$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: 5Sn+UL33vB7U3xO38YtMcRZz6f35bx+054E6eoOogns= Subject key identifier: CD:99:F8:C2:C6:A2:CD:5B:0B:8D:A0:B4:09:2B:62:35:ED:C8:55:D7 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 35E2 Signing time: Thu 23 Jul 2026 07:58:39 +0000 Manifest this update: Thu 23 Jul 2026 07:58:39 +0000 Manifest next update: Thu 30 Jul 2026 07:58:39 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: AvZ5PA4rWk6kVDCR1oSdKz34EN7e320Hihnrm+YrjU4=) 2: A45B04065A3F11F1886D544AAD833773.roa (hash: Z73qjUJSMzWxKMX2s9KiX8TC8fQfNzUNfhTibLOUU40=) 3: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: KhUxJkdHjZrK8UoeM4UupR/IycufWIyDVUjd5aW9Y1I=) 4: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: YijLflInNWKirZ+Amp3ReIzopyb5zO6JUo1pwdICiQ4=) 5: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: m0Un1LZunOEx8tJ3JVZoA33oEl7vompkxVrJm4Tr/+U=) 6: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 6nZ4JvdEqawdRMU4DMQ0s0luXIXk7iBOFgicrumlEU8=) 7: FE04732C49D011F1880DD96DA7833773.roa (hash: 2xRmCEMZTLef/eRICDp7XHseN30c+uHaEXZfaaBq37E=) 8: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 2zyppsSURTOn3zdsXlXSIBSh5cgiacXxcTYDO0urYho=) 9: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: TXMQQ1A35wcn0vd2F/lg63dSiXn2E+vH3CzPG5I1pTw=) 10: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: +EvvxARvsL5/RglBY+Jh4XrkPl9ijVHUES7FlYNYows=) 11: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: 35VgX9rf+XhH26LlIXgW4m4oJdqmNJWXhKFWnvMUpIg=) 12: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: r3JYBnswXkhUT0pAellu2gkvKhVKlRYjFdaMpDHp8wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13952 (0x3680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Jul 23 07:58:39 2026 GMT Not After : Jul 30 07:58:39 2026 GMT Subject: CN=6a61c9af-baef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:2a:d1:78:b3:14:5c:8c:a2:19:a5:42:a5: 73:7f:73:67:64:8c:fa:da:3a:87:f2:a9:84:1a:19: d9:28:f8:60:d5:30:39:1d:43:0a:8d:4c:f1:85:f4: 9c:43:c7:ac:98:d6:7e:a4:fd:f8:8d:ba:79:08:7c: 50:ea:5b:51:66:cd:9e:66:a4:d7:67:6d:0b:a3:75: 13:bb:d1:d1:e6:fb:3a:a2:a3:86:c0:c6:20:97:b5: 7b:52:b7:c8:88:ac:ce:4d:c7:ec:6f:2e:2c:fb:c2: 97:60:16:3e:15:f4:8e:f2:80:89:df:35:50:c7:e7: 39:18:26:43:c2:5c:8d:0e:b7:f7:08:23:a6:a1:e0: eb:c2:ac:c5:9c:f5:5f:88:0b:c0:b7:3a:45:55:ad: 6d:41:fd:f7:16:de:ac:cc:6c:6f:4b:e9:45:ed:1d: 98:c8:85:1b:57:70:5f:5a:47:2e:8b:9f:5c:f3:4c: df:07:e3:5f:08:c3:2d:6f:71:f1:af:f8:11:0f:e4: 49:db:e2:4f:65:f5:7d:1b:8f:cc:f2:72:ef:07:6b: 8d:ab:3d:dc:5a:68:25:5b:98:34:1d:e9:e5:3f:72: 27:b8:e9:34:12:f0:1f:8f:09:d1:24:1b:90:5d:91: f0:51:01:4c:a7:6a:59:53:cc:3b:48:06:d7:07:cc: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:99:F8:C2:C6:A2:CD:5B:0B:8D:A0:B4:09:2B:62:35:ED:C8:55:D7 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c4:a0:88:58:ab:e7:8b:13:0f:10:46:b4:e0:4d:a2:ef:c1: 91:03:41:05:6a:f5:50:d8:dd:a7:66:eb:31:71:b3:3c:62:48: 7e:cc:c8:50:06:cd:00:b0:49:58:e9:b4:4b:e2:fc:02:a0:ff: 90:92:6b:24:cb:b1:10:97:c9:45:e7:06:06:7b:86:89:c4:cb: f2:66:4a:9e:6c:46:9c:d4:fe:8b:cf:9c:55:88:a3:4f:b4:9a: 7a:e6:54:13:99:21:c9:df:c2:f1:d8:fa:81:55:4e:0b:99:2e: 92:fb:c4:17:e0:00:7d:a4:c0:74:47:10:1f:e5:00:42:95:4d: ca:b6:fb:77:4a:0d:d8:24:b6:89:02:c4:38:08:4b:2f:fa:90: 15:89:40:8e:37:71:08:4f:60:0f:0c:c6:18:bc:2d:c0:17:11: b6:63:36:c0:18:df:64:00:ab:b5:e9:4a:b9:8a:28:c1:bc:c2: 9e:bb:6f:f4:a9:a3:83:52:d4:4b:7b:11:19:18:2a:eb:ee:79: 53:50:dd:02:e8:0e:cc:63:ce:af:a0:10:0f:e0:13:56:2c:70: c4:85:fe:f2:0e:d9:f1:f7:a1:b3:b6:1a:57:b7:e6:d5:3d:31: c6:c8:1a:a4:79:fa:cf:49:3e:aa:ee:47:9b:fb:5b:7a:6a:97: b3:e1:34:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwNzIzMDc1ODM5WhcNMjYwNzMwMDc1ODM5WjAYMRYwFAYD VQQDEw02YTYxYzlhZi1iYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQwq0XizFFyMohmlQqVzf3NnZIz62jqH8qmEGhnZKPhg1TA5HUMKjUzxhfSc Q8esmNZ+pP34jbp5CHxQ6ltRZs2eZqTXZ20Lo3UTu9HR5vs6oqOGwMYgl7V7UrfI iKzOTcfsby4s+8KXYBY+FfSO8oCJ3zVQx+c5GCZDwlyNDrf3CCOmoeDrwqzFnPVf iAvAtzpFVa1tQf33Ft6szGxvS+lF7R2YyIUbV3BfWkcui59c80zfB+NfCMMtb3Hx r/gRD+RJ2+JPZfV9G4/M8nLvB2uNqz3cWmglW5g0HenlP3InuOk0EvAfjwnRJBuQ XZHwUQFMp2pZU8w7SAbXB8yjrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Z+MLG os1bC42gtAkrYjXtyFXXMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwcSgiFir54sTDxBGtOBNou/BkQNBBWr1UNjdp2brMXGzPGJIfszIUAbNALBJ WOm0S+L8AqD/kJJrJMuxEJfJRecGBnuGicTL8mZKnmxGnNT+i8+cVYijT7SaeuZU E5khyd/C8dj6gVVOC5kukvvEF+AAfaTAdEcQH+UAQpVNyrb7d0oN2CS2iQLEOAhL L/qQFYlAjjdxCE9gDwzGGLwtwBcRtmM2wBjfZACrtelKuYoowbzCnrtv9Kmjg1LU S3sRGRgq6+55U1DdAugOzGPOr6AQD+ATVixwxIX+8g7Z8fehs7YaV7fm1T0xxsga pHn6z0k+qu5Hm/tbemqXs+E0Vg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:19:57 2026 by rpki-client