$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: iFwpe/kxMyUQoaLfQqVVOX68rX7rxa4VevVQmiDBfJo= Subject key identifier: 65:71:EF:CE:71:25:F5:8B:F6:30:00:98:F7:17:DD:BE:D3:EE:CF:D8 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C5F Signing time: Mon 12 Oct 2026 18:52:26 +0000 Manifest this update: Mon 12 Oct 2026 18:52:25 +0000 Manifest next update: Mon 19 Oct 2026 18:52:25 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: Pv5GOQP4RJlslRp/pyJE8+IZiKQtZ1ErHqK6dkcfObk=) 2: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 4: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Oct 12 18:52:25 2026 GMT Not After : Oct 19 18:52:25 2026 GMT Subject: CN=6acd2c6a-fdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:fc:16:a4:2c:a9:f0:8c:14:4c:11:12:13: ce:30:32:de:35:f0:cc:3b:9b:c4:35:e5:4c:ea:73: 0e:f5:f5:66:29:9c:82:0f:16:97:17:3a:e3:bf:61: c8:ce:94:fa:c3:0c:c6:03:f0:18:7b:06:47:53:f3: 7b:b0:92:ba:84:6c:d9:0e:8d:b6:dc:5b:14:f3:e4: c9:bd:17:19:60:a6:36:fc:d3:82:4c:98:f7:3e:d6: be:6e:1e:64:5e:e6:ee:d0:b6:fb:62:71:5d:c6:0f: f3:c3:00:e8:d0:4d:0f:a4:8b:07:db:aa:12:be:77: 7d:8b:5e:04:36:56:5d:39:13:6d:0d:1c:3f:d1:16: 06:04:40:c2:27:75:ba:92:6c:a3:9b:63:f0:0a:6c: b6:23:9e:3d:a0:4d:70:aa:f1:66:01:5a:1a:ea:01: 90:b5:d8:1f:30:f4:90:f4:c4:bf:33:2e:c8:e3:40: 32:17:b8:8a:5c:ab:8d:e2:0b:bf:49:8b:eb:2b:ec: 25:1c:3d:4b:98:fe:fd:59:bb:ba:18:e6:d4:99:f5: 10:db:fd:2b:30:91:4c:a3:5d:9b:d8:2f:30:9e:f5: ca:43:ed:51:b3:a1:4a:11:17:49:ac:48:11:09:c1: 54:58:a3:01:a0:8f:68:31:31:c2:cc:86:e1:75:73: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:EF:CE:71:25:F5:8B:F6:30:00:98:F7:17:DD:BE:D3:EE:CF:D8 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:de:bc:17:2b:e0:41:cd:84:25:7e:df:f7:75:9a:57:a7: 3b:81:c3:00:66:cc:11:33:f6:63:cb:91:41:f7:c3:04:a3:96: 5f:58:fb:ca:11:48:c1:77:22:2a:0e:58:64:b1:66:25:9d:40: 43:f6:7c:a6:e2:e6:76:69:39:8c:8f:84:1b:e8:08:73:69:5f: 64:79:ef:e9:5d:64:bf:ad:f5:28:e4:a7:70:a9:e9:6f:18:f0: f4:42:05:6a:ea:c4:98:80:1d:22:27:f4:e6:88:82:ee:05:90: 04:dd:d3:3e:07:b9:ed:88:da:84:60:91:8e:bc:4e:f0:31:a5: ee:be:c7:ec:8c:72:b8:d0:c7:78:13:2c:a9:c1:3d:f3:ca:70: ac:b2:5c:2c:96:1c:dd:1b:ed:c7:ad:fc:b8:08:4b:86:a6:b0: 9a:7e:b9:ed:39:64:5d:bb:e3:16:53:95:e6:87:c2:39:15:d3: 61:16:60:52:d5:da:39:e5:1d:39:89:e7:e7:27:4f:21:0e:0c: dd:8b:af:6c:47:4d:03:38:1c:32:1a:40:b3:d0:2c:25:83:2f: 9a:7b:43:d5:56:e8:47:e4:61:70:55:14:05:b4:5d:e8:62:8c: 01:92:b3:a2:af:1d:6c:03:db:e5:00:3e:e1:40:ed:4a:63:c3: 16:ed:77:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYxMDEyMTg1MjI1WhcNMjYxMDE5MTg1MjI1WjAYMRYwFAYD VQQDEw02YWNkMmM2YS1mZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsH8FqQsqfCMFEwREhPOMDLeNfDMO5vENeVM6nMO9fVmKZyCDxaXFzrjv2HI zpT6wwzGA/AYewZHU/N7sJK6hGzZDo223FsU8+TJvRcZYKY2/NOCTJj3Pta+bh5k Xubu0Lb7YnFdxg/zwwDo0E0PpIsH26oSvnd9i14ENlZdORNtDRw/0RYGBEDCJ3W6 kmyjm2PwCmy2I549oE1wqvFmAVoa6gGQtdgfMPSQ9MS/My7I40AyF7iKXKuN4gu/ SYvrK+wlHD1LmP79Wbu6GObUmfUQ2/0rMJFMo12b2C8wnvXKQ+1Rs6FKERdJrEgR CcFUWKMBoI9oMTHCzIbhdXMqfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVx785x JfWL9jAAmPcX3b7T7s/YMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvPevBcr4EHNhCV+3/d1mlenO4HDAGbMETP2Y8uRQffDBKOWX1j7yhFIwXci Kg5YZLFmJZ1AQ/Z8puLmdmk5jI+EG+gIc2lfZHnv6V1kv631KOSncKnpbxjw9EIF aurEmIAdIif05oiC7gWQBN3TPge57YjahGCRjrxO8DGl7r7H7IxyuNDHeBMsqcE9 88pwrLJcLJYc3Rvtx638uAhLhqawmn657TlkXbvjFlOV5ofCORXTYRZgUtXaOeUd OYnn5ydPIQ4M3YuvbEdNAzgcMhpAs9AsJYMvmntD1VboR+RhcFUUBbRd6GKMAZKz oq8dbAPb5QA+4UDtSmPDFu13Mw== -----END CERTIFICATE-----Generated at Tue Oct 13 15:57:43 2026 by rpki-client