
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: cZTeU7V+tpy1Q9/GvDn1eeDUuxbCa3+1TwVRtfVPETE=
Subject key identifier: 73:B7:34:16:2D:12:A3:C1:61:D4:65:E5:49:B6:5E:28:0B:CC:F2:64
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0A79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 09F7
Signing time: Fri 02 Oct 2026 20:18:08 +0000
Manifest this update: Fri 02 Oct 2026 20:18:08 +0000
Manifest next update: Fri 09 Oct 2026 20:18:08 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: WoBbWuvawjUeWAu2aiKxTJHnj8XYVR6F15MnANcQk9k=)
2: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: W0zwFBzb66pp0ecBXLI+aIvqBo4Sln7kS4LpWBDVVxM=)
3: 501941C093F211EEA029A113C4F9AE02.roa (hash: gDNQ7RDm3OlBoepFJZ0oUQAQP6m12BXRlInXhBKg1vs=)
4: 9672E862793811EE92C54834C4F9AE02.roa (hash: a5toYxSlaQOmROPbZacPOEgPPT6M3e6P8lemP79n0y8=)
5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: rWk0hphHKYRVQcd2mZNKRcG9DxqMSbfqbJG0rWI+Ij4=)
6: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 7ASaDMV9ToLVHZbT40402K/ssxiDjCFAWsQCvf8MlnM=)
7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: igIIxOdVfOFaRjkyfF2zGfACTv4UGuFgRRFoA3gtY0I=)
8: 781C64FAF58611ED89273159C4F9AE02.roa (hash: +GXUy2iqy+S2cH6U3ubY1eizES4geu9nbh4cFQMFoIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2681 (0xa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Oct 2 20:18:08 2026 GMT
Not After : Oct 9 20:18:08 2026 GMT
Subject: CN=6ac01180-fcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:bb:9d:9e:64:ad:d9:a1:c3:bf:83:f5:6e:
9c:95:69:4d:c9:70:f4:b1:b7:2f:b4:6d:fe:be:0e:
1f:f0:37:87:31:ec:e9:88:94:6f:ef:c3:7c:ae:e7:
68:80:47:95:81:c5:4c:86:b6:9f:c5:8f:3d:1a:11:
b4:4b:08:35:f8:de:8f:f6:b4:99:ca:64:95:a1:c6:
e0:52:51:8b:2d:32:14:e6:ff:01:bf:af:e6:92:10:
9e:ef:0a:e0:85:d9:3f:47:73:d8:0e:6b:08:f4:21:
c4:1d:ad:4a:b3:2a:ca:03:76:d5:4d:cb:bd:4d:04:
69:da:a1:71:2d:75:db:a2:af:7f:85:e8:fc:1f:31:
dd:ef:ed:fe:e4:57:aa:76:c8:fe:4e:eb:cc:25:36:
10:89:3f:33:2c:4c:ab:b7:9f:5e:61:1c:77:64:c4:
3c:e4:d2:0d:af:19:63:97:c5:0f:c5:56:21:b7:f3:
8e:0b:ab:14:8d:7d:52:b7:f6:8a:f0:27:20:12:25:
49:2c:b7:ea:ea:8d:ca:7f:f4:3d:59:53:1b:d6:49:
c6:f2:03:24:e6:ad:31:3a:51:41:c9:4d:8a:67:5e:
98:cd:df:f0:e4:17:9e:20:bc:6b:b7:59:a0:82:e3:
6a:2f:fe:c9:98:a7:95:1e:cd:91:e8:ad:b0:c9:6c:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:34:16:2D:12:A3:C1:61:D4:65:E5:49:B6:5E:28:0B:CC:F2:64
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a6:b6:d2:6c:87:20:4f:13:83:f9:8a:bd:fa:3d:18:c3:60:
49:68:d5:ea:b9:d4:bb:54:8c:9a:95:dd:51:ff:41:79:6b:cc:
bc:83:27:8b:bc:43:17:7f:0c:ec:bc:e7:dc:f8:34:c8:75:ac:
df:e4:1b:93:17:aa:78:d0:6b:2c:39:6a:64:be:05:ba:6a:df:
54:ac:cf:f3:d6:8f:03:e1:06:a8:82:ba:97:b1:46:3d:1a:c2:
03:10:1c:fd:c2:1a:bc:bc:72:00:aa:97:e0:34:bb:25:e0:a8:
59:ed:59:3d:7a:d5:5f:71:cf:60:39:72:d5:dc:c8:7d:fc:fc:
5b:38:d6:8f:06:33:21:d6:62:d7:28:df:f0:5a:14:e8:d1:d3:
33:24:9c:14:ba:c1:c5:07:b5:91:75:30:01:87:fe:0b:96:3c:
28:41:44:d3:cb:e8:31:09:b2:07:74:c7:89:1c:ac:d0:94:4e:
57:85:2f:76:a2:67:7f:7b:4e:de:46:f8:ae:ef:b4:86:5a:57:
4a:f3:09:74:d3:ae:cf:7d:bb:55:90:ba:28:a4:a2:04:17:fc:
42:a0:1d:72:af:cc:6e:76:a8:75:bf:19:f9:80:22:c7:f1:d2:
31:66:84:cd:b0:a0:08:7f:da:31:b5:0a:fe:c4:f4:a3:1f:d6:
39:ec:4f:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjYxMDAyMjAxODA4WhcNMjYxMDA5MjAxODA4WjAYMRYwFAYD
VQQDEw02YWMwMTE4MC1mY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAziG7nZ5krdmhw7+D9W6clWlNyXD0sbcvtG3+vg4f8DeHMezpiJRv78N8rudo
gEeVgcVMhrafxY89GhG0Swg1+N6P9rSZymSVocbgUlGLLTIU5v8Bv6/mkhCe7wrg
hdk/R3PYDmsI9CHEHa1KsyrKA3bVTcu9TQRp2qFxLXXboq9/hej8HzHd7+3+5Feq
dsj+TuvMJTYQiT8zLEyrt59eYRx3ZMQ85NINrxljl8UPxVYht/OOC6sUjX1St/aK
8CcgEiVJLLfq6o3Kf/Q9WVMb1knG8gMk5q0xOlFByU2KZ16Yzd/w5BeeILxrt1mg
guNqL/7JmKeVHs2R6K2wyWzxcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO3NBYt
EqPBYdRl5Um2XigLzPJkMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U
VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATqa20myHIE8Tg/mKvfo9GMNgSWjV6rnUu1SMmpXdUf9BeWvMvIMni7xDF38M
7Lzn3Pg0yHWs3+QbkxeqeNBrLDlqZL4FumrfVKzP89aPA+EGqIK6l7FGPRrCAxAc
/cIavLxyAKqX4DS7JeCoWe1ZPXrVX3HPYDly1dzIffz8WzjWjwYzIdZi1yjf8FoU
6NHTMyScFLrBxQe1kXUwAYf+C5Y8KEFE08voMQmyB3THiRys0JROV4UvdqJnf3tO
3kb4ru+0hlpXSvMJdNOuz327VZC6KKSiBBf8QqAdcq/Mbnaodb8Z+YAix/HSMWaE
zbCgCH/aMbUK/sT0ox/WOexPsg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:59:33 2026 by rpki-client