$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: uB6xzS70kD9MIka9/RqiAgKEnVDwRFtuH7WELTjISyk= Subject key identifier: 71:95:09:CC:BB:C8:87:7E:F1:2A:3B:D8:C8:F3:4C:95:7C:C4:68:74 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0BFE Signing time: Sat 04 Apr 2026 18:43:51 +0000 Manifest this update: Sat 04 Apr 2026 18:43:50 +0000 Manifest next update: Sat 11 Apr 2026 18:43:50 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: XeUNxf45uekU2o9Pdi2ko3bReBh/PwFIarLHTVKVAYQ=) 2: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) 3: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 4: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Apr 4 18:43:50 2026 GMT Not After : Apr 11 18:43:50 2026 GMT Subject: CN=69d15be7-cf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:82:88:22:e8:79:3e:39:aa:5f:1c:a6:02: 60:5a:72:ae:3a:38:d0:e4:2c:76:fa:27:43:ff:b8: ba:11:a5:ca:68:9b:17:4c:63:10:ba:17:b9:14:20: f5:f4:e7:72:a4:e4:b7:fa:8b:b4:f3:a3:e0:65:00: 6b:54:c1:0f:c6:6e:61:bd:07:88:96:ad:16:dd:d7: 88:dd:5e:69:1a:5a:84:ce:29:77:89:c9:da:27:33: b2:f8:a9:f6:e9:77:57:58:0c:59:da:20:b8:1d:8a: df:ce:b0:60:9c:5e:92:57:50:99:5f:b2:04:32:46: 79:65:08:3e:a2:20:95:03:b6:1a:ad:7f:e0:27:21: 2f:6d:42:26:36:89:44:9e:34:7d:95:11:6b:9f:04: f8:e4:23:3d:a7:6c:3b:e4:af:ac:af:2a:16:19:17: 35:f1:dc:61:00:e2:43:81:d0:33:a7:51:c2:93:f5: 96:81:38:aa:c4:bd:43:0c:93:2f:9b:b8:92:03:43: 5a:36:bd:2a:95:77:cf:c3:c1:dd:c7:fc:e0:71:1a: 7f:bb:98:7c:5a:85:d9:c3:07:b0:7e:60:3f:e1:11: d6:3a:84:fe:82:61:9d:47:80:47:6a:a9:ef:37:d7: 1d:78:30:af:6c:91:88:e3:40:ec:3a:a5:7d:45:5e: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:95:09:CC:BB:C8:87:7E:F1:2A:3B:D8:C8:F3:4C:95:7C:C4:68:74 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:5a:55:da:3e:ba:47:3f:a5:fd:36:82:17:cd:eb:ab:0e:0f: a5:a3:7a:e7:da:08:ca:b2:d4:28:85:09:3c:56:ff:2d:fa:6d: 71:a4:af:24:27:93:fb:1e:8e:41:a4:56:28:20:0a:c5:81:19: 96:7c:7f:29:20:63:0b:3a:73:7d:f6:60:f4:20:03:c3:5c:f0: 5a:68:f2:09:9d:7e:c8:40:88:9a:51:7e:a5:8e:0a:da:13:bf: f8:6a:4f:e8:56:dd:f3:61:e0:4d:86:a5:63:39:c3:1b:22:7c: 8f:5a:e6:f0:d0:36:a8:5c:6d:2a:a5:c9:f9:53:2f:0b:aa:16: d5:0c:98:e5:ce:63:44:07:74:ad:eb:45:a4:9f:d5:3b:b1:ee: fb:0f:3a:12:7e:c4:c2:d1:41:61:6b:72:59:69:b7:ad:a4:39: 73:8c:6d:ef:92:29:4d:35:b7:0e:ed:52:b3:b5:73:63:5e:ea: 9c:ef:ec:6f:2d:62:08:af:76:04:90:02:2b:b6:c8:26:91:bd: b8:51:4a:e3:b0:25:7a:32:e1:22:da:56:72:77:02:59:8d:11: 32:d9:e6:89:69:b3:82:e8:e3:30:8d:ce:e4:16:6a:d3:08:3c: b2:e1:2e:4a:4e:43:92:2b:8b:13:7e:ce:58:25:cf:0f:2b:eb: f4:b5:84:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwNDA0MTg0MzUwWhcNMjYwNDExMTg0MzUwWjAYMRYwFAYD VQQDEw02OWQxNWJlNy1jZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ2CiCLoeT45ql8cpgJgWnKuOjjQ5Cx2+idD/7i6EaXKaJsXTGMQuhe5FCD1 9OdypOS3+ou086PgZQBrVMEPxm5hvQeIlq0W3deI3V5pGlqEzil3icnaJzOy+Kn2 6XdXWAxZ2iC4HYrfzrBgnF6SV1CZX7IEMkZ5ZQg+oiCVA7YarX/gJyEvbUImNolE njR9lRFrnwT45CM9p2w75K+sryoWGRc18dxhAOJDgdAzp1HCk/WWgTiqxL1DDJMv m7iSA0NaNr0qlXfPw8Hdx/zgcRp/u5h8WoXZwwewfmA/4RHWOoT+gmGdR4BHaqnv N9cdeDCvbJGI40DsOqV9RV71AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGVCcy7 yId+8So72MjzTJV8xGh0MB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeFpV2j66Rz+l/TaCF83rqw4PpaN659oIyrLUKIUJPFb/LfptcaSvJCeT+x6O QaRWKCAKxYEZlnx/KSBjCzpzffZg9CADw1zwWmjyCZ1+yECImlF+pY4K2hO/+GpP 6Fbd82HgTYalYznDGyJ8j1rm8NA2qFxtKqXJ+VMvC6oW1QyY5c5jRAd0retFpJ/V O7Hu+w86En7EwtFBYWtyWWm3raQ5c4xt75IpTTW3Du1Ss7VzY17qnO/sby1iCK92 BJACK7bIJpG9uFFK47AlejLhItpWcncCWY0RMtnmiWmzgujjMI3O5BZq0wg8suEu Sk5DkiuLE37OWCXPDyvr9LWETQ== -----END CERTIFICATE-----Generated at Sun Apr 5 18:06:50 2026 by rpki-client