$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: FxUvyBrElXyT1JcUXU7zyxqoC5ktdxa1pF4RNSeHKXw= Subject key identifier: DB:CD:9E:E7:CB:49:CA:C2:86:6F:B5:4F:E0:DD:D4:C7:D1:A3:56:7D Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 04E4 Signing time: Thu 04 Jun 2026 23:57:09 +0000 Manifest this update: Thu 04 Jun 2026 23:57:08 +0000 Manifest next update: Thu 11 Jun 2026 23:57:08 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: kb/ETwSMc1wUSg403CWnU27yBqSpytBr0uld8egJjQw=) 2: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=) 3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=) 4: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Jun 4 23:57:08 2026 GMT Not After : Jun 11 23:57:08 2026 GMT Subject: CN=6a2210d5-f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:7d:f6:9f:ce:c2:e0:86:80:85:be:ac:a9: 00:fe:17:b8:8a:5a:b8:20:af:8d:86:3d:6d:27:15: ba:bc:c3:f2:8c:ac:66:89:91:14:44:23:23:f8:c3: 25:c2:2e:6f:8f:c6:1a:f3:a0:79:71:6d:90:5a:f0: 15:a6:97:f7:4c:5a:5c:a2:eb:f2:35:7c:d5:ff:76: fd:f3:c8:34:28:ae:c2:4a:ec:46:fe:1f:96:33:28: 56:a0:60:9d:7e:d5:4a:ad:07:6b:c5:4c:9b:e5:3e: 52:56:0e:47:38:93:23:7e:c7:22:f8:df:52:0b:84: 7b:1b:63:9f:aa:05:6c:ef:a2:02:1a:f7:22:cf:d2: a3:c3:ed:ae:60:b3:71:4d:cf:69:d6:0d:82:2e:a2: 9e:92:05:d1:db:ef:03:ed:93:f1:e9:b3:7f:38:8d: ef:73:48:1f:a9:10:4d:16:32:c9:be:7b:bf:6a:30: f1:da:e9:eb:80:4d:63:88:2b:22:44:21:e4:99:9a: e3:1b:c9:64:69:29:84:e1:1d:8b:4b:60:64:78:3d: c2:0d:d8:f7:4e:d9:51:7a:de:fb:0f:76:47:08:81: 4f:a8:11:f8:57:a3:06:f1:dc:75:17:67:2f:bc:e4: 91:f9:8b:3d:22:c2:a5:b7:42:68:e5:5f:11:98:fe: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:9E:E7:CB:49:CA:C2:86:6F:B5:4F:E0:DD:D4:C7:D1:A3:56:7D X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d1:18:08:be:21:46:4c:33:95:02:2f:ab:41:16:02:16:c4: d0:fb:a6:89:54:f3:45:b9:32:a7:88:a1:51:6f:97:ef:76:a3: 43:41:ae:87:ac:02:e4:bd:ef:41:3f:4e:72:10:1c:5e:93:2d: 2f:cb:f4:cc:9c:9f:bf:b9:0c:ef:a4:af:93:f1:96:f4:84:0e: eb:0f:b3:4a:21:09:b7:c7:ca:ee:87:e8:b6:35:be:f5:5b:9d: e0:eb:e9:46:f2:37:3b:01:ad:e1:72:81:64:03:0b:32:b1:3d: 7c:55:af:a9:bb:9b:0c:d2:94:84:0e:d6:e7:c2:76:88:57:c0: 8d:76:2e:f5:a7:21:71:9f:f0:f3:90:aa:1b:6e:c9:a5:4b:96: 5b:c9:be:3e:8e:bc:16:f1:ff:92:a4:f1:2c:db:d5:27:2e:52: dd:e5:7c:81:17:25:5e:eb:42:77:e8:20:2d:45:2f:39:4f:fd: 39:ed:f0:44:e0:97:c0:76:fe:30:aa:7d:47:75:ec:66:07:d7: f7:8f:70:38:e4:b9:36:50:9b:85:3d:e9:8b:c5:a0:d1:05:ae: 63:e8:a9:61:51:36:dd:c6:70:95:92:f1:20:20:b1:ad:be:73: 0a:c4:dd:af:f0:a9:fc:94:40:a3:cf:bb:c9:fc:5a:33:7c:d8: a1:a1:48:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYwNjA0MjM1NzA4WhcNMjYwNjExMjM1NzA4WjAYMRYwFAYD VQQDEw02YTIyMTBkNS1mMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPB99p/OwuCGgIW+rKkA/he4ilq4IK+Nhj1tJxW6vMPyjKxmiZEURCMj+MMl wi5vj8Ya86B5cW2QWvAVppf3TFpcouvyNXzV/3b988g0KK7CSuxG/h+WMyhWoGCd ftVKrQdrxUyb5T5SVg5HOJMjfsci+N9SC4R7G2OfqgVs76ICGvciz9Kjw+2uYLNx Tc9p1g2CLqKekgXR2+8D7ZPx6bN/OI3vc0gfqRBNFjLJvnu/ajDx2unrgE1jiCsi RCHkmZrjG8lkaSmE4R2LS2BkeD3CDdj3TtlRet77D3ZHCIFPqBH4V6MG8dx1F2cv vOSR+Ys9IsKlt0Jo5V8RmP7Z9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvNnufL ScrChm+1T+Dd1MfRo1Z9MB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABdEYCL4hRkwzlQIvq0EWAhbE0PumiVTzRbkyp4ihUW+X73ajQ0Guh6wC5L3v QT9OchAcXpMtL8v0zJyfv7kM76Svk/GW9IQO6w+zSiEJt8fK7ofotjW+9Vud4Ovp RvI3OwGt4XKBZAMLMrE9fFWvqbubDNKUhA7W58J2iFfAjXYu9achcZ/w85CqG27J pUuWW8m+Po68FvH/kqTxLNvVJy5S3eV8gRclXutCd+ggLUUvOU/9Oe3wROCXwHb+ MKp9R3XsZgfX949wOOS5NlCbhT3pi8Wg0QWuY+ipYVE23cZwlZLxICCxrb5zCsTd r/Cp/JRAo8+7yfxaM3zYoaFIhg== -----END CERTIFICATE-----Generated at Sat Jun 6 16:51:08 2026 by rpki-client