$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: Ec9wqqJGNrJoLUkJtDY8FPTj+jfIdtgPmjgS5g0yC9I= Subject key identifier: C7:13:EE:B7:1D:F6:A5:41:3A:6F:DC:0B:88:0C:A5:C5:B3:73:A6:18 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 01A1 Signing time: Sun 25 Oct 2026 04:45:02 +0000 Manifest this update: Sun 25 Oct 2026 04:45:02 +0000 Manifest next update: Sun 01 Nov 2026 04:45:02 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: AvrzzfwDVrde0h3IT+SGBZODRFspnFujDr4k/IGvdlA=) 2: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=) 3: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=) 4: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Oct 25 04:45:02 2026 GMT Not After : Nov 1 04:45:02 2026 GMT Subject: CN=6add894e-e2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:6b:b4:8f:53:c9:75:62:5c:79:5f:39:9d: 4f:5c:2d:e1:11:31:60:b2:78:6c:4d:e0:34:ec:a2: 28:c0:5d:3a:33:aa:71:9c:dd:db:2f:41:70:28:33: e4:5a:30:ec:26:8e:4f:8a:4d:ff:82:01:50:b7:c9: a5:7e:7d:86:3c:d9:c2:be:eb:2b:54:71:68:f9:70: 5a:e7:30:7e:6c:9e:28:79:23:7b:98:7d:49:34:f5: 80:de:af:f6:65:d4:42:60:33:70:83:d7:b8:22:ec: 41:95:7a:be:ab:67:1f:a3:ee:54:d0:04:8a:02:70: 86:1d:9d:9e:18:6c:5c:eb:b2:cb:03:20:94:52:c3: 33:da:4e:1a:28:15:78:ce:4e:3a:cf:f0:71:39:3d: e5:60:bf:87:e2:b0:9c:f0:b7:ff:7b:c3:65:2b:a9: 99:0f:f9:14:34:b2:8f:e7:c1:bd:9e:25:2d:4c:0c: 99:0f:9e:2b:ca:5e:e0:4e:32:ef:3b:6a:71:35:c3: 53:1f:5a:f4:78:00:cb:54:89:68:f8:51:c2:4d:be: e8:08:fd:e8:d8:57:fb:16:d3:79:f9:bf:82:d6:71: 6f:34:a1:2f:d6:a9:61:5b:68:36:f7:d1:5b:89:19: fc:84:59:e8:74:e1:80:67:52:66:cb:d4:ee:5b:81: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:EE:B7:1D:F6:A5:41:3A:6F:DC:0B:88:0C:A5:C5:B3:73:A6:18 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:60:58:6e:bc:0a:15:70:27:23:17:61:4a:d8:ab:b0:50:97: 38:3c:98:a6:32:43:16:31:66:3e:e6:3d:27:c2:c6:5c:af:70: 14:dd:b5:ae:64:e8:f1:53:0a:d6:b8:38:ef:0b:84:f6:44:a2: 6f:f5:24:48:5c:20:f9:4b:f8:5f:29:56:af:0b:1b:be:bd:50: 54:c4:29:f5:d1:b5:fe:72:bc:d2:a0:63:37:10:4b:fd:a3:4b: b9:9d:b7:1e:12:6d:56:ea:ad:d7:6e:b0:f3:91:2a:a3:21:2b: de:0a:60:22:5a:32:85:41:db:3e:b8:1e:14:99:ea:e0:30:14: 42:f7:ba:f9:0b:14:18:28:f8:00:31:fe:49:a6:e6:dd:5f:50: d3:a0:ce:9f:a7:60:5a:cf:30:ea:0f:73:0a:6e:e1:77:c9:76: e5:c8:8a:29:92:9a:f3:48:12:65:6c:44:8a:21:29:1b:d6:ba: 17:f5:ab:da:ab:43:e0:bd:96:1b:22:50:ee:4d:ab:12:9b:16: 3d:08:10:c4:e0:01:57:26:01:97:6b:58:d7:1c:4d:94:e6:cd: 93:23:41:5b:93:bc:77:2f:87:68:b2:1a:0d:24:53:31:b8:70: 1a:da:60:50:78:de:d1:97:d5:cf:60:e9:e5:dc:35:d6:a4:e4: f9:9d:d7:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjYxMDI1MDQ0NTAyWhcNMjYxMTAxMDQ0NTAyWjAYMRYwFAYD VQQDEw02YWRkODk0ZS1lMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21lrtI9TyXViXHlfOZ1PXC3hETFgsnhsTeA07KIowF06M6pxnN3bL0FwKDPk WjDsJo5Pik3/ggFQt8mlfn2GPNnCvusrVHFo+XBa5zB+bJ4oeSN7mH1JNPWA3q/2 ZdRCYDNwg9e4IuxBlXq+q2cfo+5U0ASKAnCGHZ2eGGxc67LLAyCUUsMz2k4aKBV4 zk46z/BxOT3lYL+H4rCc8Lf/e8NlK6mZD/kUNLKP58G9niUtTAyZD54ryl7gTjLv O2pxNcNTH1r0eADLVIlo+FHCTb7oCP3o2Ff7FtN5+b+C1nFvNKEv1qlhW2g299Fb iRn8hFnodOGAZ1Jmy9TuW4E9+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcT7rcd 9qVBOm/cC4gMpcWzc6YYMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkWBYbrwKFXAnIxdhStirsFCXODyYpjJDFjFmPuY9J8LGXK9wFN21rmTo8VMK 1rg47wuE9kSib/UkSFwg+Uv4XylWrwsbvr1QVMQp9dG1/nK80qBjNxBL/aNLuZ23 HhJtVuqt126w85EqoyEr3gpgIloyhUHbPrgeFJnq4DAUQve6+QsUGCj4ADH+Sabm 3V9Q06DOn6dgWs8w6g9zCm7hd8l25ciKKZKa80gSZWxEiiEpG9a6F/Wr2qtD4L2W GyJQ7k2rEpsWPQgQxOABVyYBl2tY1xxNlObNkyNBW5O8dy+HaLIaDSRTMbhwGtpg UHje0ZfVz2Dp5dw11qTk+Z3XIQ== -----END CERTIFICATE-----Generated at Sun Oct 25 15:50:11 2026 by rpki-client