$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: SjXvVcZHZfpoMHeo+/NiMfZ3Y3dB/Un9ym5vlpTmSuo= Subject key identifier: D7:7F:D5:F8:33:86:2D:B9:A7:B7:9C:27:18:D3:99:71:63:63:30:B3 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C04 Signing time: Thu 16 Apr 2026 18:48:47 +0000 Manifest this update: Thu 16 Apr 2026 18:48:47 +0000 Manifest next update: Thu 23 Apr 2026 18:48:47 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: uctcYNZBtFlCtQZ4FLZvlOPjNIZsN8YsuY/xEDyG6X4=) 2: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 3: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) 4: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Apr 16 18:48:47 2026 GMT Not After : Apr 23 18:48:47 2026 GMT Subject: CN=69e12f0f-181f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:51:29:f6:a7:fd:86:b1:24:5b:77:8c:90: d9:28:2d:1f:95:0f:8b:d5:67:b1:a2:05:df:8f:e1: fa:e4:53:c0:d6:84:5f:e9:18:04:fa:7b:45:0e:5a: ac:ee:3b:91:bc:67:95:0a:65:9d:1d:5e:b8:c9:6e: 84:ee:3e:ef:d7:7c:55:e7:da:9c:8a:80:67:84:f0: dc:7b:2a:21:dd:f6:cf:9d:5a:a2:16:35:5d:4f:ca: 7d:a7:81:72:f5:85:fe:8a:e0:91:2c:76:06:c5:d9: 9f:f6:69:20:0c:7d:8d:2e:1e:35:5f:d9:d0:80:37: 8c:5b:37:d9:ea:52:73:be:f5:90:60:4d:65:11:ea: d5:25:a1:51:09:5c:a1:64:e4:bb:33:e4:c6:8c:66: 14:56:14:c3:c4:e4:6e:8a:dc:c8:1a:7e:a5:a1:3d: 0b:d4:a8:86:e3:7c:1c:a0:37:05:36:b1:ed:b8:9d: 55:bb:03:f8:da:50:73:18:17:1f:43:ea:d9:50:3c: e7:d3:4a:c6:34:c7:1c:f3:91:11:95:e7:e6:a0:ca: 0c:0c:9b:c8:32:5c:06:46:cc:2c:5b:88:29:98:a4: 84:6a:e3:25:c0:1f:4f:84:f8:52:7d:45:c5:39:62: 1c:89:a8:bf:6b:a5:5e:87:bb:56:a3:e0:45:fa:23: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7F:D5:F8:33:86:2D:B9:A7:B7:9C:27:18:D3:99:71:63:63:30:B3 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:7e:a0:49:c7:74:54:0b:4f:47:30:4f:e6:8d:16:02:13: e7:1a:aa:7a:62:aa:01:43:9a:79:d7:8a:0d:16:55:8e:37:66: 39:41:49:d8:5a:fe:8b:5f:dd:39:29:77:28:a3:44:35:79:39: 9c:c5:05:42:60:57:af:7e:05:05:ab:38:99:7a:94:48:69:f4: 23:2b:ff:10:a0:c1:06:7d:7c:f3:3d:f4:35:62:f1:7d:27:cc: ff:7e:f8:06:ed:28:5d:da:59:ba:fd:95:0a:99:5e:af:60:bb: 8c:af:84:07:f7:17:6e:cf:31:10:c4:37:a1:49:0a:de:90:12: c9:7b:09:b9:38:2b:b9:9e:4f:d7:0e:94:c1:91:16:4b:38:b3: 1e:b8:a3:db:b0:0f:c6:82:9b:c0:cf:0a:e0:19:80:d9:2c:8e: 21:d3:d7:1f:bd:90:d5:64:10:95:21:b6:29:1b:97:5d:88:94: de:95:42:ab:da:85:d1:51:2c:41:d5:dc:e3:ec:0d:40:b4:68: 2a:66:6c:47:21:7f:fb:c9:56:05:e2:a5:fd:a2:47:70:75:f7: 9d:67:d3:61:63:16:e6:bb:0d:e4:85:01:8d:be:69:63:71:83: 5d:30:ac:ca:fa:08:ba:62:53:73:f8:4b:b0:82:84:0f:a4:e3: 63:35:c7:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwNDE2MTg0ODQ3WhcNMjYwNDIzMTg0ODQ3WjAYMRYwFAYD VQQDEw02OWUxMmYwZi0xODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZNRKfan/YaxJFt3jJDZKC0flQ+L1WexogXfj+H65FPA1oRf6RgE+ntFDlqs 7juRvGeVCmWdHV64yW6E7j7v13xV59qcioBnhPDceyoh3fbPnVqiFjVdT8p9p4Fy 9YX+iuCRLHYGxdmf9mkgDH2NLh41X9nQgDeMWzfZ6lJzvvWQYE1lEerVJaFRCVyh ZOS7M+TGjGYUVhTDxORuitzIGn6loT0L1KiG43wcoDcFNrHtuJ1VuwP42lBzGBcf Q+rZUDzn00rGNMcc85ERlefmoMoMDJvIMlwGRswsW4gpmKSEauMlwB9PhPhSfUXF OWIciai/a6Veh7tWo+BF+iOcXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNd/1fgz hi25p7ecJxjTmXFjYzCzMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc+d+oEnHdFQLT0cwT+aNFgIT5xqqemKqAUOaedeKDRZVjjdmOUFJ2Fr+i1/d OSl3KKNENXk5nMUFQmBXr34FBas4mXqUSGn0Iyv/EKDBBn188z30NWLxfSfM/374 Bu0oXdpZuv2VCpler2C7jK+EB/cXbs8xEMQ3oUkK3pASyXsJuTgruZ5P1w6UwZEW SzizHrij27APxoKbwM8K4BmA2SyOIdPXH72Q1WQQlSG2KRuXXYiU3pVCq9qF0VEs QdXc4+wNQLRoKmZsRyF/+8lWBeKl/aJHcHX3nWfTYWMW5rsN5IUBjb5pY3GDXTCs yvoIumJTc/hLsIKED6TjYzXHeA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:09 2026 by rpki-client