$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: r+ASAIjnnCOeSMX0RMdWrH5au5IqJKHcQ2Ngq+Hhw0c= Subject key identifier: 74:3B:47:F1:A3:A0:CD:FA:C2:72:54:C7:9B:F5:A9:54:F9:CC:14:72 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 2693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 2678 Signing time: Thu 16 Apr 2026 15:40:10 +0000 Manifest this update: Thu 16 Apr 2026 15:40:09 +0000 Manifest next update: Thu 23 Apr 2026 15:40:09 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: Eptbgz9ZE7563OjcMiyHj4rTlVHHiI01PUsOClteTAY=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9875 (0x2693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Apr 16 15:40:09 2026 GMT Not After : Apr 23 15:40:09 2026 GMT Subject: CN=69e102da-e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:a5:b0:ec:ba:9c:e2:75:aa:19:fe:f1:70: 5a:24:e1:1a:3c:ab:de:8f:f5:9f:34:fe:59:ca:8f: 28:3b:12:dd:1d:75:75:12:0f:64:4c:7d:1c:2b:8a: 9f:b3:29:45:c7:71:e5:32:5e:e2:90:1c:54:75:fb: 1c:19:8e:58:21:c4:a6:eb:35:4c:e9:b1:c5:29:ff: 1d:f2:4a:22:19:f7:be:d8:6e:35:a5:3b:1d:21:59: d8:a8:5b:91:b6:bf:ad:87:f6:81:8a:ac:63:08:38: cd:af:0f:e6:aa:51:c5:29:84:74:85:05:5f:44:64: 86:50:52:48:a3:ad:b9:35:17:30:27:09:07:2d:52: 76:11:e1:74:33:1f:d1:cf:04:ab:1c:9f:9b:15:9b: 9a:78:7f:b4:8e:9f:dd:0d:a5:e7:7b:de:58:92:d1: 9e:fb:25:61:18:ea:d7:5a:23:03:bc:64:fa:1a:5e: b1:ed:f1:d4:0a:da:9e:af:1e:c8:01:7a:8e:e4:07: 1c:64:52:8c:60:0e:a3:6c:00:ed:6e:d1:28:f1:e9: e3:fc:b2:be:9f:fa:0d:72:6f:ea:fe:9e:35:44:fd: 10:f6:c6:50:a6:82:86:83:f3:2b:cb:bc:9a:93:0b: 8f:9a:fa:7b:75:38:53:4a:9e:f1:9a:8f:54:5f:1a: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3B:47:F1:A3:A0:CD:FA:C2:72:54:C7:9B:F5:A9:54:F9:CC:14:72 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ad:0e:29:f7:a9:7e:69:f5:0f:71:9e:eb:bb:b5:f8:94:bb: 2f:75:4b:39:2d:9a:57:53:42:b3:22:67:27:1c:62:77:b8:a6: 2a:b0:35:9e:8d:6a:63:b0:67:ff:24:7e:8b:3e:17:d4:3d:9e: 3c:05:10:2a:c3:4d:7c:15:d2:5c:3c:18:64:52:f3:c1:60:f2: d8:f6:4c:dd:b1:b0:e6:f6:37:2e:e6:11:c2:86:62:e7:f0:a0: b3:4c:b9:c9:7d:c8:8c:64:09:9c:70:a7:e9:c7:f1:1b:6f:f1: 0a:44:08:33:82:9c:a3:e5:c0:7d:a4:4a:cc:e1:00:ca:3b:60: b3:df:1b:8c:53:0f:95:a3:db:12:a6:fb:2d:0a:34:d9:53:f9: a0:6e:5d:dd:34:37:7e:57:b4:4e:4b:aa:ae:2a:47:ac:66:01: 55:1c:f9:5f:3e:59:f7:86:bd:33:b2:fa:db:d5:24:f6:10:ba: 40:cd:7b:2a:36:fe:d2:36:d3:11:7a:26:8e:f2:df:b6:48:2b: e0:25:b8:87:c5:ff:18:4b:3e:c8:0d:7c:8c:02:4c:52:ba:bb: e9:18:97:bd:42:0d:2f:a9:16:28:4d:b6:6b:36:2c:14:18:be: 5d:f9:f4:48:ba:a4:6e:25:75:c9:7c:d1:12:fd:51:8f:0b:28: be:0d:47:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjYwNDE2MTU0MDA5WhcNMjYwNDIzMTU0MDA5WjAYMRYwFAYD VQQDEw02OWUxMDJkYS1lM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhy2lsOy6nOJ1qhn+8XBaJOEaPKvej/WfNP5Zyo8oOxLdHXV1Eg9kTH0cK4qf sylFx3HlMl7ikBxUdfscGY5YIcSm6zVM6bHFKf8d8koiGfe+2G41pTsdIVnYqFuR tr+th/aBiqxjCDjNrw/mqlHFKYR0hQVfRGSGUFJIo625NRcwJwkHLVJ2EeF0Mx/R zwSrHJ+bFZuaeH+0jp/dDaXne95YktGe+yVhGOrXWiMDvGT6Gl6x7fHUCtqerx7I AXqO5AccZFKMYA6jbADtbtEo8enj/LK+n/oNcm/q/p41RP0Q9sZQpoKGg/Mry7ya kwuPmvp7dThTSp7xmo9UXxqnowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQ7R/Gj oM36wnJUx5v1qVT5zBRyMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAma0OKfepfmn1D3Ge67u1+JS7L3VLOS2aV1NCsyJnJxxid7imKrA1no1qY7Bn /yR+iz4X1D2ePAUQKsNNfBXSXDwYZFLzwWDy2PZM3bGw5vY3LuYRwoZi5/Cgs0y5 yX3IjGQJnHCn6cfxG2/xCkQIM4Kco+XAfaRKzOEAyjtgs98bjFMPlaPbEqb7LQo0 2VP5oG5d3TQ3fle0TkuqripHrGYBVRz5Xz5Z94a9M7L629Uk9hC6QM17Kjb+0jbT EXomjvLftkgr4CW4h8X/GEs+yA18jAJMUrq76RiXvUINL6kWKE22azYsFBi+Xfn0 SLqkbiV1yXzREv1Rjwsovg1HEg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:15 2026 by rpki-client