$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft File: VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft (raw, json) Hash identifier: w44iw4WPTDjX9qtTvp65kMMxNzVad8D/ooa68ewbvnY= Subject key identifier: FB:6C:7B:4B:D3:6A:0B:5A:E4:19:19:23:43:92:02:EE:39:48:A3:CF Authority key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 Certificate issuer: /CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft Manifest number: 0221 Signing time: Wed 23 Sep 2026 02:42:59 +0000 Manifest this update: Wed 23 Sep 2026 02:42:59 +0000 Manifest next update: Wed 30 Sep 2026 02:42:59 +0000 Files and hashes: 1: VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl (hash: gTf6ioi9b4Q5I4EfntdBITaW7eFKycsV9vXn7QN3nz8=) 2: 230576C0784C11EE9C354422C4F9AE02.roa (hash: 7xvDxYZ8Q7Qr+JZG4rTDiVXog3eF3DmNJ6tjYp0V/mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189AA3, serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0 Validity Not Before: Sep 23 02:42:59 2026 GMT Not After : Sep 30 02:42:59 2026 GMT Subject: CN=6ab33cb3-7cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3f:17:de:6b:64:a9:fe:31:ab:3e:34:a9:77: d8:0c:5e:9a:bd:4a:d1:d2:68:ff:45:f9:0d:c1:37: 27:62:01:a0:8b:56:ec:a6:62:9d:52:6e:5f:b0:99: a8:9d:f9:b8:c6:05:66:c1:ed:e7:86:05:06:b8:55: d2:7e:6c:2a:d6:8c:d3:e7:64:dd:48:8c:f5:16:74: 95:7f:00:9d:38:57:e4:ef:a9:10:87:f4:9f:29:ef: 27:73:ae:44:96:42:a4:5e:f3:be:27:9d:dc:0c:10: 55:da:53:06:a2:50:9d:f9:78:34:36:2c:56:56:fe: 17:b5:2d:10:7b:c9:24:85:b6:9e:a3:a1:6f:0e:3c: bb:b3:9b:18:ec:f1:39:fe:f5:14:b7:f2:56:8a:de: 6a:14:1d:17:f8:d3:95:da:eb:78:cd:89:4d:9c:90: 62:f3:79:04:42:2f:5c:ae:c3:05:7b:68:c6:a0:ed: 79:9f:04:6a:6c:e3:f8:29:49:a1:47:df:53:d0:89: 90:08:d7:e2:14:c6:04:79:06:bb:a3:91:b0:3b:ec: 78:5c:6c:16:43:3f:95:00:d6:9d:a5:34:4a:2d:f7: 58:65:04:ab:f5:88:83:d1:6d:f7:71:6a:8e:7b:83: 1a:f8:01:07:df:d0:a3:a8:2a:24:da:8a:dc:9f:76: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6C:7B:4B:D3:6A:0B:5A:E4:19:19:23:43:92:02:EE:39:48:A3:CF X509v3 Authority Key Identifier: keyid:54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:43:44:a6:32:a6:94:e6:e8:ab:7f:1b:08:e6:5e:50:d9:6e: 77:83:5c:78:ac:c4:48:47:63:d3:f9:6b:89:91:15:a1:0b:02: 7c:9a:a0:10:cb:86:1a:94:71:74:00:b5:f0:3a:b1:5b:4f:7f: 31:0a:6d:24:81:73:68:33:9c:d2:30:5c:03:eb:75:11:42:df: 4c:6a:bb:25:5d:c7:59:fb:57:0c:dc:76:93:45:17:1d:41:e8: d6:d3:aa:eb:ed:65:50:39:9d:a4:61:23:35:cd:df:51:17:95: 1a:24:cd:82:ff:cf:da:79:a6:93:d0:5f:ab:1f:be:ef:5f:8a: 6f:dd:90:5b:44:79:a7:e3:62:51:fb:05:56:b0:50:7f:61:35: 23:9c:69:da:78:92:da:f7:f2:40:4f:66:68:48:b0:60:2a:2c: 9b:f2:24:ba:f3:94:3f:f2:20:90:73:f2:7a:b8:a3:1a:e6:ab: c7:58:be:06:41:20:84:05:b4:6c:90:5c:12:e5:38:29:70:58: 12:3a:1c:59:48:de:63:4c:05:89:b9:af:ec:43:75:86:ba:cb: 1d:a4:95:29:59:eb:ad:c8:90:f9:c9:65:50:e3:79:bc:73:09: db:d2:47:18:cf:c6:df:0a:72:1d:c0:46:53:98:99:0e:c4:7a: cc:f2:dc:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBQTMxMTAvBgNVBAUTKDU0QTVEOEZCRjg0RTNFREYzMUZBMjRFNDVDNkM2NzJB OTNCNjVBRDAwHhcNMjYwOTIzMDI0MjU5WhcNMjYwOTMwMDI0MjU5WjAYMRYwFAYD VQQDEw02YWIzM2NiMy03Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjT8X3mtkqf4xqz40qXfYDF6avUrR0mj/RfkNwTcnYgGgi1bspmKdUm5fsJmo nfm4xgVmwe3nhgUGuFXSfmwq1ozT52TdSIz1FnSVfwCdOFfk76kQh/SfKe8nc65E lkKkXvO+J53cDBBV2lMGolCd+Xg0NixWVv4XtS0Qe8kkhbaeo6FvDjy7s5sY7PE5 /vUUt/JWit5qFB0X+NOV2ut4zYlNnJBi83kEQi9crsMFe2jGoO15nwRqbOP4KUmh R99T0ImQCNfiFMYEeQa7o5GwO+x4XGwWQz+VANadpTRKLfdYZQSr9YiD0W33cWqO e4Ma+AEH39CjqCok2orcn3ZgmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtse0vT agta5BkZI0OSAu45SKPPMB8GA1UdIwQYMBaAFFSl2Pv4Tj7fMfok5FxsZyqTtlrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUFBMy8wQTJDQjc4Njc4 NEIxMUVFQTREN0RCNzdDNEY5QUUwMi9WS1hZLV9oT1B0OHgtaVRrWEd4bktwTzJX dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZLWFktX2hPUHQ4eC1pVGtYR3huS3BPMld0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUFBMy8wQTJDQjc4Njc4NEIxMUVFQTREN0RCNzdDNEY5QUUwMi9WS1hZLV9oT1B0 OHgtaVRrWEd4bktwTzJXdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEENEpjKmlOboq38bCOZeUNlud4NceKzESEdj0/lriZEVoQsCfJqgEMuGGpRx dAC18DqxW09/MQptJIFzaDOc0jBcA+t1EULfTGq7JV3HWftXDNx2k0UXHUHo1tOq 6+1lUDmdpGEjNc3fUReVGiTNgv/P2nmmk9Bfqx++71+Kb92QW0R5p+NiUfsFVrBQ f2E1I5xp2niS2vfyQE9maEiwYCosm/IkuvOUP/IgkHPyerijGuarx1i+BkEghAW0 bJBcEuU4KXBYEjocWUjeY0wFibmv7EN1hrrLHaSVKVnrrciQ+cllUON5vHMJ29JH GM/G3wpyHcBGU5iZDsR6zPLc7A== -----END CERTIFICATE-----Generated at Wed Sep 23 10:42:56 2026 by rpki-client