$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: ikQmaC8rjXqXa3m4SA+qs/kuYILySZ8cgZ13prAuv2w= Subject key identifier: 87:1E:4E:E2:BE:2F:30:C5:4B:0E:69:B4:AE:76:96:95:4B:1A:16:FF Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 025D Signing time: Mon 02 Mar 2026 00:48:38 +0000 Manifest this update: Mon 02 Mar 2026 00:48:37 +0000 Manifest next update: Mon 09 Mar 2026 00:48:37 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: tjgnW2PovfUIyUF1yNPGGnbrJZ829fdxLuTZn38Ippg=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ty0ZEIJclX/yY5QfCTSCoif022wX8vgZ8AhU1vGF9Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: Mar 2 00:48:37 2026 GMT Not After : Mar 9 00:48:37 2026 GMT Subject: CN=69a4de66-d16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:c3:60:74:b9:7f:9c:6d:36:c9:d0:85:74: 03:b6:d5:c2:77:d8:d7:67:18:2d:c9:4c:fe:c8:e5: 11:ca:27:96:d7:e9:d4:85:64:7c:1a:43:a4:2c:0c: a5:bb:15:f5:1d:9a:a0:00:a1:bc:b8:17:d0:f7:e1: 7e:70:13:9c:9c:b6:eb:55:28:ba:45:ba:05:cc:01: 38:62:f2:f5:2a:df:f3:5e:7b:09:66:00:b9:c5:ac: 80:75:dd:e5:e8:14:d5:b1:db:15:32:47:29:67:c8: e9:ea:7a:c1:0f:ae:6a:c3:f4:50:9d:9a:d1:a3:3c: 65:d8:1e:c6:4c:25:9a:a2:0e:45:bf:95:4c:59:0d: ef:6e:b0:00:e8:69:36:23:cf:d4:bb:d5:f7:bd:88: 3d:89:b8:d3:ae:34:e0:a3:1a:57:75:7d:1b:0c:8f: c7:8e:c8:01:04:9d:21:b2:66:71:83:23:f7:0b:05: d4:dd:44:70:71:5c:d2:93:14:bf:28:35:02:ca:d4: 5a:1f:c0:de:b8:73:08:36:14:9e:ab:b4:d6:de:bb: e9:09:3e:9f:3d:b7:3a:7e:4c:88:85:84:70:00:92: e4:76:e6:38:ab:91:3c:e5:6e:0b:b9:93:d3:d5:de: 24:eb:e2:1c:63:94:b0:27:b8:4f:cf:48:19:8a:e5: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:4E:E2:BE:2F:30:C5:4B:0E:69:B4:AE:76:96:95:4B:1A:16:FF X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:bb:68:36:26:93:83:b7:df:b7:61:a0:0d:15:a4:16:4d:c3: ef:e6:ab:18:72:52:f9:c1:98:2d:09:8c:6d:ce:98:75:db:df: e4:8a:60:c3:7c:bf:b7:e4:2c:90:d8:cc:41:0f:fb:77:2d:c9: df:22:08:c7:79:52:d1:e8:38:fb:3f:eb:95:00:6f:68:a9:8f: f5:e7:1a:00:f3:7a:92:a1:3c:58:a8:d6:31:97:95:16:6b:fa: 58:aa:4c:4a:f1:c1:ca:ef:1b:8d:40:f2:2a:3e:38:11:15:ec: 9b:c0:e0:17:4a:04:71:c3:9a:01:fa:2d:cc:e8:fb:f5:75:41: f8:0a:1f:f9:1c:42:1f:d9:55:51:22:37:88:84:c9:0d:d7:8a: d2:d8:6f:0b:a2:63:86:b8:44:72:5a:c3:00:e2:93:17:df:28: dd:2f:73:c3:07:a4:7e:e1:7d:94:b7:2b:7a:f6:5b:74:af:72: cc:38:43:dd:1f:99:94:43:de:31:2f:ff:73:31:68:5c:c4:fa: f2:20:73:b4:a2:f0:d9:c7:84:80:80:3a:03:43:89:39:dc:b5: bc:b1:4b:7e:c9:2d:d9:e7:b7:b7:ba:9b:90:dd:d0:b0:77:93: 9b:bc:23:30:af:93:27:96:f3:e8:9e:65:fe:d9:50:e4:5b:ad: 83:f7:82:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjYwMzAyMDA0ODM3WhcNMjYwMzA5MDA0ODM3WjAYMRYwFAYD VQQDEw02OWE0ZGU2Ni1kMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD3DYHS5f5xtNsnQhXQDttXCd9jXZxgtyUz+yOURyieW1+nUhWR8GkOkLAyl uxX1HZqgAKG8uBfQ9+F+cBOcnLbrVSi6RboFzAE4YvL1Kt/zXnsJZgC5xayAdd3l 6BTVsdsVMkcpZ8jp6nrBD65qw/RQnZrRozxl2B7GTCWaog5Fv5VMWQ3vbrAA6Gk2 I8/Uu9X3vYg9ibjTrjTgoxpXdX0bDI/HjsgBBJ0hsmZxgyP3CwXU3URwcVzSkxS/ KDUCytRaH8DeuHMINhSeq7TW3rvpCT6fPbc6fkyIhYRwAJLkduY4q5E85W4LuZPT 1d4k6+IcY5SwJ7hPz0gZiuXAKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIceTuK+ LzDFSw5ptK52lpVLGhb/MB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJrtoNiaTg7fft2GgDRWkFk3D7+arGHJS+cGYLQmMbc6Yddvf5Ipgw3y/t+Qs kNjMQQ/7dy3J3yIIx3lS0eg4+z/rlQBvaKmP9ecaAPN6kqE8WKjWMZeVFmv6WKpM SvHByu8bjUDyKj44ERXsm8DgF0oEccOaAfotzOj79XVB+Aof+RxCH9lVUSI3iITJ DdeK0thvC6JjhrhEclrDAOKTF98o3S9zwwekfuF9lLcrevZbdK9yzDhD3R+ZlEPe MS//czFoXMT68iBztKLw2ceEgIA6A0OJOdy1vLFLfskt2ee3t7qbkN3QsHeTm7wj MK+TJ5bz6J5l/tlQ5Futg/eCgg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:58 2026 by rpki-client