$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: O+re1zaQm/f9xIdoB4K/9WpF0w9gFnJghV2AfAwpnzM= Subject key identifier: 00:41:27:5E:AB:01:96:55:24:7D:7B:0D:40:F4:D9:A7:2F:27:82:95 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0987 Signing time: Mon 02 Mar 2026 00:49:50 +0000 Manifest this update: Mon 02 Mar 2026 00:49:49 +0000 Manifest next update: Mon 09 Mar 2026 00:49:49 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: dkCRQJluD+Qs7w7pSRhyh4lgCTiQ9H2UKT5aSGIuykI=) 2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=) 3: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=) 4: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=) 6: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=) 7: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=) 8: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Mar 2 00:49:49 2026 GMT Not After : Mar 9 00:49:49 2026 GMT Subject: CN=69a4deae-7300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:5a:9d:49:8e:a9:f1:b2:d5:38:72:a0:c6: 86:67:45:7d:bc:e9:db:61:25:53:0a:f1:cc:c8:9a: d7:36:f1:25:93:08:9f:46:ab:b4:78:18:68:6a:4a: 1f:bf:1f:76:2e:17:f8:f3:67:fb:e0:39:86:89:80: 6f:74:c8:2a:95:71:4f:97:4b:fc:f4:27:b1:e2:c4: 84:61:b1:f7:fc:46:eb:8b:0c:b1:9c:80:98:93:6e: b2:39:65:ea:c7:41:78:7b:b6:f0:07:56:60:84:af: 39:df:f1:83:6a:f3:22:6b:10:c5:26:56:4a:9e:bd: 96:fd:13:23:ce:5f:6e:48:c2:bb:32:56:d2:94:cf: 36:03:2e:b1:80:64:4a:31:9d:10:10:a6:8e:8b:0a: 9b:f0:6b:e9:a0:09:bf:06:45:85:e4:ba:d9:63:2b: dd:95:f1:b0:5f:1b:dd:8e:12:9e:c2:1f:bb:e4:dc: 5f:04:df:c1:e8:41:a1:f7:69:eb:e0:74:63:05:0d: 07:39:a7:32:41:04:b6:c3:13:3e:fa:38:a9:94:f6: 5f:84:1a:50:38:dc:6d:ba:ea:1f:ea:7a:e6:59:90: 56:fe:a7:b4:45:34:75:f0:57:6a:e2:8f:29:17:88: f3:7a:11:23:98:ca:0e:b0:7c:e9:56:80:b8:e5:9d: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:27:5E:AB:01:96:55:24:7D:7B:0D:40:F4:D9:A7:2F:27:82:95 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:62:77:f9:26:7e:fe:ee:58:6c:b1:e2:ec:08:e8:e5:ca:64: 82:39:4e:af:68:d6:9c:8d:a0:a7:a9:eb:65:10:a7:81:61:17: 3f:f8:d9:1a:a1:84:f4:fc:f0:42:bf:b5:6b:03:36:e3:c6:9f: 54:11:2a:ce:8f:ba:0d:e2:32:6c:31:9d:bd:f6:f8:81:3e:3a: d4:56:6a:51:23:57:48:bb:77:dd:89:e4:c5:60:d0:95:2a:6f: 08:46:68:d7:80:36:ea:2d:64:c7:27:ec:d2:1d:88:d0:b4:f0: de:fd:ba:1e:8b:94:7f:36:b7:83:30:ff:f2:d4:9f:e2:38:96: 24:bd:6b:77:b2:f7:f7:98:9d:ff:d5:48:ec:c1:97:ea:1b:e2: 85:e6:13:d6:5b:e0:87:fc:9f:9d:2f:d3:dc:34:78:b7:c0:0f: ec:38:49:54:d2:91:05:0a:75:8f:5a:06:37:fb:ad:47:39:8d: 60:c3:9f:d9:df:93:88:c2:32:e4:f0:80:7e:98:ee:9d:33:4d: ee:6e:34:7e:e9:58:4e:1a:5b:16:36:d9:e6:59:f0:8d:d5:90: b3:3a:e3:bb:f7:40:91:eb:db:80:c5:ca:93:54:88:7d:1c:78: 73:06:4e:55:47:49:93:e1:f7:cf:da:36:e6:99:de:69:5d:fd: e8:83:91:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwMzAyMDA0OTQ5WhcNMjYwMzA5MDA0OTQ5WjAYMRYwFAYD VQQDEw02OWE0ZGVhZS03MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzERanUmOqfGy1ThyoMaGZ0V9vOnbYSVTCvHMyJrXNvElkwifRqu0eBhoakof vx92Lhf482f74DmGiYBvdMgqlXFPl0v89Cex4sSEYbH3/EbriwyxnICYk26yOWXq x0F4e7bwB1ZghK853/GDavMiaxDFJlZKnr2W/RMjzl9uSMK7MlbSlM82Ay6xgGRK MZ0QEKaOiwqb8GvpoAm/BkWF5LrZYyvdlfGwXxvdjhKewh+75NxfBN/B6EGh92nr 4HRjBQ0HOacyQQS2wxM++jiplPZfhBpQONxtuuof6nrmWZBW/qe0RTR18Fdq4o8p F4jzehEjmMoOsHzpVoC45Z1K9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABBJ16r AZZVJH17DUD02acvJ4KVMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmJ3+SZ+/u5YbLHi7Ajo5cpkgjlOr2jWnI2gp6nrZRCngWEXP/jZGqGE9Pzw Qr+1awM248afVBEqzo+6DeIybDGdvfb4gT461FZqUSNXSLt33YnkxWDQlSpvCEZo 14A26i1kxyfs0h2I0LTw3v26HouUfza3gzD/8tSf4jiWJL1rd7L395id/9VI7MGX 6hviheYT1lvgh/yfnS/T3DR4t8AP7DhJVNKRBQp1j1oGN/utRzmNYMOf2d+TiMIy 5PCAfpjunTNN7m40fulYThpbFjbZ5lnwjdWQszrju/dAkevbgMXKk1SIfRx4cwZO VUdJk+H3z9o25pneaV396IOReA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:57 2026 by rpki-client