$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: sdCLbGOJ+RYL9zVs7bjWyIjvNvqA6I3bOiQYyqvikFE= Subject key identifier: 5D:34:C6:61:EB:82:2A:8D:9D:93:F6:CC:45:7B:9A:24:DB:FA:DA:A4 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 04FE Signing time: Mon 27 Jul 2026 00:47:20 +0000 Manifest this update: Mon 27 Jul 2026 00:47:19 +0000 Manifest next update: Mon 03 Aug 2026 00:47:19 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: RmKCJBaQxxBz2N8L6bsrEYEhgzcKdFaEE7kYsLEVqbI=) 2: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=) 3: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=) 4: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Jul 27 00:47:19 2026 GMT Not After : Aug 3 00:47:19 2026 GMT Subject: CN=6a66aa98-0e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:00:96:07:20:8e:21:85:77:c5:45:49:71: cf:fd:b3:39:1e:ae:e9:d1:45:77:d2:bf:cc:86:5c: 8b:e7:59:96:8a:99:72:36:d3:a4:c5:18:0b:79:e2: 29:dc:fb:8a:a7:26:d6:fd:5d:2d:db:36:31:88:04: f2:ce:15:ed:07:d5:30:05:ef:52:b0:16:b7:48:0e: 1c:d7:e0:6d:83:b0:dd:8c:33:38:38:1e:57:9a:5a: de:da:46:72:1b:bf:70:35:dc:18:fd:c5:8c:e0:a0: f5:43:98:41:c1:d3:d2:47:50:f5:01:8b:f9:80:b7: db:60:2f:0a:0c:f1:e0:32:79:aa:1f:a2:68:03:72: 9f:fc:2b:b1:ec:86:32:25:dd:8e:1b:0e:4a:c2:0a: 4f:7e:0d:69:e4:ef:1e:3d:d4:f8:a2:84:b7:8e:ce: 3f:c0:9b:e2:d4:17:6e:db:cd:04:4f:ca:45:90:b9: 5b:3b:94:bd:bb:84:0f:5d:b7:fb:57:cd:5c:ec:21: 44:77:03:77:26:2c:d3:06:ee:44:64:2c:fe:c9:8c: b9:6d:53:e5:91:5f:7c:0f:a7:58:bf:ac:07:1b:78: 57:eb:b3:0f:67:d3:d6:20:e7:f9:90:15:26:58:92: 8c:fc:60:b9:c4:16:73:08:ec:e1:61:79:4d:85:ea: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:C6:61:EB:82:2A:8D:9D:93:F6:CC:45:7B:9A:24:DB:FA:DA:A4 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4d:77:d3:da:82:f9:7b:28:b9:8d:df:f6:56:69:ab:76:d8: b1:57:72:de:35:c5:f1:51:33:d8:48:46:85:8a:cc:2d:de:dd: 64:ca:e0:0b:41:7b:2e:5a:2c:df:76:4b:08:31:76:51:e8:be: 6b:14:4b:24:f4:18:e8:e9:77:b0:08:2b:86:a2:49:39:d5:33: ea:02:23:73:e5:97:3e:3d:d9:19:6c:04:bf:18:73:24:8c:84: 21:7a:ba:6e:65:39:10:32:e9:eb:05:7d:0a:46:60:8b:e9:59: ee:ba:58:66:f3:72:ed:c3:38:ca:5b:e1:7a:91:e7:61:39:90: d3:ab:87:30:6c:b4:00:91:0e:70:99:67:26:ee:14:32:be:3a: 62:e9:f0:bd:5e:71:a8:fb:6a:28:08:ae:eb:31:9e:85:08:5a: e5:c3:a0:e5:56:4d:f4:c9:75:f9:05:b1:c7:93:b9:4e:0a:de: 98:53:14:89:0f:18:ab:6b:65:5f:0a:64:b1:2b:ed:4f:df:9c: 24:97:26:01:ee:da:a1:92:1a:e0:da:e5:56:98:6f:b2:60:58: 47:39:66:b5:64:82:03:72:1a:25:32:33:67:f4:8d:6b:58:99: 7a:aa:87:48:5e:55:7a:f9:be:d8:8a:5e:24:7d:99:22:bf:7d: 25:49:b5:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYwNzI3MDA0NzE5WhcNMjYwODAzMDA0NzE5WjAYMRYwFAYD VQQDEw02YTY2YWE5OC0wZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlsAlgcgjiGFd8VFSXHP/bM5Hq7p0UV30r/MhlyL51mWiplyNtOkxRgLeeIp 3PuKpybW/V0t2zYxiATyzhXtB9UwBe9SsBa3SA4c1+Btg7DdjDM4OB5Xmlre2kZy G79wNdwY/cWM4KD1Q5hBwdPSR1D1AYv5gLfbYC8KDPHgMnmqH6JoA3Kf/Cux7IYy Jd2OGw5KwgpPfg1p5O8ePdT4ooS3js4/wJvi1Bdu280ET8pFkLlbO5S9u4QPXbf7 V81c7CFEdwN3JizTBu5EZCz+yYy5bVPlkV98D6dYv6wHG3hX67MPZ9PWIOf5kBUm WJKM/GC5xBZzCOzhYXlNheo10QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF00xmHr giqNnZP2zEV7miTb+tqkMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAk1309qC+XsouY3f9lZpq3bYsVdy3jXF8VEz2EhGhYrMLd7dZMrgC0F7Llos 33ZLCDF2Uei+axRLJPQY6Ol3sAgrhqJJOdUz6gIjc+WXPj3ZGWwEvxhzJIyEIXq6 bmU5EDLp6wV9CkZgi+lZ7rpYZvNy7cM4ylvhepHnYTmQ06uHMGy0AJEOcJlnJu4U Mr46YunwvV5xqPtqKAiu6zGehQha5cOg5VZN9Ml1+QWxx5O5TgremFMUiQ8Yq2tl XwpksSvtT9+cJJcmAe7aoZIa4NrlVphvsmBYRzlmtWSCA3IaJTIzZ/SNa1iZeqqH SF5Vevm+2IpeJH2ZIr99JUm1+Q== -----END CERTIFICATE-----Generated at Wed Jul 29 01:27:05 2026 by rpki-client