$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: Yhf8pAhsmRZYIEPDbt5ZdI5Gm57O0HVppRvcHEQ2TN4= Subject key identifier: 58:AA:DB:51:EE:DE:E5:FF:DB:22:A0:2F:28:EF:CE:AD:3E:12:38:75 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 098C Signing time: Tue 12 May 2026 20:05:33 +0000 Manifest this update: Tue 12 May 2026 20:05:33 +0000 Manifest next update: Tue 19 May 2026 20:05:33 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: 1WuuaWWvD1vKqNJHMK+bD7M3acho6pDi4cd1ho28dvw=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: bJrrgsYLHjV75zVLzQBs3qgGPoWpvtfZTp73HYIJWw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: May 12 20:05:33 2026 GMT Not After : May 19 20:05:33 2026 GMT Subject: CN=6a03880d-0ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:5b:0c:35:a3:f8:0b:62:6b:a8:77:74:d4: d7:ac:ba:2e:98:6d:56:67:62:9f:bf:3d:7f:f6:46: d2:1f:2f:2b:01:11:25:1b:1d:28:09:ed:ec:83:c7: 31:02:a4:7b:46:bc:31:87:a3:19:14:75:49:95:22: f7:38:f7:9c:53:98:69:c2:e9:7b:3b:43:7f:89:9a: 63:7e:de:ff:e3:e6:56:a5:01:69:5e:07:58:90:6a: 67:c1:77:a1:d5:6e:3f:da:96:a0:46:f3:ad:8b:b3: 84:b1:de:fd:01:d1:64:c6:68:6d:d2:df:38:b6:0b: 90:72:f7:3a:4d:04:50:fc:bc:ae:05:c4:26:70:42: f6:53:73:51:66:6d:bf:d8:7f:e1:f3:61:93:32:27: 57:49:b1:28:2f:9b:17:c7:b3:48:2e:a0:3f:ad:d6: 1b:e4:da:e8:c2:6f:47:ac:45:f6:0f:95:87:b2:dc: a6:52:04:26:1d:25:46:bd:0a:6d:a3:ee:b6:21:3f: 24:41:09:67:37:64:e0:ec:b8:19:93:76:48:c1:31: 30:b5:27:5e:27:9e:c6:6d:9f:cf:c7:9d:3d:24:f1: 68:a0:c9:27:d9:db:0c:4c:64:10:b5:f2:91:93:b6: af:00:29:d0:4d:2a:03:47:76:9a:30:ec:eb:d1:6e: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:DB:51:EE:DE:E5:FF:DB:22:A0:2F:28:EF:CE:AD:3E:12:38:75 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:c0:98:44:05:c2:05:ae:19:85:b7:ae:c7:c5:a0:9a:18:c4: 3d:8c:8c:31:26:12:57:4a:13:3e:30:0f:4e:2f:b9:d7:55:d6: 71:0b:65:ce:f6:bf:e9:1e:89:e6:49:d6:6b:0e:6c:eb:c1:05: 45:f6:1e:1e:df:b7:7b:cb:f3:c0:3b:3d:ef:75:c6:6a:e6:95: 84:6f:5b:80:d9:d0:00:79:73:5f:74:ff:e7:e9:eb:af:88:2c: e2:55:cc:96:84:24:d0:3d:cb:a6:e8:65:3e:7c:3d:7d:80:dc: ab:a6:5c:43:c3:a6:f6:e4:c5:e1:eb:7c:53:a5:8b:5f:ac:57: b8:9b:93:ab:3a:75:9b:9d:b7:da:39:ae:bc:65:2c:a1:16:0c: a6:e4:80:b9:e9:7c:f6:bd:fa:d0:67:a0:04:5e:b0:c8:65:b7: ed:fa:9f:89:e0:4d:05:d7:ec:79:7e:86:64:4d:ad:dd:f1:4b: e7:3d:68:32:cf:10:eb:f0:8d:e5:42:61:78:a2:a8:e6:a1:f0: 96:b8:38:21:df:c8:80:5f:64:a1:e3:03:20:3b:df:75:ab:71: 52:89:80:b0:06:e0:48:8f:d3:4b:b9:97:51:ef:a7:4e:93:9e: 9e:72:67:03:38:90:f4:93:e2:37:b1:f8:eb:7d:4a:a6:e6:b9: 99:de:47:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjYwNTEyMjAwNTMzWhcNMjYwNTE5MjAwNTMzWjAYMRYwFAYD VQQDEw02YTAzODgwZC0wYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqxbDDWj+Atia6h3dNTXrLoumG1WZ2Kfvz1/9kbSHy8rARElGx0oCe3sg8cx AqR7Rrwxh6MZFHVJlSL3OPecU5hpwul7O0N/iZpjft7/4+ZWpQFpXgdYkGpnwXeh 1W4/2pagRvOti7OEsd79AdFkxmht0t84tguQcvc6TQRQ/LyuBcQmcEL2U3NRZm2/ 2H/h82GTMidXSbEoL5sXx7NILqA/rdYb5Nrowm9HrEX2D5WHstymUgQmHSVGvQpt o+62IT8kQQlnN2Tg7LgZk3ZIwTEwtSdeJ57GbZ/Px509JPFooMkn2dsMTGQQtfKR k7avACnQTSoDR3aaMOzr0W4R5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiq21Hu 3uX/2yKgLyjvzq0+Ejh1MB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzsCYRAXCBa4Zhbeux8WgmhjEPYyMMSYSV0oTPjAPTi+511XWcQtlzva/6R6J 5knWaw5s68EFRfYeHt+3e8vzwDs973XGauaVhG9bgNnQAHlzX3T/5+nrr4gs4lXM loQk0D3LpuhlPnw9fYDcq6ZcQ8Om9uTF4et8U6WLX6xXuJuTqzp1m5232jmuvGUs oRYMpuSAuel89r360GegBF6wyGW37fqfieBNBdfseX6GZE2t3fFL5z1oMs8Q6/CN 5UJheKKo5qHwlrg4Id/IgF9koeMDIDvfdatxUomAsAbgSI/TS7mXUe+nTpOennJn AziQ9JPiN7H4631Kpua5md5H+A== -----END CERTIFICATE-----Generated at Wed May 13 12:03:18 2026 by rpki-client