$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: rFnSOdoRCKuaCs0SHVF6+6iFzH0UGR9mI8/e3n1oMUc= Subject key identifier: 3A:55:64:9C:39:BF:CC:D9:CA:C4:7F:64:2E:48:07:4D:7E:FE:52:3F Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 014C Signing time: Wed 13 May 2026 05:20:57 +0000 Manifest this update: Wed 13 May 2026 05:20:57 +0000 Manifest next update: Wed 20 May 2026 05:20:57 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: vrLaGhps+OTorJX5BS7yvzpLmc4SZlxjA6neJG0gVpo=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: h95Yv9AB3i8q77GTOdJU5rDlDGE8OcZ/0wK0uNvvAcY=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: IFZ00XVVSwazl9kpAzTwtPqVrs/aTpdslSHP9vmvZX4=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: 4OntrH0xrwV1zzqqBO/Cn0QwfwzE4k8t6Fo/4bzYPp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: May 13 05:20:57 2026 GMT Not After : May 20 05:20:57 2026 GMT Subject: CN=6a040a39-56b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:42:8f:36:80:dd:77:68:48:39:0e:60:69: 21:09:48:40:5d:59:49:ba:c7:c6:99:32:87:62:c7: 1d:32:39:6c:11:ef:06:a0:ca:13:e6:94:58:83:c9: 97:38:8f:5c:4c:a6:2d:4c:e1:64:32:a8:28:96:85: 66:e2:fb:58:cf:be:0a:12:d5:62:a1:41:df:c0:2e: 98:3c:5a:fe:d3:a4:ff:73:b9:bc:ed:e2:99:73:eb: a3:8b:a2:b6:f8:cd:e6:57:86:fc:d6:5f:8f:a8:96: c7:5a:34:88:05:98:4d:6b:8d:61:94:07:d6:8c:8f: e1:a8:81:36:6a:f3:d0:40:cd:70:b5:c1:75:c9:74: 1c:2e:b0:e9:41:16:b8:87:f6:7e:50:a5:fd:b9:06: b5:d3:97:41:10:bb:97:b7:1a:50:d1:2c:45:cd:37: c2:53:a9:5c:41:b6:00:f5:0c:fc:2c:e9:2a:86:d4: 9d:7d:44:46:c6:22:2d:b9:31:86:c1:f8:05:b9:25: cd:99:9e:31:65:ad:f8:8d:71:80:ff:1a:a0:02:ed: 08:18:5a:0a:81:45:52:c2:ef:fd:1d:98:fe:26:99: ce:01:c0:10:8d:94:29:0c:b5:67:b0:e0:8b:67:88: d8:78:44:3c:a3:5c:21:d8:3d:f0:78:ae:7b:eb:fe: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:64:9C:39:BF:CC:D9:CA:C4:7F:64:2E:48:07:4D:7E:FE:52:3F X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:ee:f1:42:10:4b:09:da:97:01:72:72:5a:e0:46:29:bb: 6c:bf:f5:79:a0:a7:17:8b:0a:db:f2:15:e0:06:c0:65:91:68: 37:13:f0:14:8d:d4:02:8d:e1:ad:40:82:e3:37:86:75:39:2b: 56:2f:c0:f5:8c:df:da:e1:fb:74:8d:47:d2:50:7f:e1:64:db: 39:b6:dd:6a:f4:b1:68:90:db:d9:86:ac:b3:0c:c1:8d:d4:c5: 95:cd:b8:95:0e:59:93:de:bf:4a:fa:06:40:51:6a:ca:e7:80: 17:cb:07:a8:65:f4:d7:f5:ab:c4:e6:31:09:b2:98:bc:c2:f4: 7d:a9:dd:2d:e4:9f:cd:65:bc:65:77:69:9b:d0:6b:60:4f:03: 23:f9:08:bd:a6:3a:94:c5:fa:c7:83:5e:5b:0e:75:e6:32:87: 52:6f:fa:27:af:f8:52:b1:69:42:33:e1:af:3c:8d:97:48:25: 5e:e2:c5:5a:f7:9b:a5:e4:ee:c9:8e:58:b6:c8:15:f1:99:ba: cb:01:0e:1a:01:24:11:23:11:c2:8c:ad:8d:03:07:a5:e3:64: fe:a9:91:81:a8:23:3f:ed:f4:cf:cb:da:ae:4f:e0:a7:65:41: 04:fd:2f:6c:8e:fc:49:44:73:e3:ee:5a:17:df:84:88:0e:7a: da:76:38:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjYwNTEzMDUyMDU3WhcNMjYwNTIwMDUyMDU3WjAYMRYwFAYD VQQDEw02YTA0MGEzOS01NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIFCjzaA3XdoSDkOYGkhCUhAXVlJusfGmTKHYscdMjlsEe8GoMoT5pRYg8mX OI9cTKYtTOFkMqgoloVm4vtYz74KEtVioUHfwC6YPFr+06T/c7m87eKZc+uji6K2 +M3mV4b81l+PqJbHWjSIBZhNa41hlAfWjI/hqIE2avPQQM1wtcF1yXQcLrDpQRa4 h/Z+UKX9uQa105dBELuXtxpQ0SxFzTfCU6lcQbYA9Qz8LOkqhtSdfURGxiItuTGG wfgFuSXNmZ4xZa34jXGA/xqgAu0IGFoKgUVSwu/9HZj+JpnOAcAQjZQpDLVnsOCL Z4jYeEQ8o1wh2D3weK576/7e0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpVZJw5 v8zZysR/ZC5IB01+/lI/MB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgnu8UIQSwnalwFyclrgRim7bL/1eaCnF4sK2/IV4AbAZZFoNxPwFI3UAo3h rUCC4zeGdTkrVi/A9Yzf2uH7dI1H0lB/4WTbObbdavSxaJDb2YasswzBjdTFlc24 lQ5Zk96/SvoGQFFqyueAF8sHqGX01/WrxOYxCbKYvML0fandLeSfzWW8ZXdpm9Br YE8DI/kIvaY6lMX6x4NeWw515jKHUm/6J6/4UrFpQjPhrzyNl0glXuLFWvebpeTu yY5YtsgV8Zm6ywEOGgEkESMRwoytjQMHpeNk/qmRgagjP+30z8vark/gp2VBBP0v bI78SURz4+5aF9+EiA562nY4hA== -----END CERTIFICATE-----Generated at Wed May 13 12:00:20 2026 by rpki-client