$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: mSbm4fOBsr6GH+SZN3NgOv5IJrWtnRBucOsDGlAHYls= Subject key identifier: E2:B4:0C:D6:2A:90:0D:D9:5E:B3:1F:88:DB:77:C2:EE:62:1B:EB:8D Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 099F Signing time: Thu 16 Apr 2026 20:08:06 +0000 Manifest this update: Thu 16 Apr 2026 20:08:05 +0000 Manifest next update: Thu 23 Apr 2026 20:08:05 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: okLghxC3QZ0AKYMN1vz2V8ZInEILdrclYWTcXT0cQqM=) 2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=) 3: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=) 4: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=) 6: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=) 7: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=) 8: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Apr 16 20:08:05 2026 GMT Not After : Apr 23 20:08:05 2026 GMT Subject: CN=69e141a6-a84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:55:f3:c4:6c:93:3d:af:9e:d1:1e:b3:fb: 42:e8:f2:dc:77:9c:9e:7e:c2:84:f1:2d:b7:76:97: 4d:47:73:d5:c4:27:53:07:40:eb:52:c5:98:02:e0: e5:d8:de:e6:71:ce:5c:e1:05:8a:28:f7:84:5c:4b: b1:73:ef:b7:3b:d0:cc:d3:d6:23:f4:14:36:fb:14: e1:bc:7e:bc:06:12:eb:6a:e7:3a:3e:59:af:c1:87: 4c:8a:61:c3:09:5f:67:33:24:6c:0b:2c:3a:76:e4: 3d:45:df:b0:55:0b:b1:b5:73:10:97:67:4e:03:a4: 3c:64:00:6b:bf:7c:38:e4:45:ed:c5:a3:cb:af:8f: 66:3a:df:7d:cd:1c:39:ef:14:83:36:f0:1a:39:93: 19:d9:f4:79:84:2d:00:54:eb:52:0e:fb:bc:65:05: df:ec:48:98:d5:2f:b7:22:11:91:d8:36:2f:8a:d4: 97:d3:a4:28:2e:d9:7b:72:c7:80:07:c5:0f:16:9a: 23:6e:3d:78:80:2f:14:b8:d1:78:87:5f:1b:92:73: 06:df:18:4b:a1:dd:3b:ec:2e:33:dd:50:90:92:e7: 09:6d:e6:5d:2b:f5:e6:54:01:e2:ab:14:6b:5c:8b: f9:87:47:17:ac:eb:b0:62:0a:b9:bf:75:a3:d7:2c: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:0C:D6:2A:90:0D:D9:5E:B3:1F:88:DB:77:C2:EE:62:1B:EB:8D X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:00:14:1d:0d:32:51:04:1a:6c:96:84:21:7f:11:05:12:d4: 60:ee:63:72:3e:03:d7:68:93:87:03:e5:ad:87:61:5d:d9:4c: a3:84:11:0b:77:72:b8:2c:62:96:c3:65:95:a2:29:0e:1c:87: 5d:f8:5e:78:b7:25:a8:d9:f6:16:96:20:cd:ca:ed:75:f5:6f: 4b:ae:58:ac:32:d8:27:d0:db:39:dd:d5:4c:7d:e8:00:2c:e7: d9:53:ab:97:e7:cd:79:78:63:fd:5c:74:22:ac:36:07:5d:51: 45:c7:6d:4b:21:25:9c:6a:70:18:27:fb:5c:60:d7:d9:47:8b: d4:08:c9:23:63:a5:ee:6a:81:a0:8f:aa:1d:42:eb:96:d5:ec: 3f:fe:5c:0a:bb:d0:91:05:a2:09:2e:8e:47:18:49:9e:7b:c3: 1a:2c:4b:a0:17:20:69:9f:6c:28:13:28:1c:c3:66:9c:df:c4: 3a:5e:b8:97:2d:d1:9e:d3:e9:c4:0b:a0:f0:02:41:7e:73:e3: e5:18:cb:9a:fe:c6:47:76:1e:93:c5:72:18:3c:3e:02:ac:ed: 5f:4e:e8:49:e9:d4:43:a8:03:04:ed:1d:5f:b4:63:66:41:e4: 6c:d4:c9:17:f0:90:9c:66:3d:2b:b1:c4:70:cd:f3:93:9f:9e: 4c:9c:fe:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwNDE2MjAwODA1WhcNMjYwNDIzMjAwODA1WjAYMRYwFAYD VQQDEw02OWUxNDFhNi1hODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BBV88Rskz2vntEes/tC6PLcd5yefsKE8S23dpdNR3PVxCdTB0DrUsWYAuDl 2N7mcc5c4QWKKPeEXEuxc++3O9DM09Yj9BQ2+xThvH68BhLrauc6PlmvwYdMimHD CV9nMyRsCyw6duQ9Rd+wVQuxtXMQl2dOA6Q8ZABrv3w45EXtxaPLr49mOt99zRw5 7xSDNvAaOZMZ2fR5hC0AVOtSDvu8ZQXf7EiY1S+3IhGR2DYvitSX06QoLtl7cseA B8UPFpojbj14gC8UuNF4h18bknMG3xhLod077C4z3VCQkucJbeZdK/XmVAHiqxRr XIv5h0cXrOuwYgq5v3Wj1yyXBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK0DNYq kA3ZXrMfiNt3wu5iG+uNMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwwAUHQ0yUQQabJaEIX8RBRLUYO5jcj4D12iThwPlrYdhXdlMo4QRC3dyuCxi lsNllaIpDhyHXfheeLclqNn2FpYgzcrtdfVvS65YrDLYJ9DbOd3VTH3oACzn2VOr l+fNeXhj/Vx0Iqw2B11RRcdtSyElnGpwGCf7XGDX2UeL1AjJI2Ol7mqBoI+qHULr ltXsP/5cCrvQkQWiCS6ORxhJnnvDGixLoBcgaZ9sKBMoHMNmnN/EOl64ly3RntPp xAug8AJBfnPj5RjLmv7GR3Yek8VyGDw+AqztX07oSenUQ6gDBO0dX7RjZkHkbNTJ F/CQnGY9K7HEcM3zk5+eTJz+gQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:44 2026 by rpki-client