$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: 2MuvDsFOn63uh3rMAMwXpKttfFnHAyb79+3NbfEQrVU= Subject key identifier: 3B:2E:7D:D1:97:3F:60:F7:B0:9D:01:DC:AE:77:56:0E:46:0B:DF:23 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C2C Signing time: Sat 04 Jul 2026 18:55:59 +0000 Manifest this update: Sat 04 Jul 2026 18:55:59 +0000 Manifest next update: Sat 11 Jul 2026 18:55:59 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: qsrPCT3FpzzgXSmJFxjUNjKtVQ4n6XsHIhnJnuxAjYA=) 2: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 4: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 18:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Jul 4 18:55:59 2026 GMT Not After : Jul 11 18:55:59 2026 GMT Subject: CN=6a49573f-ce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:7b:26:26:ad:1f:c8:48:19:15:3c:75:9c: b6:27:c1:8e:09:72:27:41:38:da:79:84:8e:e7:21: ae:66:d3:59:ac:1b:9a:7a:28:38:fa:1b:e8:f4:d4: 07:20:93:88:92:b3:29:5f:19:50:c7:c3:3f:3c:c9: 76:bf:eb:0c:1c:68:eb:69:82:e6:67:28:20:41:a9: 7a:71:3c:f8:c5:5b:17:3e:a3:58:57:99:2b:dd:b4: 44:fc:ac:d3:94:17:c7:ca:b4:35:44:b0:69:e6:db: ad:d7:41:11:91:f2:66:5b:4d:c1:26:90:37:ba:8e: af:ad:bc:ed:22:12:cf:92:87:85:e1:5e:43:2c:ac: 54:f4:78:9b:ab:31:d0:2e:9a:45:7c:37:b8:f5:61: 3a:88:26:ef:53:55:77:b2:87:49:38:8e:13:8b:f7: 86:4b:89:0d:69:9c:b2:61:af:40:2b:a9:05:29:51: f3:ef:df:67:cb:bc:b4:b7:c6:51:56:e9:a5:fa:f2: d5:98:67:cd:62:b4:b9:57:63:4a:c6:11:e0:ca:06: 60:01:71:b2:bb:43:c8:04:c4:7a:1e:51:07:ff:8c: 7e:cd:ee:ba:f6:0d:53:e6:d1:55:7a:ef:46:33:75: e4:55:fc:99:e9:77:61:30:d9:cd:a8:e2:7d:64:1d: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:7D:D1:97:3F:60:F7:B0:9D:01:DC:AE:77:56:0E:46:0B:DF:23 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0b:c9:5d:30:11:8c:bd:48:65:e9:8b:bd:24:6d:2c:bd:a6: 5c:df:82:58:6c:3f:53:87:e3:19:4d:7a:74:80:55:7c:d8:0c: e7:ac:fa:5c:6c:ff:dd:d8:e7:d2:85:a7:f7:8d:db:fe:61:de: 4e:48:cc:43:31:d5:a8:1b:87:d0:c8:3f:a0:0f:e0:27:50:21: 80:0d:9e:75:92:70:fc:b4:01:9a:e0:0d:d7:e4:0a:91:78:8a: 12:96:fa:98:c1:d7:b8:f4:25:84:db:8c:98:eb:c9:11:d0:a4: af:56:34:bc:be:69:c6:2e:f4:1c:99:64:32:aa:d5:a9:10:e9: e9:50:c7:05:3d:70:4e:de:27:37:f4:a9:bf:b2:29:f3:f7:81: b5:0e:28:96:37:63:7b:e5:63:0d:6d:34:3a:9b:60:b2:21:28: 84:39:db:ac:35:85:93:26:cf:57:be:b2:4c:21:c2:98:1e:ce: 48:3f:07:3b:35:d7:32:c7:7d:54:1f:cb:4d:4f:6f:82:1c:54: 65:66:5d:af:88:95:c8:fe:9c:93:f6:20:86:06:1f:4e:ba:e9: f7:79:22:b1:e7:17:9e:cb:80:68:50:1a:96:d2:47:fa:eb:86: dc:0a:bc:ed:56:a0:af:5f:5e:a2:c9:04:e6:95:d5:9a:67:f2: 55:2b:d1:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwNzA0MTg1NTU5WhcNMjYwNzExMTg1NTU5WjAYMRYwFAYD VQQDEw02YTQ5NTczZi1jZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgZ7JiatH8hIGRU8dZy2J8GOCXInQTjaeYSO5yGuZtNZrBuaeig4+hvo9NQH IJOIkrMpXxlQx8M/PMl2v+sMHGjraYLmZyggQal6cTz4xVsXPqNYV5kr3bRE/KzT lBfHyrQ1RLBp5tut10ERkfJmW03BJpA3uo6vrbztIhLPkoeF4V5DLKxU9HibqzHQ LppFfDe49WE6iCbvU1V3sodJOI4Ti/eGS4kNaZyyYa9AK6kFKVHz799ny7y0t8ZR Vuml+vLVmGfNYrS5V2NKxhHgygZgAXGyu0PIBMR6HlEH/4x+ze669g1T5tFVeu9G M3XkVfyZ6XdhMNnNqOJ9ZB2XYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsufdGX P2D3sJ0B3K53Vg5GC98jMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwgvJXTARjL1IZemLvSRtLL2mXN+CWGw/U4fjGU16dIBVfNgM56z6XGz/3djn 0oWn943b/mHeTkjMQzHVqBuH0Mg/oA/gJ1AhgA2edZJw/LQBmuAN1+QKkXiKEpb6 mMHXuPQlhNuMmOvJEdCkr1Y0vL5pxi70HJlkMqrVqRDp6VDHBT1wTt4nN/Spv7Ip 8/eBtQ4oljdje+VjDW00OptgsiEohDnbrDWFkybPV76yTCHCmB7OSD8HOzXXMsd9 VB/LTU9vghxUZWZdr4iVyP6ck/YghgYfTrrp93kisecXnsuAaFAaltJH+uuG3Aq8 7Vagr19eoskE5pXVmmfyVSvRKA== -----END CERTIFICATE-----Generated at Sun Jul 5 11:18:40 2026 by rpki-client