$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: kbu5tn8yz6Hl0dqd8WjfoEkVuJbvhZJP5CgbZMg/KMY= Subject key identifier: 0F:06:6B:58:E5:7C:05:24:2C:21:07:BC:5C:27:72:B3:CB:A3:B8:8A Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 04CD Signing time: Mon 20 Apr 2026 23:51:45 +0000 Manifest this update: Mon 20 Apr 2026 23:51:44 +0000 Manifest next update: Mon 27 Apr 2026 23:51:44 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: K7NeHN/ZEU/xsfX2Gt3UYHH6UL2oTb/GMGf2Q63vIto=) 2: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=) 3: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=) 4: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Apr 20 23:51:44 2026 GMT Not After : Apr 27 23:51:44 2026 GMT Subject: CN=69e6bc10-c1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:fb:0b:ae:a4:c8:3b:ca:d6:1a:21:a7:b2: e7:b6:39:ca:48:4a:25:db:85:e7:d0:63:76:a0:9b: 72:e6:5d:26:fc:25:5c:2b:11:48:62:dc:4f:19:16: c2:97:b5:42:d1:0b:d8:14:f6:e8:2c:8b:c6:d3:c6: d8:d6:12:47:5a:46:0f:d1:3e:f7:f6:f3:7e:3c:ad: 1e:7c:f1:1c:8b:02:37:af:7f:26:d8:e5:64:55:08: 5a:d6:bb:67:81:ba:60:7a:ad:46:18:29:86:59:5c: c8:40:b1:f8:6d:84:fd:ae:d1:dc:c6:99:b7:d2:62: 9c:d4:35:b0:d2:a4:5b:17:7a:29:7f:1f:60:f6:fa: 47:03:48:c1:dc:fe:79:2a:77:5b:04:58:c1:f3:a3: 00:d5:87:10:6b:d5:b8:54:36:89:fa:37:5f:bb:d1: 75:99:1a:5e:54:26:87:a8:b5:7a:4c:74:9d:f5:d4: 51:33:89:8b:68:93:8b:44:c7:0e:0a:e4:b0:28:ae: e6:94:79:b7:14:ab:fd:d5:34:95:0c:7b:63:d2:db: 36:11:6f:f6:c0:0c:46:40:48:b8:78:83:3b:d6:e1: 12:3b:5c:33:b0:37:79:a6:e1:03:12:7c:aa:cf:21: 86:b1:a5:a1:9f:b7:89:bd:05:8d:3d:d2:b8:ae:7b: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:6B:58:E5:7C:05:24:2C:21:07:BC:5C:27:72:B3:CB:A3:B8:8A X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fa:c9:cb:50:65:f6:7c:1d:09:b7:55:3f:52:22:e8:44:14: 2b:85:5d:07:ed:11:21:21:f6:fc:6d:22:8e:92:59:ea:b1:4c: 5f:c4:d7:56:08:5c:0b:c9:05:e0:03:50:6d:ba:ba:0f:ce:f3: 4f:a9:bf:ec:14:f9:c7:89:3c:48:68:18:8d:fd:0d:c9:7f:ae: dd:03:5b:17:af:74:75:8a:56:32:51:21:45:e1:df:32:90:1e: 34:0e:77:4d:c3:32:cb:96:4a:88:4b:5c:af:e9:8c:15:e6:01: cc:60:ad:e6:67:79:18:38:ec:49:96:8f:86:27:27:9c:4a:55: 63:97:20:3c:a0:a6:93:bb:7f:b6:8e:c0:b4:d4:37:fa:53:fa: e1:9f:c7:f1:a7:2a:94:73:58:92:8e:7f:74:c7:df:c4:93:59: 35:44:4e:8c:f0:f5:74:7d:94:4e:a7:84:b5:58:37:29:99:b6: 6a:58:b0:f8:02:69:f1:79:88:83:51:6c:49:0f:a0:81:49:cd: 5b:74:29:18:c2:13:0d:99:53:aa:38:8e:5a:cb:c8:d9:a7:85: 0e:1e:b5:c1:10:a5:69:01:92:d2:37:ac:40:f4:2a:50:e9:99: 1a:ea:70:c3:93:a1:8d:ba:7a:5f:85:6a:d3:8d:a6:95:0c:e7: 77:df:05:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYwNDIwMjM1MTQ0WhcNMjYwNDI3MjM1MTQ0WjAYMRYwFAYD VQQDEw02OWU2YmMxMC1jMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx37C66kyDvK1hohp7LntjnKSEol24Xn0GN2oJty5l0m/CVcKxFIYtxPGRbC l7VC0QvYFPboLIvG08bY1hJHWkYP0T739vN+PK0efPEciwI3r38m2OVkVQha1rtn gbpgeq1GGCmGWVzIQLH4bYT9rtHcxpm30mKc1DWw0qRbF3opfx9g9vpHA0jB3P55 KndbBFjB86MA1YcQa9W4VDaJ+jdfu9F1mRpeVCaHqLV6THSd9dRRM4mLaJOLRMcO CuSwKK7mlHm3FKv91TSVDHtj0ts2EW/2wAxGQEi4eIM71uESO1wzsDd5puEDEnyq zyGGsaWhn7eJvQWNPdK4rntvPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8Ga1jl fAUkLCEHvFwncrPLo7iKMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk/rJy1Bl9nwdCbdVP1Ii6EQUK4VdB+0RISH2/G0ijpJZ6rFMX8TXVghcC8kF 4ANQbbq6D87zT6m/7BT5x4k8SGgYjf0NyX+u3QNbF690dYpWMlEhReHfMpAeNA53 TcMyy5ZKiEtcr+mMFeYBzGCt5md5GDjsSZaPhicnnEpVY5cgPKCmk7t/to7AtNQ3 +lP64Z/H8acqlHNYko5/dMffxJNZNUROjPD1dH2UTqeEtVg3KZm2aliw+AJp8XmI g1FsSQ+ggUnNW3QpGMITDZlTqjiOWsvI2aeFDh61wRClaQGS0jesQPQqUOmZGupw w5Ohjbp6X4Vq042mlQznd98FYQ== -----END CERTIFICATE-----Generated at Wed Apr 22 10:51:17 2026 by rpki-client