$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: Yf8LOoRcN5IQ9J3iqe37OBRG40sEVjOJhle5pxswSMc= Subject key identifier: 42:DD:44:50:D6:58:7B:22:DC:D4:8C:38:12:8C:01:7E:45:97:22:B6 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 06:47:31 +0000 Manifest this update: Sun 01 Mar 2026 06:47:30 +0000 Manifest next update: Sun 08 Mar 2026 06:47:30 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: guFt5R8hLP2Chv3ihPSaDCebpoOT3TayjirpxWNwxnk=) 2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: GyrcmD5udMNah9Y+c1TesKwftevuFWQB3Xej0/U4i/M=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: NCosWXhfz0UWkuSBHKgiBpQqoUl/ccm+dyT7ONrL1+0=) 4: B527A9C8604111EF97252962C4F9AE02.roa (hash: 86BcjMQFenDIORukuby6K4SLuk15+UdUhQ7zU3nwZFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Mar 1 06:47:30 2026 GMT Not After : Mar 8 06:47:30 2026 GMT Subject: CN=69a3e102-fe67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:b2:13:d2:d4:e9:f5:21:79:3c:1e:e2:16: 52:30:db:e6:29:93:c8:8c:91:e5:ad:3d:47:12:f4: d0:da:f5:54:d8:57:98:76:8e:9f:96:37:92:1e:79: 6e:a3:cb:2e:f7:b7:f0:dc:d2:be:9c:cb:53:53:10: 03:0c:af:65:b6:99:6b:52:8a:61:12:b6:2a:f9:8d: 98:e1:ac:9f:8f:9f:24:d3:e7:65:4b:55:eb:b1:11: 57:2e:55:f4:ce:52:24:a9:1f:a0:73:bb:78:7f:29: 60:25:53:94:d0:a3:17:c1:52:3c:fc:da:c4:74:98: c8:80:fb:6b:6e:e6:00:66:f2:c9:3a:5a:1d:7a:ab: 2a:81:2a:4f:73:9c:82:70:61:d5:fd:8d:e3:c3:c7: 60:57:12:6f:67:fa:2b:44:54:ab:44:fc:10:24:75: 7e:23:11:de:fc:e4:66:9e:65:9d:d5:ad:2d:7c:07: 4d:a5:dc:7c:17:fd:80:2a:4b:33:22:d6:a0:f9:fe: 99:51:9a:10:32:52:c3:34:08:45:d4:f3:af:79:48: a9:fd:97:25:7c:e6:ba:91:40:93:f5:05:f5:32:b0: 72:86:f9:0b:bb:bb:49:3c:a6:c6:c8:96:f0:3f:b0: bb:fa:66:93:79:66:1b:d8:4f:11:b6:68:3c:80:86: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DD:44:50:D6:58:7B:22:DC:D4:8C:38:12:8C:01:7E:45:97:22:B6 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5c:bd:a8:2a:54:be:87:6e:99:ca:18:e2:25:28:f3:cc:5c: c2:e7:12:82:5f:63:2d:3b:ac:99:b9:77:db:ce:91:36:8a:87: 85:59:42:d2:05:74:77:86:fa:4a:db:88:80:1b:30:35:5e:71: a8:1b:41:0b:7a:de:b9:b8:65:33:0b:b2:89:1c:62:1c:b8:11: 83:70:ec:82:47:d0:47:24:e2:71:6a:b8:21:87:77:ab:11:6a: 4b:3e:9a:1d:f6:63:63:7d:39:5f:76:5e:5a:7d:6d:80:98:03: b2:ec:d3:56:9b:de:ac:56:00:f9:42:62:e8:76:d7:32:01:a1: a9:fd:5c:80:4d:0a:c4:3c:f7:f5:2f:95:8e:03:dc:b4:06:c0: 64:a4:61:21:35:83:a4:cc:47:68:fd:e4:2e:a8:99:dd:92:34: fb:da:fd:7f:d2:1a:5f:b4:2d:9a:fd:2e:e3:a5:66:6e:03:79: 06:ee:26:e3:78:2a:0c:be:d1:31:22:9e:5e:35:2c:a4:48:16: a2:40:64:ed:e7:7c:0d:f5:ef:d5:3a:fc:d0:14:fc:01:ef:4d: 04:29:31:41:7c:f1:e4:35:80:81:a5:a1:7b:69:6f:02:70:c4: 68:91:3c:be:c7:b1:8b:d1:87:e8:d4:34:30:ba:e0:0d:80:ab: cb:a7:1f:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjYwMzAxMDY0NzMwWhcNMjYwMzA4MDY0NzMwWjAYMRYwFAYD VQQDEw02OWEzZTEwMi1mZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5teyE9LU6fUheTwe4hZSMNvmKZPIjJHlrT1HEvTQ2vVU2FeYdo6fljeSHnlu o8su97fw3NK+nMtTUxADDK9ltplrUophErYq+Y2Y4ayfj58k0+dlS1XrsRFXLlX0 zlIkqR+gc7t4fylgJVOU0KMXwVI8/NrEdJjIgPtrbuYAZvLJOlodeqsqgSpPc5yC cGHV/Y3jw8dgVxJvZ/orRFSrRPwQJHV+IxHe/ORmnmWd1a0tfAdNpdx8F/2AKksz Itag+f6ZUZoQMlLDNAhF1POveUip/ZclfOa6kUCT9QX1MrByhvkLu7tJPKbGyJbw P7C7+maTeWYb2E8Rtmg8gIZEDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELdRFDW WHsi3NSMOBKMAX5FlyK2MB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1y9qCpUvodumcoY4iUo88xcwucSgl9jLTusmbl3286RNoqHhVlC0gV0d4b6 StuIgBswNV5xqBtBC3reubhlMwuyiRxiHLgRg3DsgkfQRyTicWq4IYd3qxFqSz6a HfZjY305X3ZeWn1tgJgDsuzTVpverFYA+UJi6HbXMgGhqf1cgE0KxDz39S+VjgPc tAbAZKRhITWDpMxHaP3kLqiZ3ZI0+9r9f9IaX7Qtmv0u46VmbgN5Bu4m43gqDL7R MSKeXjUspEgWokBk7ed8DfXv1Tr80BT8Ae9NBCkxQXzx5DWAgaWhe2lvAnDEaJE8 vsexi9GH6NQ0MLrgDYCry6cfLA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:27 2026 by rpki-client