$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: l6TKDDnSh5NyrJBkqPPeiDlNC/nYk85qwykSCcTGa7g= Subject key identifier: CF:40:B1:03:F5:D9:8D:7A:9C:70:88:B4:5E:16:C3:C3:BA:24:36:CF Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 01A2 Signing time: Tue 27 Oct 2026 04:34:06 +0000 Manifest this update: Tue 27 Oct 2026 04:34:05 +0000 Manifest next update: Tue 03 Nov 2026 04:34:05 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: dmTuow3OE5GyQMs5hr4GFNYcK0uUQu7E7CnDvXMPyf0=) 2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=) 4: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Oct 27 04:34:05 2026 GMT Not After : Nov 3 04:34:05 2026 GMT Subject: CN=6ae029be-7891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:ff:75:c1:3b:a0:7e:e7:7b:3a:67:9f:62: ac:75:8f:69:e7:85:f4:5a:ed:c9:90:b7:1e:e4:06: 04:92:1f:6e:2a:c3:28:f4:d6:bf:2d:53:05:a8:5d: 09:d7:42:b9:f3:50:c8:6e:0a:16:5c:d1:58:f2:93: d5:09:ee:2d:b5:94:79:92:87:42:83:f9:35:3f:fc: e6:f1:54:44:a1:39:f5:57:a8:50:b0:81:34:62:7f: 56:5c:21:c8:1d:be:ea:ba:df:00:8f:5b:5c:c7:aa: 6f:3d:ad:7b:98:9a:dc:2b:55:a2:b5:78:ad:34:5b: d1:2c:78:be:2f:f9:07:8e:51:fe:2b:fd:39:2b:07: 7c:bb:a6:b6:de:e1:5c:68:b1:c9:92:16:20:a5:75: f6:a0:a7:70:f9:9e:ab:b6:aa:a9:76:a4:24:e4:9a: da:f5:29:55:52:a9:af:5a:1a:5f:02:0f:43:8e:ae: b8:76:a7:10:51:bb:d3:f3:7b:b1:8f:bf:84:72:80: 79:17:2e:e2:cc:24:75:db:bf:5f:75:fd:2e:84:c8: 1f:48:65:7c:db:da:88:83:b6:fd:b8:6c:b0:76:10: 6d:09:39:06:23:54:2b:19:86:2f:c1:f3:a1:d9:08: ef:8d:2d:d4:fb:de:24:ef:a8:c8:fe:31:bd:b1:1e: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:40:B1:03:F5:D9:8D:7A:9C:70:88:B4:5E:16:C3:C3:BA:24:36:CF X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:d5:e2:e1:c5:f4:2d:72:8a:ad:5d:1c:cf:1a:a8:92:c8: 5c:1f:73:6b:11:30:69:4d:0b:a4:4d:ae:58:7b:11:e4:26:c8: 25:8a:44:71:08:26:6a:69:4d:ad:ee:31:be:d9:5d:99:ad:bf: e9:a5:00:9f:cb:96:d7:87:65:52:23:26:f6:33:d3:d5:82:0f: 18:02:e6:b0:b9:19:d3:f9:ad:1f:ab:02:57:e3:6c:4f:2f:45: 68:49:87:e1:d1:5a:1e:53:c0:c0:4f:8d:d4:a6:f8:6e:58:ae: 98:c2:cc:85:b7:f6:f8:51:f7:2a:cf:88:fe:0b:2f:87:c6:05: c8:b1:a2:5a:b6:a5:1e:c5:46:0f:68:e5:e8:72:42:e3:32:e4: dc:73:26:f6:32:99:d5:4f:9d:c0:9c:bc:90:1c:fa:df:27:f2: 90:ff:ea:17:29:36:9f:e3:49:18:39:a7:f4:10:43:89:e6:32: 22:f6:f8:94:66:7a:3e:a9:4d:cf:e5:93:af:38:8c:92:35:80: 38:c2:14:f5:48:b1:49:23:ed:5b:2b:05:d8:c1:c6:ae:4b:ba: 84:31:c1:71:13:36:5a:60:61:b6:f7:e0:c0:ec:e2:70:ed:5f: a5:96:4d:ce:0b:a0:44:7c:2a:d7:7c:5d:d1:40:8e:c0:2a:85: 9c:0d:43:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjYxMDI3MDQzNDA1WhcNMjYxMTAzMDQzNDA1WjAYMRYwFAYD VQQDEw02YWUwMjliZS03ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8P/dcE7oH7nezpnn2KsdY9p54X0Wu3JkLce5AYEkh9uKsMo9Na/LVMFqF0J 10K581DIbgoWXNFY8pPVCe4ttZR5kodCg/k1P/zm8VREoTn1V6hQsIE0Yn9WXCHI Hb7qut8Aj1tcx6pvPa17mJrcK1WitXitNFvRLHi+L/kHjlH+K/05Kwd8u6a23uFc aLHJkhYgpXX2oKdw+Z6rtqqpdqQk5Jra9SlVUqmvWhpfAg9Djq64dqcQUbvT83ux j7+EcoB5Fy7izCR1279fdf0uhMgfSGV829qIg7b9uGywdhBtCTkGI1QrGYYvwfOh 2QjvjS3U+94k76jI/jG9sR7IqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9AsQP1 2Y16nHCItF4Ww8O6JDbPMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5bV4uHF9C1yiq1dHM8aqJLIXB9zaxEwaU0LpE2uWHsR5CbIJYpEcQgmamlN re4xvtldma2/6aUAn8uW14dlUiMm9jPT1YIPGALmsLkZ0/mtH6sCV+NsTy9FaEmH 4dFaHlPAwE+N1Kb4bliumMLMhbf2+FH3Ks+I/gsvh8YFyLGiWralHsVGD2jl6HJC 4zLk3HMm9jKZ1U+dwJy8kBz63yfykP/qFyk2n+NJGDmn9BBDieYyIvb4lGZ6PqlN z+WTrziMkjWAOMIU9UixSSPtWysF2MHGrku6hDHBcRM2WmBhtvfgwOzicO1fpZZN zgugRHwq13xd0UCOwCqFnA1DTw== -----END CERTIFICATE-----Generated at Thu Oct 29 00:45:00 2026 by rpki-client