$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: F8jMAzXL7Jve0mEomSRRJA5EGq8ASomZNRgSbh/XvII= Subject key identifier: DC:1B:20:E8:EC:72:CC:32:27:F5:A7:A3:7D:C7:3F:77:0F:F8:30:E8 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 013F Signing time: Fri 17 Apr 2026 05:08:13 +0000 Manifest this update: Fri 17 Apr 2026 05:08:12 +0000 Manifest next update: Fri 24 Apr 2026 05:08:12 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: /2IRMRwt2ACD49jmzXRcGmKG5bZwTS9jmG6mqVdy514=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: h95Yv9AB3i8q77GTOdJU5rDlDGE8OcZ/0wK0uNvvAcY=) 3: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: 4OntrH0xrwV1zzqqBO/Cn0QwfwzE4k8t6Fo/4bzYPp0=) 4: 9FB99556604111EFB4652062C4F9AE02.roa (hash: IFZ00XVVSwazl9kpAzTwtPqVrs/aTpdslSHP9vmvZX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Apr 17 05:08:12 2026 GMT Not After : Apr 24 05:08:12 2026 GMT Subject: CN=69e1c03d-7d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:af:9d:76:31:f4:37:45:92:8a:03:ca:d0: 8f:8d:3b:41:27:59:92:f1:e6:68:d9:db:b1:2f:3d: 37:f7:a2:6f:eb:8e:c2:88:18:67:52:0e:9f:d0:20: a8:98:fb:45:fa:37:53:41:62:dc:f3:c3:d1:63:1c: e9:5a:a0:88:d0:7d:bc:98:ba:7b:7d:a5:df:05:76: 66:91:d4:16:33:18:84:cc:a9:89:79:47:24:d7:4b: 0b:2b:77:07:b2:d6:d0:40:a7:21:64:e8:2b:86:4a: 47:ac:63:b5:88:69:69:cd:08:f6:ba:e4:f9:29:57: f4:25:3b:f9:16:aa:9c:a2:6d:6a:a0:22:f5:a2:a5: 38:ff:4c:c2:12:7e:d2:dd:de:10:bc:19:e5:29:ea: b9:9d:f3:20:8f:6f:51:36:62:b3:e4:b0:dc:a3:04: 84:49:50:a3:c0:78:06:67:ee:61:de:9d:42:e1:f3: 87:8a:68:c2:5b:39:25:83:ea:73:d3:31:4e:57:b9: 6a:1f:fb:63:61:bc:45:d5:75:cb:9d:43:99:72:52: 4a:f0:17:df:74:bd:c2:94:7d:b5:8f:bc:dd:2c:50: de:a0:ce:e3:0b:e6:6b:98:86:d6:98:6c:77:74:57: f0:2f:6f:fa:5d:9c:ef:7c:aa:fe:de:8b:f5:36:72: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1B:20:E8:EC:72:CC:32:27:F5:A7:A3:7D:C7:3F:77:0F:F8:30:E8 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:d2:84:a4:65:c3:6b:0d:0f:ea:7d:8a:7a:79:99:7c:b1: 71:0b:05:59:21:43:d3:62:60:16:36:85:50:7d:b5:64:da:c3: f2:96:3d:70:46:6d:f7:30:81:14:fc:85:59:44:56:94:5d:ca: 32:7c:b1:03:dd:c2:10:be:d3:ee:ee:18:39:db:1e:bc:ee:27: 78:ca:0f:77:e5:78:d6:a6:f5:6e:29:ad:c7:16:cf:e2:cc:9a: f9:4d:ba:e6:c8:18:9f:20:4f:34:91:3e:66:a8:40:68:6e:ad: 49:33:fd:94:c4:0b:16:78:97:20:09:f7:cd:7d:02:b6:bf:0d: 5f:ee:ba:cf:46:10:81:67:77:5b:c6:49:ab:59:9b:2e:c3:fa: 07:36:77:4a:ad:93:6e:75:2d:0c:70:86:64:81:14:dd:c8:e8: f9:54:b6:51:42:6e:c9:b2:7d:96:4e:e5:c7:62:2d:98:b1:73: 0f:ea:59:77:25:ce:28:c9:71:c9:99:d6:f5:94:02:38:45:29: 34:20:68:c2:95:27:d0:15:45:ac:55:71:e9:d1:c1:94:5c:24: 82:2c:21:f2:be:e3:dc:96:c9:f5:fe:15:04:c5:b6:2d:88:0f: 76:32:ad:06:0c:fe:ef:e8:30:b5:d3:44:5f:0f:5e:4b:a1:35: e8:54:93:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjYwNDE3MDUwODEyWhcNMjYwNDI0MDUwODEyWjAYMRYwFAYD VQQDEw02OWUxYzAzZC03ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WKvnXYx9DdFkooDytCPjTtBJ1mS8eZo2duxLz0396Jv647CiBhnUg6f0CCo mPtF+jdTQWLc88PRYxzpWqCI0H28mLp7faXfBXZmkdQWMxiEzKmJeUck10sLK3cH stbQQKchZOgrhkpHrGO1iGlpzQj2uuT5KVf0JTv5Fqqcom1qoCL1oqU4/0zCEn7S 3d4QvBnlKeq5nfMgj29RNmKz5LDcowSESVCjwHgGZ+5h3p1C4fOHimjCWzklg+pz 0zFOV7lqH/tjYbxF1XXLnUOZclJK8BffdL3ClH21j7zdLFDeoM7jC+ZrmIbWmGx3 dFfwL2/6XZzvfKr+3ov1NnJ3PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwbIOjs cswyJ/Wno33HP3cP+DDoMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd7jShKRlw2sND+p9inp5mXyxcQsFWSFD02JgFjaFUH21ZNrD8pY9cEZt9zCB FPyFWURWlF3KMnyxA93CEL7T7u4YOdsevO4neMoPd+V41qb1bimtxxbP4sya+U26 5sgYnyBPNJE+ZqhAaG6tSTP9lMQLFniXIAn3zX0Ctr8NX+66z0YQgWd3W8ZJq1mb LsP6BzZ3Sq2TbnUtDHCGZIEU3cjo+VS2UUJuybJ9lk7lx2ItmLFzD+pZdyXOKMlx yZnW9ZQCOEUpNCBowpUn0BVFrFVx6dHBlFwkgiwh8r7j3JbJ9f4VBMW2LYgPdjKt Bgz+7+gwtdNEXw9eS6E16FSThg== -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:11 2026 by rpki-client