$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: IHURLZysKte1MTkURpqIuXu8Lop+Cm1mJfGXKsrPpfY= Subject key identifier: AC:A5:9D:DF:AA:C1:05:7E:C7:DB:16:E3:6E:3D:31:D8:6A:CB:7E:09 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C47 Signing time: Wed 26 Aug 2026 18:44:23 +0000 Manifest this update: Wed 26 Aug 2026 18:44:23 +0000 Manifest next update: Wed 02 Sep 2026 18:44:23 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 9Zi1bm5bBUwv7eXxqzyrCsL6Oayut7fLwncjUNE48iI=) 2: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 3: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) 4: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Aug 26 18:44:23 2026 GMT Not After : Sep 2 18:44:23 2026 GMT Subject: CN=6a8f3407-a522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:24:e5:2e:72:88:af:3f:07:18:f5:76:2e: 83:4c:a9:2b:b5:1e:46:47:52:2b:72:4c:65:69:bd: 13:7f:06:f0:60:67:ad:c1:fb:8d:b5:0a:4d:e7:fc: fd:6d:6f:97:ef:3f:ef:a8:11:5a:df:24:32:a8:80: 1f:c5:0a:6d:74:86:a3:ae:32:eb:92:95:44:94:d3: 3d:40:db:41:b5:e8:b8:c7:39:ae:57:c3:4e:34:c3: ec:05:87:3e:8c:2c:b9:f6:54:cc:c3:ac:99:31:14: 63:25:9b:c2:b0:34:e6:95:3b:87:4b:a1:7c:14:b2: c9:46:35:37:c7:5c:a0:a6:be:2c:33:9c:12:66:b0: e4:a2:23:54:ea:f2:e1:0d:a6:dd:ae:3a:b8:73:8f: 00:af:a0:ce:5d:2b:56:28:94:91:31:6f:e9:3b:b2: 61:cb:d0:15:44:c9:f1:59:83:19:2e:0a:a2:a3:fa: 67:ad:92:4f:99:42:92:46:c6:c4:6f:7e:04:a2:67: b5:5e:69:27:92:35:32:dd:c7:d3:68:48:59:16:21: f4:94:1c:43:f1:3a:9b:ed:21:a3:f7:83:fe:38:78: 5f:f6:04:52:79:9f:6a:02:5d:a9:45:a9:09:18:bf: a1:6c:90:e4:fb:d9:41:c0:6d:2a:23:a1:20:f7:2c: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:9D:DF:AA:C1:05:7E:C7:DB:16:E3:6E:3D:31:D8:6A:CB:7E:09 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f8:0e:99:2b:e8:f0:a8:28:57:35:bd:23:28:47:42:61:73: 1f:12:fb:02:5a:8a:65:39:41:cb:c2:51:23:78:c6:d0:e0:b7: 43:d3:4c:c2:4e:6f:be:a8:a7:d9:c2:97:ec:96:e0:d5:3d:b2: 2b:90:bd:09:de:2c:ce:a3:25:37:2c:6c:03:98:ea:32:6f:72: 62:a1:f7:79:6d:10:1e:62:98:d9:38:66:9e:4d:f8:60:0c:28: de:38:3c:7f:0c:d8:3f:f6:13:5c:cb:cf:31:11:37:3d:ff:e2: 6d:64:42:e8:30:28:3f:45:bb:91:d3:8a:4f:fa:8c:13:24:b3: c4:59:6f:86:47:25:78:12:be:04:77:8c:fa:c2:7d:a6:94:8b: 2c:66:07:d3:19:7f:44:df:1c:0d:ca:18:81:38:eb:f5:04:5f: 33:66:fd:93:58:0d:36:1d:c8:d8:4e:25:b2:45:1a:73:e1:a2: 1f:3c:d2:05:35:cb:83:c4:d4:9f:3b:27:31:14:6d:70:aa:6c: 0d:d1:99:26:bc:ae:4b:5c:08:21:87:22:4a:2e:62:a2:37:82: 13:6a:27:fe:66:c7:8f:4d:c5:3b:72:d5:68:f4:1c:0a:e9:72: 2c:ca:ee:db:54:34:ca:80:19:5f:28:86:55:6f:bb:dc:1a:e8: f3:19:5e:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwODI2MTg0NDIzWhcNMjYwOTAyMTg0NDIzWjAYMRYwFAYD VQQDEw02YThmMzQwNy1hNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy4k5S5yiK8/Bxj1di6DTKkrtR5GR1Irckxlab0TfwbwYGetwfuNtQpN5/z9 bW+X7z/vqBFa3yQyqIAfxQptdIajrjLrkpVElNM9QNtBtei4xzmuV8NONMPsBYc+ jCy59lTMw6yZMRRjJZvCsDTmlTuHS6F8FLLJRjU3x1ygpr4sM5wSZrDkoiNU6vLh Dabdrjq4c48Ar6DOXStWKJSRMW/pO7Jhy9AVRMnxWYMZLgqio/pnrZJPmUKSRsbE b34Eome1XmknkjUy3cfTaEhZFiH0lBxD8Tqb7SGj94P+OHhf9gRSeZ9qAl2pRakJ GL+hbJDk+9lBwG0qI6Eg9yxrgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKylnd+q wQV+x9sW4249Mdhqy34JMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApvgOmSvo8KgoVzW9IyhHQmFzHxL7AlqKZTlBy8JRI3jG0OC3Q9NMwk5vvqin 2cKX7Jbg1T2yK5C9Cd4szqMlNyxsA5jqMm9yYqH3eW0QHmKY2Thmnk34YAwo3jg8 fwzYP/YTXMvPMRE3Pf/ibWRC6DAoP0W7kdOKT/qMEySzxFlvhkcleBK+BHeM+sJ9 ppSLLGYH0xl/RN8cDcoYgTjr9QRfM2b9k1gNNh3I2E4lskUac+GiHzzSBTXLg8TU nzsnMRRtcKpsDdGZJryuS1wIIYciSi5iojeCE2on/mbHj03FO3LVaPQcCulyLMru 21Q0yoAZXyiGVW+73Bro8xle5Q== -----END CERTIFICATE-----Generated at Thu Aug 27 00:02:13 2026 by rpki-client