$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: KH5eK8cNGwQjRlGneSRJVPVApEWHIuw41/Bvfl+MT6A= Subject key identifier: E3:8B:E3:EA:5B:45:1B:AE:7E:1C:D2:3C:E8:0E:2B:B5:E9:4B:B3:8C Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0BF7 Signing time: Tue 24 Mar 2026 18:43:55 +0000 Manifest this update: Tue 24 Mar 2026 18:43:54 +0000 Manifest next update: Tue 31 Mar 2026 18:43:54 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: tplUJwmnI5yrXsPkp3aJosGgbtm35wvZWr51zuRCcWE=) 2: CAB386681C3311F19EABC196373D8C67.roa (hash: J4riWubPKr57eZVqrue5ySz8Y0IlTyIyrOs2tnZFI0k=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) 4: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Mar 24 18:43:54 2026 GMT Not After : Mar 31 18:43:54 2026 GMT Subject: CN=69c2db6a-fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:2a:90:9f:5d:82:a9:ff:a4:c1:75:1c:8f: 4e:14:54:53:59:9b:47:3a:dc:52:9d:64:6d:01:d9: fd:c8:85:72:7f:4e:24:3b:8a:b6:96:85:43:3d:e5: c2:ce:2a:09:d8:f9:56:62:2c:12:03:2c:ba:af:d6: 55:c8:46:f6:13:22:a6:9d:a9:8d:74:34:ea:98:05: 3d:c2:75:9e:a4:95:62:94:be:21:c9:c6:6b:3a:d6: 09:56:d1:07:4d:bf:63:61:eb:39:4a:00:d3:99:17: 37:16:7b:a3:ef:22:98:f2:d4:61:f6:d7:de:b8:cc: b1:61:b7:c5:25:c5:b7:6f:47:c0:88:e5:5d:c9:4c: 1b:e8:8c:08:ac:88:c7:8c:36:2b:71:d3:0d:ff:b4: 35:74:19:02:77:17:09:9f:97:9f:1c:9b:76:69:ce: 1f:9e:b9:cd:1b:2d:69:ed:aa:46:dc:5b:65:cd:af: 14:b1:c7:5f:f4:27:05:f9:66:d9:e8:f3:35:eb:3d: c4:e7:35:56:61:d4:18:09:a0:f7:d4:06:e6:ae:d3: 31:4d:91:e8:1d:1a:3e:55:60:99:f4:f7:d2:d7:2a: 22:73:e2:9b:41:f9:b9:db:34:a6:19:88:5a:64:79: 07:25:80:eb:20:88:e9:de:c4:ce:62:31:da:f2:66: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:E3:EA:5B:45:1B:AE:7E:1C:D2:3C:E8:0E:2B:B5:E9:4B:B3:8C X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b4:46:ba:22:29:59:c8:a1:15:02:1c:10:16:d3:27:30:14: aa:7b:9d:93:52:3b:d8:a3:87:46:59:4b:d9:ba:28:83:7f:d3: c8:c1:47:25:6f:85:8b:27:a7:df:48:1f:39:e7:ff:bb:1b:3f: a5:c0:cb:9f:2e:c5:c7:ff:ef:19:fc:ed:ff:72:85:fb:4f:43: 8d:3b:ee:61:43:69:44:47:fc:c9:b0:98:8b:ba:cf:67:1e:04: fc:b9:b2:e8:07:1f:56:75:d2:1c:c9:a7:39:94:86:c6:20:df: 6b:1d:72:43:8b:23:f3:32:f7:da:8c:d0:3e:07:6d:49:a9:5f: ae:4d:c6:94:0e:a5:77:0b:7a:be:f6:b8:df:b6:29:cb:6a:f2: d7:7d:f8:03:12:c9:da:51:5f:cd:3f:69:43:44:39:16:09:c6: 47:71:52:48:1a:22:c5:c1:14:2b:a4:e5:dc:26:c2:19:28:ee: b4:42:e3:2f:f8:bb:ac:b3:c7:e9:8c:59:bb:23:e9:50:04:5f: 1e:4b:4c:b9:ae:5f:91:b8:03:cc:a4:b4:b3:e2:48:db:f0:2d: 20:c9:5a:7e:a9:c6:d7:60:0c:ae:1a:53:fb:f6:b6:77:57:42: 8a:11:9a:4a:73:e3:4d:4a:8f:f8:e6:00:89:c7:0d:cd:e0:6e: eb:e5:56:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwMzI0MTg0MzU0WhcNMjYwMzMxMTg0MzU0WjAYMRYwFAYD VQQDEw02OWMyZGI2YS1mZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFkqkJ9dgqn/pMF1HI9OFFRTWZtHOtxSnWRtAdn9yIVyf04kO4q2loVDPeXC zioJ2PlWYiwSAyy6r9ZVyEb2EyKmnamNdDTqmAU9wnWepJVilL4hycZrOtYJVtEH Tb9jYes5SgDTmRc3Fnuj7yKY8tRh9tfeuMyxYbfFJcW3b0fAiOVdyUwb6IwIrIjH jDYrcdMN/7Q1dBkCdxcJn5efHJt2ac4fnrnNGy1p7apG3Ftlza8Uscdf9CcF+WbZ 6PM16z3E5zVWYdQYCaD31AbmrtMxTZHoHRo+VWCZ9PfS1yoic+KbQfm52zSmGYha ZHkHJYDrIIjp3sTOYjHa8mYC9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOL4+pb RRuufhzSPOgOK7XpS7OMMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXLRGuiIpWcihFQIcEBbTJzAUqnudk1I72KOHRllL2boog3/TyMFHJW+Fiyen 30gfOef/uxs/pcDLny7Fx//vGfzt/3KF+09DjTvuYUNpREf8ybCYi7rPZx4E/Lmy 6AcfVnXSHMmnOZSGxiDfax1yQ4sj8zL32ozQPgdtSalfrk3GlA6ldwt6vva437Yp y2ry1334AxLJ2lFfzT9pQ0Q5FgnGR3FSSBoixcEUK6Tl3CbCGSjutELjL/i7rLPH 6YxZuyPpUARfHktMua5fkbgDzKS0s+JI2/AtIMlafqnG12AMrhpT+/a2d1dCihGa SnPjTUqP+OYAiccNzeBu6+VWLg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:18 2026 by rpki-client