$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: csGgSs5Ld00+R1ITA1aoDJrne5E5nQv/F3jg+VR4CNg= Subject key identifier: B9:2C:99:26:3F:6D:D3:54:35:CC:F8:B2:1F:F4:13:C1:E5:2E:F9:21 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C5E Signing time: Sat 10 Oct 2026 18:48:42 +0000 Manifest this update: Sat 10 Oct 2026 18:48:41 +0000 Manifest next update: Sat 17 Oct 2026 18:48:41 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 4AHcwOvcFdU8KHN9kvRGMxCkD6Jxq37hMIlIGR/q1MU=) 2: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 3: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 4: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Oct 10 18:48:41 2026 GMT Not After : Oct 17 18:48:41 2026 GMT Subject: CN=6aca8889-7fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:87:05:09:63:8e:5b:40:1b:7a:23:69:6b: 0f:a3:03:4d:fa:8e:18:e6:26:f6:8f:4a:cd:47:95: 92:28:12:5f:cd:0f:9b:eb:cd:d5:bc:87:69:66:3e: 30:13:58:88:17:9d:63:29:5b:f6:6e:20:e2:dd:86: ad:df:4e:31:39:b0:58:3c:01:d1:6e:aa:bf:46:42: 14:fe:67:bb:43:15:1c:16:99:a8:38:70:6a:d7:bc: 89:38:5a:0a:16:24:d4:e3:70:3d:92:bb:96:3d:ab: b8:2f:17:e6:2a:f9:34:a7:78:cb:52:11:1e:fc:68: cd:4e:8b:10:33:5c:3e:fe:06:59:8c:1e:e5:23:c2: b5:78:b6:8c:3d:53:0b:0e:ba:89:89:82:93:25:77: ed:d2:83:e8:ea:64:72:db:5d:8c:fd:1c:1b:04:ee: 19:c2:cf:b6:55:13:c3:dc:0e:7a:18:c8:89:34:a0: 80:5f:55:1c:a9:b5:00:90:e5:f3:1a:68:c0:a9:7c: 5d:e7:29:dc:98:ff:dd:ce:36:8a:fb:62:19:33:78: 1e:f4:12:f9:9f:45:86:95:1a:9a:48:6c:62:90:1a: 3a:da:82:0c:d0:f9:66:ac:ea:fc:45:da:3b:7c:3a: 03:62:7a:22:ff:0b:e1:c8:2f:48:fb:a5:a7:0c:3c: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:99:26:3F:6D:D3:54:35:CC:F8:B2:1F:F4:13:C1:E5:2E:F9:21 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a4:c6:14:14:24:d6:46:e5:45:a4:59:20:44:18:e9:70:63: de:41:fe:8f:29:be:f9:57:44:22:32:34:3e:37:8d:a4:49:6d: 45:ab:ff:00:7d:58:d5:43:29:9f:ea:9d:4e:7c:34:94:71:20: 7e:86:b9:46:b8:93:59:86:7a:ab:38:b0:3e:dc:5a:35:00:ff: 7c:a2:f4:23:c7:b0:e3:08:f9:78:8e:77:77:d5:ee:82:ba:93: a8:1d:d5:a1:fc:db:27:60:b2:86:4f:12:fd:4a:e2:78:30:c9: cc:02:6f:29:75:d8:77:b5:6a:25:0f:0e:c8:5b:2e:4b:3a:78: a1:02:af:76:02:d2:a0:6e:3f:c5:b4:90:74:09:68:cb:7f:b1: b5:36:b7:e5:bf:b8:17:07:7c:2f:6b:b6:2e:6f:1a:aa:e3:b9: a5:fa:c6:83:9e:0c:a0:5f:ac:54:7b:1d:2d:2e:31:c4:b1:a9: 13:97:bc:8f:cf:ac:46:68:ff:9e:f5:4f:47:5a:a3:9a:73:a8: c1:bb:26:37:b2:61:27:2f:91:8f:93:c9:ce:56:d6:23:e8:45: 99:60:b0:51:8a:e3:34:41:71:67:22:16:f6:f5:f9:7e:6f:0c: 5b:fc:29:73:f4:a6:ca:7b:10:04:c4:de:96:b5:27:a8:e3:45: d9:16:50:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYxMDEwMTg0ODQxWhcNMjYxMDE3MTg0ODQxWjAYMRYwFAYD VQQDEw02YWNhODg4OS03ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwamHBQljjltAG3ojaWsPowNN+o4Y5ib2j0rNR5WSKBJfzQ+b683VvIdpZj4w E1iIF51jKVv2biDi3Yat304xObBYPAHRbqq/RkIU/me7QxUcFpmoOHBq17yJOFoK FiTU43A9kruWPau4LxfmKvk0p3jLUhEe/GjNTosQM1w+/gZZjB7lI8K1eLaMPVML DrqJiYKTJXft0oPo6mRy212M/RwbBO4Zws+2VRPD3A56GMiJNKCAX1UcqbUAkOXz GmjAqXxd5yncmP/dzjaK+2IZM3ge9BL5n0WGlRqaSGxikBo62oIM0PlmrOr8Rdo7 fDoDYnoi/wvhyC9I+6WnDDytCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLksmSY/ bdNUNcz4sh/0E8HlLvkhMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsqTGFBQk1kblRaRZIEQY6XBj3kH+jym++VdEIjI0PjeNpEltRav/AH1Y1UMp n+qdTnw0lHEgfoa5RriTWYZ6qziwPtxaNQD/fKL0I8ew4wj5eI53d9XugrqTqB3V ofzbJ2Cyhk8S/UrieDDJzAJvKXXYd7VqJQ8OyFsuSzp4oQKvdgLSoG4/xbSQdAlo y3+xtTa35b+4Fwd8L2u2Lm8aquO5pfrGg54MoF+sVHsdLS4xxLGpE5e8j8+sRmj/ nvVPR1qjmnOowbsmN7JhJy+Rj5PJzlbWI+hFmWCwUYrjNEFxZyIW9vX5fm8MW/wp c/SmynsQBMTelrUnqONF2RZQsQ== -----END CERTIFICATE-----Generated at Mon Oct 12 02:43:50 2026 by rpki-client