$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: 06iMFgrZIgj2qRLYke9Ywetue7O5Q1f6298/llpDgEM= Subject key identifier: 84:7A:ED:4F:BB:9C:B0:EA:79:2C:95:7E:E9:8F:5E:96:12:60:30:98 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 358D Signing time: Tue 24 Mar 2026 14:25:59 +0000 Manifest this update: Tue 24 Mar 2026 14:25:59 +0000 Manifest next update: Tue 31 Mar 2026 14:25:59 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: f1lNg+w+TJ9FP97aWaxO4w//OX03sxavIqKRMWwnOro=) 2: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: m0Un1LZunOEx8tJ3JVZoA33oEl7vompkxVrJm4Tr/+U=) 3: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 2zyppsSURTOn3zdsXlXSIBSh5cgiacXxcTYDO0urYho=) 4: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: +EvvxARvsL5/RglBY+Jh4XrkPl9ijVHUES7FlYNYows=) 5: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: YijLflInNWKirZ+Amp3ReIzopyb5zO6JUo1pwdICiQ4=) 6: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: kQ1tLK/4K7QrT9qG0FUhktj6dgLjO/Q0tikPs2bBoCk=) 7: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 6nZ4JvdEqawdRMU4DMQ0s0luXIXk7iBOFgicrumlEU8=) 8: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: TXMQQ1A35wcn0vd2F/lg63dSiXn2E+vH3CzPG5I1pTw=) 9: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: 35VgX9rf+XhH26LlIXgW4m4oJdqmNJWXhKFWnvMUpIg=) 10: BDDE4EC2024411F18C2650671F3D8C67.roa (hash: htqzcjX9L4qnk3PFtIxLP/2WcVp6WtsQCCJ6i1NyuP8=) 11: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: r3JYBnswXkhUT0pAellu2gkvKhVKlRYjFdaMpDHp8wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13843 (0x3613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Mar 24 14:25:59 2026 GMT Not After : Mar 31 14:25:59 2026 GMT Subject: CN=69c29ef7-a927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:af:77:ca:f9:1b:0f:9a:f3:5a:6f:1a:93: e0:bf:88:4c:cb:a3:ec:95:97:6e:ff:fe:f4:7f:08: ab:2b:bd:bd:45:da:8a:65:bd:f0:36:cb:0c:f3:4d: f0:eb:59:20:18:8d:22:4a:6b:21:77:b6:b6:48:e7: ff:2d:86:a3:0f:5e:20:dc:f7:92:d6:a2:2f:ce:0d: a8:13:ca:21:d4:22:84:3e:7b:dd:2a:70:28:69:f7: 8e:b5:bb:44:c0:e7:cb:27:c6:8c:0e:1b:62:f4:61: 63:7c:97:7a:36:50:3a:1d:9d:16:82:08:95:68:40: 41:a8:ca:a3:0d:48:89:f2:e8:e0:c0:1f:e2:d6:87: 81:35:cc:e0:b0:74:78:f6:f7:95:13:79:4b:f3:c5: 88:db:45:8b:1f:eb:15:1d:23:90:10:fa:39:5a:26: 1e:90:5a:e9:2c:5d:e6:1a:22:6c:07:cf:7a:59:6d: 71:89:f2:e5:4c:50:5f:eb:0a:dd:13:c5:5f:07:e1: 90:b8:c6:b8:e9:54:49:10:3c:5c:8f:aa:e0:d6:c9: 25:34:b0:a2:6e:82:e6:6c:ac:fd:d2:c0:cd:e7:28: 98:5f:98:32:9d:d0:78:84:ad:a1:ce:02:e5:cc:fc: 76:62:46:33:28:31:8d:c6:22:25:5c:70:7e:5f:ad: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:ED:4F:BB:9C:B0:EA:79:2C:95:7E:E9:8F:5E:96:12:60:30:98 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d6:37:36:1e:7d:90:f0:e3:57:be:3d:bb:fa:02:30:75:d2: 0d:81:02:28:07:d3:ba:6b:59:32:c2:d0:c0:fe:52:43:6b:12: 21:08:25:5d:0f:c5:0e:2d:5d:86:1c:cd:32:1b:d3:5e:e7:41: 8f:eb:fb:dc:b7:2b:36:64:53:05:7c:a1:e1:e0:8a:b8:9e:2b: 32:51:ab:af:8b:b6:55:d5:1a:9b:e5:ed:ea:c0:49:e7:e9:d6: 46:78:03:24:74:26:f3:e9:be:f9:46:e1:30:7e:51:b8:48:62: 33:14:2a:15:33:9a:30:89:a1:96:d7:ea:90:a5:b9:4e:bd:c6: 6b:a6:93:85:72:1b:4f:85:26:ba:18:04:09:98:38:22:a7:0b: 83:b0:ba:26:a3:81:89:57:27:7c:20:a3:21:2f:a9:37:68:64: d5:75:a3:f7:db:f4:0b:d3:41:20:c4:58:6a:20:01:ff:4b:cb: c8:22:36:5d:d6:68:23:2b:f0:f7:c4:96:2d:7b:25:4b:93:4c: 5a:43:a0:4f:0d:8a:ae:64:b1:9b:c7:01:f9:ff:04:19:35:7b: 4f:2a:ac:3e:af:bc:4b:80:62:ac:b2:9d:15:be:44:69:8e:ad: 27:3c:09:68:f9:36:ef:94:cf:39:df:49:41:bb:bd:af:04:ab: 53:99:d0:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwMzI0MTQyNTU5WhcNMjYwMzMxMTQyNTU5WjAYMRYwFAYD VQQDEw02OWMyOWVmNy1hOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBGvd8r5Gw+a81pvGpPgv4hMy6PslZdu//70fwirK729RdqKZb3wNssM803w 61kgGI0iSmshd7a2SOf/LYajD14g3PeS1qIvzg2oE8oh1CKEPnvdKnAoafeOtbtE wOfLJ8aMDhti9GFjfJd6NlA6HZ0WggiVaEBBqMqjDUiJ8ujgwB/i1oeBNczgsHR4 9veVE3lL88WI20WLH+sVHSOQEPo5WiYekFrpLF3mGiJsB896WW1xifLlTFBf6wrd E8VfB+GQuMa46VRJEDxcj6rg1sklNLCiboLmbKz90sDN5yiYX5gyndB4hK2hzgLl zPx2YkYzKDGNxiIlXHB+X63smQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIR67U+7 nLDqeSyVfumPXpYSYDCYMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABNY3Nh59kPDjV749u/oCMHXSDYECKAfTumtZMsLQwP5SQ2sSIQglXQ/FDi1d hhzNMhvTXudBj+v73LcrNmRTBXyh4eCKuJ4rMlGrr4u2VdUam+Xt6sBJ5+nWRngD JHQm8+m++UbhMH5RuEhiMxQqFTOaMImhltfqkKW5Tr3Ga6aThXIbT4UmuhgECZg4 IqcLg7C6JqOBiVcnfCCjIS+pN2hk1XWj99v0C9NBIMRYaiAB/0vLyCI2XdZoIyvw 98SWLXslS5NMWkOgTw2KrmSxm8cB+f8EGTV7TyqsPq+8S4BirLKdFb5EaY6tJzwJ aPk275TPOd9JQbu9rwSrU5nQOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:01 2026 by rpki-client