$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: 3SGwfy8KLQE2nA3Dvpt19eLKbgn5J4J3AbKvVvtx6kI= Subject key identifier: BE:B6:2F:6B:4B:31:33:87:EF:B2:4B:AE:1B:81:8B:35:13:F1:DD:56 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 359C Signing time: Sat 18 Apr 2026 14:26:04 +0000 Manifest this update: Sat 18 Apr 2026 14:26:03 +0000 Manifest next update: Sat 25 Apr 2026 14:26:03 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: 23QoXhrXMyT+03MHzebLSZQf3jCuX+cCAxntDrEmk8E=) 2: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: TXMQQ1A35wcn0vd2F/lg63dSiXn2E+vH3CzPG5I1pTw=) 3: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: r3JYBnswXkhUT0pAellu2gkvKhVKlRYjFdaMpDHp8wk=) 4: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: +EvvxARvsL5/RglBY+Jh4XrkPl9ijVHUES7FlYNYows=) 5: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: kQ1tLK/4K7QrT9qG0FUhktj6dgLjO/Q0tikPs2bBoCk=) 6: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 2zyppsSURTOn3zdsXlXSIBSh5cgiacXxcTYDO0urYho=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: m0Un1LZunOEx8tJ3JVZoA33oEl7vompkxVrJm4Tr/+U=) 8: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 6nZ4JvdEqawdRMU4DMQ0s0luXIXk7iBOFgicrumlEU8=) 9: BDDE4EC2024411F18C2650671F3D8C67.roa (hash: +Q5i0V/vuCTfMSXGQPxsqhF0iB67NLqsV6yfXAW/2B0=) 10: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: 35VgX9rf+XhH26LlIXgW4m4oJdqmNJWXhKFWnvMUpIg=) 11: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: YijLflInNWKirZ+Amp3ReIzopyb5zO6JUo1pwdICiQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13860 (0x3624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Apr 18 14:26:03 2026 GMT Not After : Apr 25 14:26:03 2026 GMT Subject: CN=69e3947c-ad07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:49:d2:48:ac:2a:b4:56:15:9f:14:d5:de: 89:60:e4:e8:5c:d7:42:f5:ad:25:7d:3a:ef:ac:da: f8:5a:cb:6b:b5:0f:97:a6:5d:59:c2:2a:f2:67:d1: 3d:48:96:4a:26:9c:cf:50:67:f7:35:07:60:b2:c4: 25:7c:99:f1:65:4c:20:78:2a:17:d8:39:5f:d1:85: e5:f4:fd:1f:a4:8a:12:80:69:dc:6f:70:8a:f8:c0: 67:43:b9:c1:76:71:5e:3e:ec:82:d7:1b:88:d9:6c: 9b:a4:d2:54:b2:ff:52:5e:bf:31:e8:bf:f5:31:de: 7d:aa:6f:0b:63:2a:0f:9f:ec:34:43:0f:a5:30:49: 79:c3:0b:7d:8f:a1:14:e7:06:53:06:0b:d2:c6:bf: 0c:46:c5:99:34:c0:a8:c8:4b:4e:82:6d:bd:9f:e7: d5:67:cd:89:30:23:9d:ac:18:a2:ba:16:d2:b0:59: d7:5f:8f:de:96:1e:72:bf:77:ea:b8:fa:89:03:f9: c8:a4:0a:ae:a1:c8:4e:e1:5d:a3:bf:e5:25:72:d3: d1:a2:cf:5f:6b:a6:fa:51:6f:13:48:11:2d:28:7e: d2:ad:64:b8:a8:c7:2b:3f:1b:e1:f2:e6:48:98:ca: 47:b4:d0:74:1f:43:fe:77:d7:ec:bf:44:f6:50:9d: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B6:2F:6B:4B:31:33:87:EF:B2:4B:AE:1B:81:8B:35:13:F1:DD:56 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:0b:df:cd:4d:89:7c:06:7b:6b:22:8b:6b:b9:f1:84:36: 9e:6c:a5:04:8e:66:18:5f:7d:15:8f:24:84:eb:a9:bc:aa:46: e2:d6:b5:36:24:3f:7b:96:bd:d3:60:3e:70:76:18:1c:e7:df: 3f:dd:29:0b:7f:a8:82:60:af:9a:92:4a:a7:36:4b:0d:ea:70: 3b:02:ca:ac:55:9e:4b:b1:7c:fd:c6:1b:f1:4a:5f:d4:0b:bd: 09:81:3b:23:82:99:a2:48:95:4c:43:eb:b2:dd:69:47:52:a3: e2:5e:53:5a:6b:a7:a0:57:6f:a1:e8:94:e5:ea:56:5e:4b:e5: 75:e9:5e:f7:2f:98:18:7d:71:4c:42:bf:26:4a:6a:b2:46:1b: 00:b6:50:c0:48:17:96:93:0b:4d:15:ef:83:e3:6f:26:a6:d1: 4a:12:1a:30:60:79:53:d1:14:e7:82:89:a5:bd:73:3b:7f:63: b4:12:c8:eb:fa:08:61:2b:72:66:35:76:04:e4:44:f2:cf:3b: f2:e8:89:d5:ea:bc:ee:3c:23:22:77:bd:90:3b:c6:84:85:48: ea:02:6f:43:aa:5c:b8:e0:76:9e:dc:73:67:34:a7:f9:6b:71: 56:ce:d3:c9:0c:3a:56:24:f0:1f:4e:5e:42:64:fd:15:10:cf: 24:58:f3:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwNDE4MTQyNjAzWhcNMjYwNDI1MTQyNjAzWjAYMRYwFAYD VQQDEw02OWUzOTQ3Yy1hZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeBJ0kisKrRWFZ8U1d6JYOToXNdC9a0lfTrvrNr4WstrtQ+Xpl1ZwiryZ9E9 SJZKJpzPUGf3NQdgssQlfJnxZUwgeCoX2Dlf0YXl9P0fpIoSgGncb3CK+MBnQ7nB dnFePuyC1xuI2WybpNJUsv9SXr8x6L/1Md59qm8LYyoPn+w0Qw+lMEl5wwt9j6EU 5wZTBgvSxr8MRsWZNMCoyEtOgm29n+fVZ82JMCOdrBiiuhbSsFnXX4/elh5yv3fq uPqJA/nIpAquochO4V2jv+UlctPRos9fa6b6UW8TSBEtKH7SrWS4qMcrPxvh8uZI mMpHtNB0H0P+d9fsv0T2UJ2qywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL62L2tL MTOH77JLrhuBizUT8d1WMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADz4L381NiXwGe2sii2u58YQ2nmylBI5mGF99FY8khOupvKpG4ta1NiQ/e5a9 02A+cHYYHOffP90pC3+ogmCvmpJKpzZLDepwOwLKrFWeS7F8/cYb8Upf1Au9CYE7 I4KZokiVTEPrst1pR1Kj4l5TWmunoFdvoeiU5epWXkvldele9y+YGH1xTEK/Jkpq skYbALZQwEgXlpMLTRXvg+NvJqbRShIaMGB5U9EU54KJpb1zO39jtBLI6/oIYSty ZjV2BORE8s878uiJ1eq87jwjIne9kDvGhIVI6gJvQ6pcuOB2ntxzZzSn+WtxVs7T yQw6ViTwH05eQmT9FRDPJFjzpA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:41 2026 by rpki-client