9XIM3 03jswccW+luvCSiF90ptElxgAh6lAVq90L2D0B0Y9/Yyb1Zw2Zy5xyoHdZ+fT3WM eyGOezwg2JNjQnMEgBYf+ceC3zHr8/PmuBPfdN2u47xYMPs/RfNKuZ/jj9JqQAo9 +iR0sq37yDjhQkwr1UcFj64e/yYVcIZM0/cG+SL7e8h0a+OfYwROK1jkPf37UByR I4uxQjuDzTy//IND4v2CxgErBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:56 2026 by rpki-client