$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: ODeB6GRHmouLdDSSgHnydfZgLiTzMIc8M1Klttg8sj4= Subject key identifier: 9D:BA:81:A4:FD:DC:6F:D4:5F:32:92:4C:9E:7B:A5:1F:0C:E5:89:97 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0C11 Signing time: Tue 12 May 2026 18:55:16 +0000 Manifest this update: Tue 12 May 2026 18:55:15 +0000 Manifest next update: Tue 19 May 2026 18:55:15 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: cGxgi5pvg8Jk+m3oTWmv9zhkaWq2SeZdyhI3PZyT+u8=) 2: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=) 3: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=) 4: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3130 (0xc3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: May 12 18:55:15 2026 GMT Not After : May 19 18:55:15 2026 GMT Subject: CN=6a037794-b0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:89:72:8a:17:48:60:59:75:7f:91:1f:fb: 21:52:d3:ec:b1:a2:a3:4a:b0:be:87:f7:c1:30:f4: e8:7d:1c:56:cb:9e:59:cf:f7:6b:45:81:56:c8:a5: e2:dc:05:57:2e:15:c2:23:d2:db:98:67:a3:cf:7a: 76:22:d4:71:9c:e9:06:6e:ab:b1:0c:19:74:61:e7: 6d:ba:a7:8a:16:e5:52:62:3f:00:02:e0:2d:3b:b5: 09:b8:7b:3e:33:05:12:02:38:ef:6e:b4:02:13:aa: 04:c7:a9:84:58:80:ac:fb:8a:ba:fb:fc:be:2c:64: 5e:41:31:aa:cb:da:99:ea:a3:53:7f:09:38:64:ce: c0:e1:ea:7f:77:c5:e0:8a:73:2a:44:56:cd:e0:a9: d2:d5:be:3f:69:c6:34:05:c1:e1:78:85:d1:4d:69: 01:7f:3a:92:3e:47:6b:f9:d2:89:99:29:a8:f1:35: df:02:2d:65:77:b8:52:b1:4e:6f:91:7e:ab:b7:6b: 58:3a:61:aa:99:9f:75:6e:82:77:9b:9a:42:b1:9c: 42:11:c3:14:be:e3:55:23:28:0d:e8:0b:6b:bc:0e: 47:7d:27:6c:93:4f:5a:40:e2:7f:02:bc:10:b7:ab: 59:ea:e5:a4:2b:17:08:bd:0d:29:19:f9:38:49:57: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BA:81:A4:FD:DC:6F:D4:5F:32:92:4C:9E:7B:A5:1F:0C:E5:89:97 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9f:ac:1b:b9:4e:c1:cd:f5:d5:4b:55:23:33:a0:f8:91:91: bb:06:f8:20:e7:e7:f3:4d:cb:10:41:dc:db:3f:3c:00:4c:a9: 4f:9b:25:ba:98:e9:85:5b:4f:b4:9e:6a:53:b1:c4:5c:46:2b: da:3f:4f:61:db:ba:37:2f:5f:06:a4:35:78:4e:44:54:3f:1b: 7c:a3:9c:ac:de:6d:68:ec:58:85:14:bc:eb:88:fa:d1:b6:4a: 20:23:ef:2c:2d:ee:b7:8a:e9:3a:f5:4b:71:12:b2:98:36:f1: c2:b9:23:3b:17:0f:3d:6b:4c:62:4f:8b:a7:5d:fb:ea:a0:14: 64:d2:b4:eb:66:fa:77:af:95:82:bc:3c:20:3f:14:d1:f1:ca: 97:b8:62:d3:53:50:24:2d:14:ef:33:d0:d2:33:cb:79:b2:8d: f4:94:27:2d:97:73:cc:85:9a:2f:1e:ac:4e:67:69:d7:a7:9d: 97:18:7b:3c:d0:96:e8:c4:ac:1c:89:bb:d1:d2:a8:0c:f7:b8: d7:52:d3:5d:ee:50:94:87:9b:e5:79:2d:ad:53:d6:a6:a1:16: a0:a0:94:77:41:95:bc:08:f9:fc:e0:30:f0:7b:ed:27:6b:ac: c4:b9:19:6e:37:61:e7:94:ca:5f:7a:fd:dc:a3:de:70:6b:ea: f8:bc:d8:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwNTEyMTg1NTE1WhcNMjYwNTE5MTg1NTE1WjAYMRYwFAYD VQQDEw02YTAzNzc5NC1iMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MiJcooXSGBZdX+RH/shUtPssaKjSrC+h/fBMPTofRxWy55Zz/drRYFWyKXi 3AVXLhXCI9LbmGejz3p2ItRxnOkGbquxDBl0YedtuqeKFuVSYj8AAuAtO7UJuHs+ MwUSAjjvbrQCE6oEx6mEWICs+4q6+/y+LGReQTGqy9qZ6qNTfwk4ZM7A4ep/d8Xg inMqRFbN4KnS1b4/acY0BcHheIXRTWkBfzqSPkdr+dKJmSmo8TXfAi1ld7hSsU5v kX6rt2tYOmGqmZ91boJ3m5pCsZxCEcMUvuNVIygN6AtrvA5HfSdsk09aQOJ/ArwQ t6tZ6uWkKxcIvQ0pGfk4SVc9NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ26gaT9 3G/UXzKSTJ57pR8M5YmXMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjp+sG7lOwc311UtVIzOg+JGRuwb4IOfn803LEEHc2z88AEypT5slupjphVtP tJ5qU7HEXEYr2j9PYdu6Ny9fBqQ1eE5EVD8bfKOcrN5taOxYhRS864j60bZKICPv LC3ut4rpOvVLcRKymDbxwrkjOxcPPWtMYk+Lp1376qAUZNK062b6d6+Vgrw8ID8U 0fHKl7hi01NQJC0U7zPQ0jPLebKN9JQnLZdzzIWaLx6sTmdp16edlxh7PNCW6MSs HIm70dKoDPe411LTXe5QlIeb5XktrVPWpqEWoKCUd0GVvAj5/OAw8HvtJ2usxLkZ bjdh55TKX3r93KPecGvq+LzYPg== -----END CERTIFICATE-----Generated at Wed May 13 06:31:51 2026 by rpki-client