$ rpki-client -vvf rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft File: VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft (raw, json) Hash identifier: FcoE0Rxp1MW0//62n+QzMm2RThioq4D4v26vEGQ2rRc= Subject key identifier: DF:DC:79:11:29:B9:A1:5B:48:AB:89:4B:70:AF:ED:46:A4:90:2A:57 Authority key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 Certificate issuer: /CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft Manifest number: 01DD Signing time: Mon 11 May 2026 03:34:14 +0000 Manifest this update: Mon 11 May 2026 03:34:14 +0000 Manifest next update: Mon 18 May 2026 03:34:14 +0000 Files and hashes: 1: VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl (hash: sJ3Ap4XggLVthzUrVDb0FgeCUjeJlxZ15AahCECgSFE=) 2: 230576C0784C11EE9C354422C4F9AE02.roa (hash: 7xvDxYZ8Q7Qr+JZG4rTDiVXog3eF3DmNJ6tjYp0V/mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189AA3, serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Validity Not Before: May 11 03:34:14 2026 GMT Not After : May 18 03:34:14 2026 GMT Subject: CN=6a014e36-ddf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:62:d2:b5:93:d8:64:95:e9:48:f0:c2:5e: 69:fa:a1:ca:81:ef:e7:9c:7c:c2:63:f4:05:26:0a: 7a:3c:0e:7c:b2:4c:c2:b7:1f:36:4f:eb:4b:9d:80: 3d:d6:cd:3c:da:cf:ea:9a:67:0b:9a:39:db:a6:d0: 38:5a:bb:99:23:c6:53:c6:ca:29:21:f5:1c:94:27: b3:f5:6d:47:53:ae:39:2b:45:17:7b:7b:52:de:20: 94:aa:f8:4a:38:8d:45:e0:7c:e8:3a:6a:99:06:17: 01:3f:66:01:51:ec:9b:91:3f:ff:fe:b3:16:8a:30: d1:d9:a1:aa:1d:f1:54:5b:db:ec:e0:6f:0d:6e:c1: 59:5d:28:7d:f5:21:4d:af:96:be:31:8c:c1:cc:8a: 3c:b9:e2:eb:12:e1:02:14:fa:ed:a6:f4:7c:62:98: 7e:63:75:06:57:bf:cd:f8:8f:65:b2:0f:fd:48:8e: 59:53:fa:ca:0e:ce:58:65:7c:c7:93:1e:29:7c:2b: 16:07:2f:54:d5:68:fe:1d:50:f0:5c:39:24:36:27: a0:58:6f:ca:24:c1:9f:01:15:2b:42:24:7c:d2:69: 43:33:70:68:fd:37:80:07:fd:14:e5:0a:4a:06:c5: 78:e9:83:f1:af:95:44:6b:25:21:c4:cb:7a:5a:fb: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:79:11:29:B9:A1:5B:48:AB:89:4B:70:AF:ED:46:A4:90:2A:57 X509v3 Authority Key Identifier: keyid:54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4b:55:85:75:63:a6:1c:1a:9f:ca:33:78:97:61:23:7c:e6: ef:2a:73:46:f9:6d:14:e0:a8:ac:cc:06:99:7b:83:32:b7:75: 45:99:de:f2:31:e7:2d:32:0f:15:21:24:7f:cd:55:8e:4b:d4: ce:77:3e:ab:ca:f5:c6:fd:16:6d:7e:0e:25:46:e8:eb:eb:f7: 00:ba:fa:dd:ac:28:58:1b:3d:34:20:7d:bd:c4:2d:93:eb:bf: a9:a5:21:a5:02:17:0b:83:2e:22:35:fd:e6:90:54:7c:8b:72: d1:55:04:44:36:fe:b5:71:39:2d:64:fa:24:48:b7:b0:58:0e: 2d:d9:b2:8d:b5:27:09:cd:bc:0e:ba:72:60:9b:74:c5:15:a5: b7:c4:b7:65:d5:77:c2:a4:4f:fb:da:8d:d0:da:0e:84:17:74: 3b:50:ca:6c:35:58:ff:96:60:f2:f3:c8:89:a6:75:1c:16:ec: c0:22:60:29:c8:ed:f9:64:56:c2:c0:ec:5a:0f:0c:50:cc:8b: 0b:24:d3:54:bf:05:d3:50:5f:52:9b:1c:24:e4:47:f3:ab:17: 74:11:f1:cd:85:06:f2:6b:69:02:5b:8f:34:77:20:dc:f1:e5: 1c:00:b2:f8:dd:e1:08:fc:05:71:31:54:b6:a2:3b:b9:95:0e: 3e:8f:6b:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBQTMxMTAvBgNVBAUTKDU0QTVEOEZCRjg0RTNFREYzMUZBMjRFNDVDNkM2NzJB OTNCNjVBRDAwHhcNMjYwNTExMDMzNDE0WhcNMjYwNTE4MDMzNDE0WjAYMRYwFAYD VQQDEw02YTAxNGUzNi1kZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMFi0rWT2GSV6Ujwwl5p+qHKge/nnHzCY/QFJgp6PA58skzCtx82T+tLnYA9 1s082s/qmmcLmjnbptA4WruZI8ZTxsopIfUclCez9W1HU645K0UXe3tS3iCUqvhK OI1F4HzoOmqZBhcBP2YBUeybkT///rMWijDR2aGqHfFUW9vs4G8NbsFZXSh99SFN r5a+MYzBzIo8ueLrEuECFPrtpvR8Yph+Y3UGV7/N+I9lsg/9SI5ZU/rKDs5YZXzH kx4pfCsWBy9U1Wj+HVDwXDkkNiegWG/KJMGfARUrQiR80mlDM3Bo/TeAB/0U5QpK BsV46YPxr5VEayUhxMt6WvtEgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/ceREp uaFbSKuJS3Cv7UakkCpXMB8GA1UdIwQYMBaAFFSl2Pv4Tj7fMfok5FxsZyqTtlrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUFBMy8wQTJDQjc4Njc4 NEIxMUVFQTREN0RCNzdDNEY5QUUwMi9WS1hZLV9oT1B0OHgtaVRrWEd4bktwTzJX dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZLWFktX2hPUHQ4eC1pVGtYR3huS3BPMld0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUFBMy8wQTJDQjc4Njc4NEIxMUVFQTREN0RCNzdDNEY5QUUwMi9WS1hZLV9oT1B0 OHgtaVRrWEd4bktwTzJXdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOUtVhXVjphwan8ozeJdhI3zm7ypzRvltFOCorMwGmXuDMrd1RZne8jHnLTIP FSEkf81VjkvUznc+q8r1xv0WbX4OJUbo6+v3ALr63awoWBs9NCB9vcQtk+u/qaUh pQIXC4MuIjX95pBUfIty0VUERDb+tXE5LWT6JEi3sFgOLdmyjbUnCc28DrpyYJt0 xRWlt8S3ZdV3wqRP+9qN0NoOhBd0O1DKbDVY/5Zg8vPIiaZ1HBbswCJgKcjt+WRW wsDsWg8MUMyLCyTTVL8F01BfUpscJORH86sXdBHxzYUG8mtpAluPNHcg3PHlHACy +N3hCPwFcTFUtqI7uZUOPo9rgw== -----END CERTIFICATE-----Generated at Wed May 13 01:03:09 2026 by rpki-client