$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: fblz1exzvBoQEHpeCh4AvDgvgkZ9g/cIUSvDf9ZFXDg= Subject key identifier: 2F:AE:D5:E9:0E:6F:B2:80:E2:71:F1:3A:D3:B5:78:CC:91:18:42:7B Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 09F3 Signing time: Thu 24 Sep 2026 19:59:39 +0000 Manifest this update: Thu 24 Sep 2026 19:59:39 +0000 Manifest next update: Thu 01 Oct 2026 19:59:39 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: 3rqclQvqnbpCZaYdnNE1/W6c91e4DMv3qSo1/It+SM4=) 2: 501941C093F211EEA029A113C4F9AE02.roa (hash: gDNQ7RDm3OlBoepFJZ0oUQAQP6m12BXRlInXhBKg1vs=) 3: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: igIIxOdVfOFaRjkyfF2zGfACTv4UGuFgRRFoA3gtY0I=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: W0zwFBzb66pp0ecBXLI+aIvqBo4Sln7kS4LpWBDVVxM=) 5: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 7ASaDMV9ToLVHZbT40402K/ssxiDjCFAWsQCvf8MlnM=) 6: 781C64FAF58611ED89273159C4F9AE02.roa (hash: +GXUy2iqy+S2cH6U3ubY1eizES4geu9nbh4cFQMFoIM=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: a5toYxSlaQOmROPbZacPOEgPPT6M3e6P8lemP79n0y8=) 8: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: rWk0hphHKYRVQcd2mZNKRcG9DxqMSbfqbJG0rWI+Ij4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Sep 24 19:59:39 2026 GMT Not After : Oct 1 19:59:39 2026 GMT Subject: CN=6ab5812b-e934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:67:c7:38:fe:78:1c:85:92:b0:3f:c8:cb:cc: ac:a0:f8:b0:7c:8d:5e:49:33:af:7c:b7:a3:ea:90: bd:dc:f8:ac:41:2e:a0:26:26:af:bd:47:d1:e0:dc: 51:85:d9:e0:08:15:4c:c1:69:95:67:69:38:5b:9e: 31:51:a5:c7:41:7c:2e:7e:99:3d:02:c9:fa:8c:a3: 44:2e:5e:db:8e:a6:ce:a1:3b:e9:93:aa:f0:6b:5d: ae:ab:32:7a:75:d9:24:5c:64:55:73:d9:30:cb:14: dd:f6:fd:f3:c6:9c:19:33:6c:12:3e:45:08:0d:07: 7d:a4:fd:08:a6:6b:ad:80:24:46:f8:0e:a5:53:5e: ee:40:83:2e:f2:51:cf:86:b3:c1:b0:6f:ac:52:ee: 00:34:65:6b:5e:e3:82:8f:94:80:34:d0:42:04:8b: e2:02:94:38:e9:0d:d4:fb:c6:2a:2e:67:15:77:c3: d4:c7:9f:b0:10:dd:f0:63:16:0a:fd:d5:54:42:b8: 9f:4c:d3:ea:f8:f8:63:e3:6b:d9:ad:36:e9:39:b7: 61:c3:7e:6d:15:d5:52:7f:1a:32:5b:ab:83:2d:bf: 03:42:b5:bc:75:67:41:40:6f:13:d0:e3:00:3e:19: 89:a0:73:f9:e7:4d:67:b2:b8:03:23:16:01:7c:53: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:D5:E9:0E:6F:B2:80:E2:71:F1:3A:D3:B5:78:CC:91:18:42:7B X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:03:be:06:f9:86:2d:f1:ad:5b:93:55:30:43:21:98:c7:98: 9b:b8:f2:86:9c:47:56:a3:87:50:70:76:b7:c7:19:0b:6a:7f: e0:00:e1:62:54:3d:d1:fa:5d:b3:03:08:df:36:55:c6:a9:de: d3:ad:35:bb:a3:19:3b:af:97:7e:cc:f7:7a:63:19:a8:d0:da: a7:86:95:bf:fd:82:c0:72:53:52:16:6a:13:42:79:7d:3b:9c: 2b:04:35:0c:62:c2:09:75:58:3a:f3:d2:3b:9f:2d:63:d1:9d: 08:06:fe:04:39:fd:1b:ec:14:54:c5:86:a3:40:48:16:db:72: e5:7b:17:3d:32:0c:31:6b:02:3b:e7:33:b0:cd:01:30:2e:24: 51:62:4d:c9:94:07:56:35:06:00:21:01:3e:81:72:61:e5:93: 54:b3:45:ef:a4:3f:e2:d6:8c:3b:35:e2:c2:b0:64:71:b0:07: b8:28:57:9f:e3:68:bf:f3:b1:75:d6:ff:a3:00:1f:b9:25:be: 96:60:16:ba:26:cb:b0:fc:09:60:69:61:f2:eb:ad:0f:85:be: 57:f9:78:3c:30:0c:e6:83:93:1b:f9:54:3d:98:34:8d:8e:b0: 37:62:5e:49:f0:b9:29:33:35:5c:02:69:55:7b:7c:5e:15:02: 3c:a7:09:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwOTI0MTk1OTM5WhcNMjYxMDAxMTk1OTM5WjAYMRYwFAYD VQQDEw02YWI1ODEyYi1lOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mfHOP54HIWSsD/Iy8ysoPiwfI1eSTOvfLej6pC93PisQS6gJiavvUfR4NxR hdngCBVMwWmVZ2k4W54xUaXHQXwufpk9Asn6jKNELl7bjqbOoTvpk6rwa12uqzJ6 ddkkXGRVc9kwyxTd9v3zxpwZM2wSPkUIDQd9pP0IpmutgCRG+A6lU17uQIMu8lHP hrPBsG+sUu4ANGVrXuOCj5SANNBCBIviApQ46Q3U+8YqLmcVd8PUx5+wEN3wYxYK /dVUQrifTNPq+Phj42vZrTbpObdhw35tFdVSfxoyW6uDLb8DQrW8dWdBQG8T0OMA PhmJoHP5501nsrgDIxYBfFP8tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+u1ekO b7KA4nHxOtO1eMyRGEJ7MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAawO+BvmGLfGtW5NVMEMhmMeYm7jyhpxHVqOHUHB2t8cZC2p/4ADhYlQ90fpd swMI3zZVxqne0601u6MZO6+Xfsz3emMZqNDap4aVv/2CwHJTUhZqE0J5fTucKwQ1 DGLCCXVYOvPSO58tY9GdCAb+BDn9G+wUVMWGo0BIFtty5XsXPTIMMWsCO+czsM0B MC4kUWJNyZQHVjUGACEBPoFyYeWTVLNF76Q/4taMOzXiwrBkcbAHuChXn+Nov/Ox ddb/owAfuSW+lmAWuibLsPwJYGlh8uutD4W+V/l4PDAM5oOTG/lUPZg0jY6wN2Je SfC5KTM1XAJpVXt8XhUCPKcJ9Q== -----END CERTIFICATE-----Generated at Fri Sep 25 09:12:46 2026 by rpki-client