$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: rsfGiNpVY5/Ty6+FG9Z73n4Ro1Y5tmtYSjG+b7K7G+M= Subject key identifier: A0:C2:9A:15:48:77:4F:43:5C:0C:ED:8F:11:C2:2B:C7:B1:DD:4C:2F Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 36AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3605 Signing time: Tue 22 Sep 2026 14:26:20 +0000 Manifest this update: Tue 22 Sep 2026 14:26:20 +0000 Manifest next update: Tue 29 Sep 2026 14:26:20 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: Ogb+IuwtKMqAKDIvoCXJu+uMeZ0LyMdkdxqVd7cwnbw=) 2: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: cBL31aNqyNsIeJXA3Iuq1SJRi4eOoI2ZiZ/y1qNLNdA=) 3: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: WrBoB3k+TzkgstCIfTVURqYqkE8urIjGdVsTJXRt8nM=) 4: A45B04065A3F11F1886D544AAD833773.roa (hash: 1AN5k0MNLAYAKTZr9CZ0ez53EwSpf4f9LN0CXmXrk70=) 5: FE04732C49D011F1880DD96DA7833773.roa (hash: wRr7XT0tgNjYvhkYEXpgltF0B36VXoqTI2kKrtQrmk0=) 6: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 0F3WwX6JLWtvVg/ceJ0+Xc+w1kqKsMeH8GrxG9Um5ig=) 7: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: KmrmvAFX3BTDWk59dNTGnglJUjuw4X1fTptZ/iswC68=) 8: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: H7pGeAUfsX1Ef7hbxb99LMdw8SUiA5hk/Rk7uMPdOQU=) 9: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: qvyFhV5nfC47Pz/c2vFFgaDNyFH03/suCvs+Lzbb6l8=) 10: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: eUE+3jMWRE91uNAz/UrqOI3BwQdgVh4p6mb1bKLIKjg=) 11: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: fXY7n/YUUYNROC6oMNKBDx9Co6GGde/fC8cz3XgdF84=) 12: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: toaIt9aua90UvezwtJBkMjp9ByR6flck72bGeCuWe2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13999 (0x36af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Sep 22 14:26:20 2026 GMT Not After : Sep 29 14:26:20 2026 GMT Subject: CN=6ab2900c-c4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:e2:57:85:a9:1a:22:e4:92:7b:0b:ac:4a: 1f:58:87:6f:40:6f:e0:b9:28:b4:75:61:a6:80:23: f3:5e:4e:06:c5:e6:7a:64:02:91:34:11:70:79:6c: d0:44:94:a3:8c:51:8a:6e:53:5e:22:02:d3:c7:f3: eb:dc:60:c1:e0:0a:dc:4d:58:78:5e:28:72:64:d4: c2:90:7d:d0:92:d4:72:8a:a2:71:dd:c1:1a:f6:93: e7:bb:c5:23:1e:65:aa:ad:cd:d4:67:d1:46:db:b5: b3:83:93:5b:95:fe:e1:4e:e4:78:c6:17:87:a5:f9: 56:e4:aa:0a:78:ad:77:d2:95:a2:1d:3b:ff:e1:6e: 78:24:82:a8:60:fa:8a:2e:94:56:62:03:39:51:52: 79:c6:e6:24:82:64:9f:d5:39:fb:97:01:e3:64:f6: 78:b1:f2:e1:02:c3:aa:65:65:4f:08:7d:19:f4:80: a5:5d:07:2d:02:19:e2:1f:cc:d0:3d:f7:f7:68:15: de:7e:4c:fe:b7:47:88:32:03:0e:be:b9:c3:bd:d6: bf:87:04:a7:c7:eb:4c:bb:f8:e2:7a:cf:68:d7:be: 51:24:63:b1:f7:89:cb:8b:b6:91:9d:d8:4b:c1:4d: 7c:a1:ce:98:11:f7:6f:3e:93:22:e4:93:18:68:1a: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:9A:15:48:77:4F:43:5C:0C:ED:8F:11:C2:2B:C7:B1:DD:4C:2F X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6c:62:e0:17:2d:da:69:63:e4:f8:43:07:51:93:fd:ae:98: 27:c8:f8:f3:c0:dd:f8:9c:6b:8b:88:2e:f3:3c:5c:2b:6b:98: 43:f7:5b:e1:9f:49:3c:d8:52:91:78:6c:bb:51:63:af:5c:20: 9b:e0:e1:5a:e2:5c:23:be:8a:3b:a4:c1:62:d7:b5:a9:24:90: 85:e7:d4:76:27:85:bb:7a:82:19:2f:08:28:da:9f:56:70:29: b9:89:be:a3:71:b5:03:d6:a7:fd:75:28:4f:ba:d2:a9:d8:f9: b0:40:6b:ed:14:b3:0c:73:f1:1a:39:09:a5:03:32:b0:bf:81: dc:cd:37:2e:61:aa:6b:d6:d9:77:02:b5:be:bc:45:c5:db:ec: e7:24:aa:50:2e:8d:a5:c3:9c:ae:03:f6:73:b7:8e:95:9f:25: 92:6b:81:f9:10:be:57:44:47:b4:09:b5:f1:b4:d6:27:2d:1f: 83:c1:a9:60:f2:26:d2:ac:3f:b8:c1:3d:97:66:f9:3b:5f:50: 1e:b4:f9:27:77:46:98:5c:31:75:0b:f1:52:f4:b8:76:0c:c0: 8b:55:7a:41:25:9c:ed:60:d7:bf:4f:c3:17:a4:bf:6b:33:09: 47:f4:55:d3:a2:0d:07:f6:8a:ad:7c:44:e3:d5:6f:02:60:0e: cf:2b:de:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwOTIyMTQyNjIwWhcNMjYwOTI5MTQyNjIwWjAYMRYwFAYD VQQDEw02YWIyOTAwYy1jNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjb/iV4WpGiLkknsLrEofWIdvQG/guSi0dWGmgCPzXk4GxeZ6ZAKRNBFweWzQ RJSjjFGKblNeIgLTx/Pr3GDB4ArcTVh4XihyZNTCkH3QktRyiqJx3cEa9pPnu8Uj HmWqrc3UZ9FG27Wzg5Nblf7hTuR4xheHpflW5KoKeK130pWiHTv/4W54JIKoYPqK LpRWYgM5UVJ5xuYkgmSf1Tn7lwHjZPZ4sfLhAsOqZWVPCH0Z9IClXQctAhniH8zQ Pff3aBXefkz+t0eIMgMOvrnDvda/hwSnx+tMu/jies9o175RJGOx94nLi7aRndhL wU18oc6YEfdvPpMi5JMYaBrsvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDCmhVI d09DXAztjxHCK8ex3UwvMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf2xi4Bct2mlj5PhDB1GT/a6YJ8j488Dd+Jxri4gu8zxcK2uYQ/db4Z9JPNhS kXhsu1Fjr1wgm+DhWuJcI76KO6TBYte1qSSQhefUdieFu3qCGS8IKNqfVnApuYm+ o3G1A9an/XUoT7rSqdj5sEBr7RSzDHPxGjkJpQMysL+B3M03LmGqa9bZdwK1vrxF xdvs5ySqUC6NpcOcrgP2c7eOlZ8lkmuB+RC+V0RHtAm18bTWJy0fg8GpYPIm0qw/ uME9l2b5O19QHrT5J3dGmFwxdQvxUvS4dgzAi1V6QSWc7WDXv0/DF6S/azMJR/RV 06INB/aKrXxE49VvAmAOzyvePw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:11:11 2026 by rpki-client