$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: CktOE7whszXJOv2j162FD4HyNfs5cn5O4dbBRb2l0LY= Subject key identifier: ED:2C:C6:75:2B:CB:72:B5:7C:00:C1:DC:B3:6D:D0:A0:6A:E4:D9:A9 Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 1102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 10D8 Signing time: Wed 20 May 2026 17:20:57 +0000 Manifest this update: Wed 20 May 2026 17:20:56 +0000 Manifest next update: Wed 27 May 2026 17:20:56 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: JXMlcPUQNSbVKID4si1KOnlCIf8eF8FhZqL1Blo2Pyw=) 2: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=) 3: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: MC3ya+Rx2sZxtMRFWTDYtgp6jSYXay2r0LuhyZ274v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4354 (0x1102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: May 20 17:20:56 2026 GMT Not After : May 27 17:20:56 2026 GMT Subject: CN=6a0ded79-1aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:37:44:2c:52:0f:21:0d:46:d0:b1:ce:ff: 42:0d:f6:37:2b:0a:d3:c6:c7:19:01:4f:00:5d:1f: 28:c6:17:7d:76:f5:03:5e:2e:0c:61:e2:f5:92:0e: de:88:02:19:21:cc:9f:2c:95:e6:3f:2e:ba:43:83: ad:f2:e4:2c:4f:89:f9:fa:24:5f:4a:29:88:a7:5e: 35:11:20:5c:cf:9d:bc:7a:d0:7d:8e:80:3b:be:d9: 19:06:35:bb:87:97:aa:17:f8:cd:a7:13:80:f7:6d: e7:03:8d:2c:f2:ea:17:12:bf:7a:b8:87:c0:f7:b0: b3:60:4a:83:52:a5:04:fb:c4:49:b4:32:fd:8c:d0: da:55:8a:83:1c:85:d5:a9:21:6f:aa:d5:62:06:fb: 9c:cd:f2:04:3c:3c:44:9a:8a:70:6d:d0:76:8d:5b: 04:89:8a:38:e4:00:1e:0b:ee:7a:42:12:49:a8:ea: 9c:48:b0:d5:1e:9d:13:58:17:63:ee:2e:75:52:a5: f9:7f:54:d4:6e:8b:81:fc:c3:ac:cd:b2:3a:dd:b7: e1:fd:6b:f2:bd:81:24:2f:13:e2:89:dd:d5:50:8c: 96:56:6a:b2:aa:7c:5e:78:c2:be:d7:d1:30:cd:f2: 08:58:15:73:a3:4b:e1:5e:0a:af:1d:c9:f2:65:89: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:C6:75:2B:CB:72:B5:7C:00:C1:DC:B3:6D:D0:A0:6A:E4:D9:A9 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:d8:b4:55:73:39:fe:9c:40:79:15:49:75:a0:e4:78:24: 71:00:7e:66:1a:d4:08:3c:7f:53:ef:75:3d:1d:0f:20:cd:e7: 82:b6:1c:fc:ee:9f:36:81:60:c6:6a:c5:db:73:0f:09:e9:a8: 46:48:c5:f6:7b:ae:91:ac:b2:b4:40:f5:8a:f1:d9:33:a8:3b: 9c:28:b2:64:79:9e:ff:68:5a:8b:5e:b1:33:b4:e8:a7:f3:d3: d0:ad:29:a7:f6:7e:ac:92:21:64:d2:1e:c7:e3:95:db:02:4e: 6b:64:d9:d7:20:25:0d:f5:24:8f:d4:c1:8d:26:78:ed:c1:3f: a1:e6:a1:11:5a:ac:00:00:a7:c5:df:6d:4e:a5:b9:80:32:6c: ef:fb:91:fe:d4:dc:97:1b:bd:8f:16:f5:d6:5b:b4:28:eb:d5: 18:a8:06:a1:33:49:c6:99:fb:70:7c:37:b0:50:da:c6:7a:66: 4f:f0:c7:0f:0c:34:ff:c1:f0:44:34:47:9e:e9:58:ec:58:f1: 27:90:eb:fe:1c:50:20:8c:de:b6:f8:14:b0:a3:ab:d0:28:16: 61:e4:b2:75:88:90:3d:1c:05:72:c0:2f:13:26:61:e0:8c:b7: 5a:96:f3:31:53:ea:c2:2b:c2:5e:fd:05:eb:81:55:46:dc:20: 54:15:38:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjYwNTIwMTcyMDU2WhcNMjYwNTI3MTcyMDU2WjAYMRYwFAYD VQQDEw02YTBkZWQ3OS0xYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusU3RCxSDyENRtCxzv9CDfY3KwrTxscZAU8AXR8oxhd9dvUDXi4MYeL1kg7e iAIZIcyfLJXmPy66Q4Ot8uQsT4n5+iRfSimIp141ESBcz528etB9joA7vtkZBjW7 h5eqF/jNpxOA923nA40s8uoXEr96uIfA97CzYEqDUqUE+8RJtDL9jNDaVYqDHIXV qSFvqtViBvuczfIEPDxEmopwbdB2jVsEiYo45AAeC+56QhJJqOqcSLDVHp0TWBdj 7i51UqX5f1TUbouB/MOszbI63bfh/WvyvYEkLxPiid3VUIyWVmqyqnxeeMK+19Ew zfIIWBVzo0vhXgqvHcnyZYlLkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0sxnUr y3K1fADB3LNt0KBq5NmpMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFLYtFVzOf6cQHkVSXWg5HgkcQB+ZhrUCDx/U+91PR0PIM3ngrYc/O6fNoFg xmrF23MPCemoRkjF9nuukayytED1ivHZM6g7nCiyZHme/2hai16xM7Top/PT0K0p p/Z+rJIhZNIex+OV2wJOa2TZ1yAlDfUkj9TBjSZ47cE/oeahEVqsAACnxd9tTqW5 gDJs7/uR/tTclxu9jxb11lu0KOvVGKgGoTNJxpn7cHw3sFDaxnpmT/DHDww0/8Hw RDRHnulY7FjxJ5Dr/hxQIIzetvgUsKOr0CgWYeSydYiQPRwFcsAvEyZh4Iy3Wpbz MVPqwivCXv0F64FVRtwgVBU4kw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:13 2026 by rpki-client