$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: ZVyNn5DjoF3TX17Lmxt0ib40YMk9kY6/QJUJixpo+Ls= Subject key identifier: CB:7C:A0:DA:C7:55:F2:D1:A5:4D:B8:05:CB:A9:C8:43:38:23:98:32 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 09FB Signing time: Sat 10 Oct 2026 20:06:12 +0000 Manifest this update: Sat 10 Oct 2026 20:06:11 +0000 Manifest next update: Sat 17 Oct 2026 20:06:11 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: lmjVEKlpFg6gSmtICeA0GjwzA8R+exDTGOzZa7X3Qd8=) 2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: igIIxOdVfOFaRjkyfF2zGfACTv4UGuFgRRFoA3gtY0I=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: gDNQ7RDm3OlBoepFJZ0oUQAQP6m12BXRlInXhBKg1vs=) 4: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: rWk0hphHKYRVQcd2mZNKRcG9DxqMSbfqbJG0rWI+Ij4=) 5: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 7ASaDMV9ToLVHZbT40402K/ssxiDjCFAWsQCvf8MlnM=) 6: 781C64FAF58611ED89273159C4F9AE02.roa (hash: +GXUy2iqy+S2cH6U3ubY1eizES4geu9nbh4cFQMFoIM=) 7: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: W0zwFBzb66pp0ecBXLI+aIvqBo4Sln7kS4LpWBDVVxM=) 8: 9672E862793811EE92C54834C4F9AE02.roa (hash: a5toYxSlaQOmROPbZacPOEgPPT6M3e6P8lemP79n0y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Oct 10 20:06:11 2026 GMT Not After : Oct 17 20:06:11 2026 GMT Subject: CN=6aca9ab4-8cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:76:a8:e1:d6:38:e7:fb:f7:5a:7f:9e:e6: c4:dd:7f:2b:7c:94:c7:b9:7e:98:24:e8:66:c1:b9: aa:5e:c1:a2:01:b6:1e:af:ef:61:c8:0c:0f:e7:94: 43:ce:05:92:30:38:db:1c:1b:9b:73:f3:21:2a:51: 10:9e:1b:74:ff:11:91:ca:c8:37:e3:67:ca:4e:6d: e5:d8:32:43:f6:9b:5e:fa:d9:0a:0d:a8:8e:b5:c6: 94:aa:6e:6e:65:85:af:c4:03:11:bb:9e:d7:4b:73: d9:94:e4:0b:94:b1:ef:14:d2:f3:47:8a:44:7d:58: c8:89:c4:d4:d1:bc:11:a0:5d:0d:df:58:ce:72:3b: 95:fa:a8:b5:ca:de:79:2d:49:bf:2d:c8:c2:a5:64: 12:2d:cd:8a:cb:b2:6c:00:44:0e:6d:c1:3c:6a:59: 0d:3a:01:c3:e2:04:fe:15:29:fb:17:ca:d5:fe:ab: 67:59:d2:64:d6:cc:4f:27:e6:da:d4:58:e0:0c:e4: 53:4c:a1:5d:3a:9b:e0:25:7b:e9:ab:e4:bb:10:54: f0:58:8e:b5:77:2a:3c:f7:50:16:75:87:ab:51:e0: cc:41:dc:60:52:b7:27:4c:1c:b6:4f:d0:cf:5f:09: 87:48:bb:20:f4:45:ae:ab:58:4d:28:ea:19:30:ae: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7C:A0:DA:C7:55:F2:D1:A5:4D:B8:05:CB:A9:C8:43:38:23:98:32 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:78:5e:5f:1f:f6:a2:35:b7:e1:91:20:36:9d:c2:e9:39:fb: 89:21:ca:26:82:11:04:e9:0a:4a:aa:d1:7b:25:cf:c4:3a:a3: f4:69:27:39:81:b8:b8:4e:3d:56:05:db:33:dd:89:23:dc:33: 2d:80:7f:a0:dc:7c:5c:a7:6b:4e:25:ff:17:f5:a9:c6:ff:8d: 99:bd:3b:b7:ba:b0:2b:c3:26:ad:5d:fa:83:51:38:58:33:28: 5b:25:c2:f3:6f:0e:1d:ee:e2:d9:fa:e8:7e:3f:e1:f6:10:45: 79:30:b6:99:b6:ca:5f:8b:fa:57:0f:f3:1a:e2:0f:38:a8:f4: e6:b3:a4:ea:fc:d6:bc:bc:8b:71:17:5c:fd:2d:70:eb:10:d6: af:5c:45:ba:7e:9e:d5:48:c2:a8:50:f2:04:24:82:03:7e:a7: 07:c3:96:e4:e8:b5:23:b6:d9:b8:4a:85:c5:fa:53:30:bb:34: 34:82:77:4c:fd:33:56:64:0d:7a:04:ad:51:76:d7:f4:01:a6: 1b:df:d2:cf:9e:38:71:b0:f7:05:0e:50:78:db:65:33:d1:7a: 1d:8a:c2:fc:ad:9e:68:9b:12:07:d2:38:56:aa:88:79:12:55: 6c:ef:76:c1:c7:b9:38:d6:d1:3c:10:ce:1b:9a:bc:5f:21:80: e0:de:c8:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYxMDEwMjAwNjExWhcNMjYxMDE3MjAwNjExWjAYMRYwFAYD VQQDEw02YWNhOWFiNC04Y2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ12qOHWOOf791p/nubE3X8rfJTHuX6YJOhmwbmqXsGiAbYer+9hyAwP55RD zgWSMDjbHBubc/MhKlEQnht0/xGRysg342fKTm3l2DJD9pte+tkKDaiOtcaUqm5u ZYWvxAMRu57XS3PZlOQLlLHvFNLzR4pEfVjIicTU0bwRoF0N31jOcjuV+qi1yt55 LUm/LcjCpWQSLc2Ky7JsAEQObcE8alkNOgHD4gT+FSn7F8rV/qtnWdJk1sxPJ+ba 1FjgDORTTKFdOpvgJXvpq+S7EFTwWI61dyo891AWdYerUeDMQdxgUrcnTBy2T9DP XwmHSLsg9EWuq1hNKOoZMK5RMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMt8oNrH VfLRpU24BcupyEM4I5gyMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhHheXx/2ojW34ZEgNp3C6Tn7iSHKJoIRBOkKSqrReyXPxDqj9GknOYG4uE49 VgXbM92JI9wzLYB/oNx8XKdrTiX/F/Wpxv+Nmb07t7qwK8MmrV36g1E4WDMoWyXC 828OHe7i2frofj/h9hBFeTC2mbbKX4v6Vw/zGuIPOKj05rOk6vzWvLyLcRdc/S1w 6xDWr1xFun6e1UjCqFDyBCSCA36nB8OW5Oi1I7bZuEqFxfpTMLs0NIJ3TP0zVmQN egStUXbX9AGmG9/Sz544cbD3BQ5QeNtlM9F6HYrC/K2eaJsSB9I4VqqIeRJVbO92 wce5ONbRPBDOG5q8XyGA4N7I9w== -----END CERTIFICATE-----Generated at Mon Oct 12 09:57:41 2026 by rpki-client