$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: Vc2yn9VsgWctEA1kgELXtGOea7UIuQiEp+Mw2kuaY7k= Subject key identifier: 95:E8:73:D4:61:04:21:84:4C:29:06:7E:2B:61:82:AD:DE:45:CD:7E Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C56 Signing time: Thu 24 Sep 2026 18:43:13 +0000 Manifest this update: Thu 24 Sep 2026 18:43:12 +0000 Manifest next update: Thu 01 Oct 2026 18:43:12 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: vNZYt+0Qp8VD3V3FZ7Sol5+2LaykYUpeRC88EAFhd9g=) 2: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 3: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 4: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Sep 24 18:43:12 2026 GMT Not After : Oct 1 18:43:12 2026 GMT Subject: CN=6ab56f41-652e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:bf:f3:3d:27:4a:1d:d0:49:4e:43:8e:50: c8:0c:43:67:93:6a:09:cd:f3:25:2a:e4:fb:27:12: 10:5f:65:ca:8e:e0:b4:fe:e1:f9:20:5f:2b:bf:34: a2:12:67:a3:5b:df:e6:ef:88:8e:7a:7e:97:49:7c: cd:de:69:de:de:b4:53:3f:22:5f:78:42:95:ba:4c: 8f:c5:2a:24:0e:e9:5f:9a:3f:ab:6d:67:f7:3f:91: f4:d7:27:60:1a:8d:42:9e:c8:24:2e:92:e6:43:64: 28:87:54:d2:25:b7:2c:0f:15:7d:c8:f3:89:7c:95: 0b:d8:16:d7:11:14:c6:12:06:34:4c:4d:b6:03:6b: 33:99:45:41:77:ef:1f:df:e8:fb:20:01:bc:c0:88: 79:b7:11:6f:ef:ec:eb:c1:13:90:23:94:a8:24:44: 82:06:91:9b:c5:26:9f:0b:84:8c:4d:9a:4e:04:09: 59:b2:80:69:ff:4c:65:a6:ca:9d:91:dd:37:4a:8b: 24:4f:fb:2a:56:02:4d:ac:78:10:90:f7:29:b5:1c: 8b:6d:86:08:46:91:66:00:7e:97:49:8d:24:6d:2b: 82:11:9c:f0:ff:9e:ea:15:3f:b9:ac:67:39:60:5e: 48:4a:68:a4:07:d3:0f:6e:4c:55:60:b8:c3:3c:b8: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:73:D4:61:04:21:84:4C:29:06:7E:2B:61:82:AD:DE:45:CD:7E X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f4:b3:c5:e6:0f:78:c7:55:6e:51:18:32:60:50:fc:b6:8a: 62:59:14:97:d5:a0:77:f8:e2:0f:4e:70:e9:09:82:d2:26:43: 06:66:04:34:42:92:8d:b0:a5:ef:0e:91:08:18:dc:a2:f0:c0: 41:da:aa:77:14:25:be:8b:17:80:b1:54:c6:d1:1b:ac:ad:61: 68:7b:9e:f1:37:36:fd:ea:3e:5f:18:c9:16:1d:9d:4d:bc:53: 7c:71:85:85:3d:c2:83:ca:db:53:37:36:6c:a5:ed:00:0e:c3: 6e:34:b3:aa:b6:62:aa:40:bc:64:68:61:04:ae:51:ae:eb:f5: c3:84:1f:8a:a5:05:62:1b:35:a1:71:e7:8b:fe:47:72:7d:b6: a8:5f:f0:e7:cf:70:db:cb:d8:82:37:81:c6:c3:20:27:76:ec: 34:8a:87:6d:bf:83:fa:53:bc:44:5b:00:79:61:5d:07:4c:ea: 46:41:eb:a9:7f:b3:6c:78:c0:d8:de:cf:0b:3b:29:a5:fd:0b: 59:5a:d4:c4:6e:27:6a:20:8d:0c:4c:fe:63:6a:79:14:a0:05: 36:66:38:50:47:21:a9:2d:56:7e:6d:c0:00:9b:de:c6:bf:33: 60:36:63:3b:0a:12:3c:e2:e1:99:44:14:b9:b4:42:15:9f:bf: c0:45:d3:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwOTI0MTg0MzEyWhcNMjYxMDAxMTg0MzEyWjAYMRYwFAYD VQQDEw02YWI1NmY0MS02NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf6/8z0nSh3QSU5DjlDIDENnk2oJzfMlKuT7JxIQX2XKjuC0/uH5IF8rvzSi EmejW9/m74iOen6XSXzN3mne3rRTPyJfeEKVukyPxSokDulfmj+rbWf3P5H01ydg Go1CnsgkLpLmQ2Qoh1TSJbcsDxV9yPOJfJUL2BbXERTGEgY0TE22A2szmUVBd+8f 3+j7IAG8wIh5txFv7+zrwROQI5SoJESCBpGbxSafC4SMTZpOBAlZsoBp/0xlpsqd kd03SoskT/sqVgJNrHgQkPcptRyLbYYIRpFmAH6XSY0kbSuCEZzw/57qFT+5rGc5 YF5ISmikB9MPbkxVYLjDPLj9uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXoc9Rh BCGETCkGfithgq3eRc1+MB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvSzxeYPeMdVblEYMmBQ/LaKYlkUl9Wgd/jiD05w6QmC0iZDBmYENEKSjbCl 7w6RCBjcovDAQdqqdxQlvosXgLFUxtEbrK1haHue8Tc2/eo+XxjJFh2dTbxTfHGF hT3Cg8rbUzc2bKXtAA7DbjSzqrZiqkC8ZGhhBK5Rruv1w4QfiqUFYhs1oXHni/5H cn22qF/w589w28vYgjeBxsMgJ3bsNIqHbb+D+lO8RFsAeWFdB0zqRkHrqX+zbHjA 2N7PCzsppf0LWVrUxG4naiCNDEz+Y2p5FKAFNmY4UEchqS1Wfm3AAJvexr8zYDZj OwoSPOLhmUQUubRCFZ+/wEXTAA== -----END CERTIFICATE-----Generated at Fri Sep 25 21:51:16 2026 by rpki-client