$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: 10fCqlqmjY29daSgogcrhWzLJ0BCUmv+C2xR9nUWSpQ= Subject key identifier: 85:42:F2:51:54:E8:46:C9:88:25:89:FE:D8:D6:ED:CB:4D:EF:2E:58 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 09E4 Signing time: Wed 26 Aug 2026 19:59:59 +0000 Manifest this update: Wed 26 Aug 2026 19:59:59 +0000 Manifest next update: Wed 02 Sep 2026 19:59:59 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: r6ndMDWfE1aGIshbKdsxOjqJo6POhGmdnkKbn970/1I=) 2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: igIIxOdVfOFaRjkyfF2zGfACTv4UGuFgRRFoA3gtY0I=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: gDNQ7RDm3OlBoepFJZ0oUQAQP6m12BXRlInXhBKg1vs=) 4: 9672E862793811EE92C54834C4F9AE02.roa (hash: a5toYxSlaQOmROPbZacPOEgPPT6M3e6P8lemP79n0y8=) 5: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 7ASaDMV9ToLVHZbT40402K/ssxiDjCFAWsQCvf8MlnM=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: rWk0hphHKYRVQcd2mZNKRcG9DxqMSbfqbJG0rWI+Ij4=) 7: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: W0zwFBzb66pp0ecBXLI+aIvqBo4Sln7kS4LpWBDVVxM=) 8: 781C64FAF58611ED89273159C4F9AE02.roa (hash: +GXUy2iqy+S2cH6U3ubY1eizES4geu9nbh4cFQMFoIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 19:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Aug 26 19:59:59 2026 GMT Not After : Sep 2 19:59:59 2026 GMT Subject: CN=6a8f45bf-7ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:2a:28:aa:a1:83:83:c8:be:d6:5a:43:e5: 44:b0:35:e6:65:bb:aa:1f:b8:f0:2e:f1:e1:25:d4: 20:5b:46:47:54:70:f0:cd:f4:a2:99:9c:08:32:07: c7:d1:4b:7a:e6:f8:d5:fb:e4:ed:5c:05:e8:df:09: 30:04:31:de:32:93:05:b7:75:7d:da:df:f0:9a:77: 56:9b:3d:3b:7b:d7:1a:83:8f:69:46:b5:5b:27:e7: 72:21:02:c1:e4:b6:25:65:75:ae:81:06:3f:44:f4: bb:81:d5:31:71:0d:c7:ec:61:3a:51:73:e2:d1:ef: 26:f9:c4:c5:6b:90:ea:1a:97:07:d9:68:4b:be:4b: dc:65:11:f5:bc:a6:ac:42:90:29:d3:6d:b3:cf:c4: 5e:d6:50:f4:1d:cd:b5:8e:cf:bc:ec:93:ba:0f:39: d5:05:fc:d6:0f:34:f8:b3:8d:b0:5b:b7:15:fa:a1: 66:bf:d9:bd:7b:c6:ab:94:3b:66:b7:62:f4:0f:a5: 8c:55:65:d6:77:ea:3d:98:26:be:b3:24:77:55:bd: 8f:cb:f8:de:1c:47:b8:ee:c8:85:84:6b:96:7f:f1: fb:d5:ba:56:97:83:6b:01:42:db:b8:38:8c:94:ef: 73:ac:70:cf:35:42:ad:28:e8:36:62:8d:a0:24:85: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:F2:51:54:E8:46:C9:88:25:89:FE:D8:D6:ED:CB:4D:EF:2E:58 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:ae:84:16:90:8a:10:2d:65:2a:56:53:91:70:e1:52:80:72: 06:49:60:f8:b4:7c:d6:de:01:c4:82:28:5e:9c:0d:1a:af:b3: 18:85:a7:b0:b9:f8:94:43:c3:27:fe:fc:82:99:c6:f2:5f:64: 1e:da:78:4c:ab:0d:98:03:44:8d:03:2d:58:e7:85:70:d6:32: b9:f1:78:c7:6f:bf:e8:ef:b2:b7:db:fd:80:bc:31:2c:bb:1f: f4:8b:3d:10:fb:81:38:23:85:c6:69:ef:25:50:70:3e:0a:b5: c5:34:a9:60:d5:66:ef:9e:0d:80:5d:43:22:b0:d2:9b:40:f9: 5e:85:c1:de:2b:f4:69:f9:b7:97:80:f6:60:db:3c:de:86:2b: 9f:a5:8b:e3:19:fd:4a:7f:a5:06:62:a5:66:8c:96:50:2f:24: 4b:bf:9c:a8:4c:08:2c:4c:3a:bd:10:fa:10:5b:ac:1d:fd:d2: 66:e7:84:6b:89:c8:2e:d1:cf:28:ad:51:da:22:be:cc:cb:d9: c2:d3:6f:dd:41:be:7a:50:88:f3:f1:02:a9:d9:28:5b:cb:33: d2:b0:c7:fc:10:73:5b:f3:15:85:af:7f:39:66:e9:38:53:b2: 99:84:cd:1a:94:86:3f:9f:ce:c6:a3:43:2f:2e:26:8b:42:8d: 26:27:49:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwODI2MTk1OTU5WhcNMjYwOTAyMTk1OTU5WjAYMRYwFAYD VQQDEw02YThmNDViZi03ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0gqKKqhg4PIvtZaQ+VEsDXmZbuqH7jwLvHhJdQgW0ZHVHDwzfSimZwIMgfH 0Ut65vjV++TtXAXo3wkwBDHeMpMFt3V92t/wmndWmz07e9cag49pRrVbJ+dyIQLB 5LYlZXWugQY/RPS7gdUxcQ3H7GE6UXPi0e8m+cTFa5DqGpcH2WhLvkvcZRH1vKas QpAp022zz8Re1lD0Hc21js+87JO6DznVBfzWDzT4s42wW7cV+qFmv9m9e8arlDtm t2L0D6WMVWXWd+o9mCa+syR3Vb2Py/jeHEe47siFhGuWf/H71bpWl4NrAULbuDiM lO9zrHDPNUKtKOg2Yo2gJIXC/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVC8lFU 6EbJiCWJ/tjW7ctN7y5YMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwa6EFpCKEC1lKlZTkXDhUoByBklg+LR81t4BxIIoXpwNGq+zGIWnsLn4lEPD J/78gpnG8l9kHtp4TKsNmANEjQMtWOeFcNYyufF4x2+/6O+yt9v9gLwxLLsf9Is9 EPuBOCOFxmnvJVBwPgq1xTSpYNVm754NgF1DIrDSm0D5XoXB3iv0afm3l4D2YNs8 3oYrn6WL4xn9Sn+lBmKlZoyWUC8kS7+cqEwILEw6vRD6EFusHf3SZueEa4nILtHP KK1R2iK+zMvZwtNv3UG+elCI8/ECqdkoW8sz0rDH/BBzW/MVha9/OWbpOFOymYTN GpSGP5/OxqNDLy4mi0KNJidJpg== -----END CERTIFICATE-----Generated at Thu Aug 27 03:03:45 2026 by rpki-client