$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: SQoafiVQdEIMX6PH7HfsNG0UOziMlWxs0BmznSvatnE= Subject key identifier: 18:FB:51:1B:CB:F1:15:27:1C:93:71:F0:4F:C4:47:BB:B8:AC:A0:35 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 09B3 Signing time: Tue 26 May 2026 20:15:58 +0000 Manifest this update: Tue 26 May 2026 20:15:57 +0000 Manifest next update: Tue 02 Jun 2026 20:15:57 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: LQ6fTxnnBReZbyIOXgu2PsRhNOdeMzpoWFreQgWGDKw=) 2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=) 4: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=) 5: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=) 6: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=) 7: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=) 8: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jun 2026 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: May 26 20:15:57 2026 GMT Not After : Jun 2 20:15:57 2026 GMT Subject: CN=6a15ff7e-7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:10:b8:77:f6:cb:ba:f1:c1:a1:b0:37:fb: d1:35:7a:45:71:d2:32:fa:a0:85:cb:2f:38:cc:39: 9a:f5:7e:c6:81:a1:67:cd:6b:1b:c0:67:ed:8d:0a: 78:85:98:88:23:34:8a:24:c1:e5:c6:03:aa:94:1c: ce:80:d3:08:03:11:68:79:94:c2:fe:bb:fe:0f:10: e3:e1:c5:7e:d1:08:90:2a:9c:63:df:ea:cb:2e:ae: 97:53:18:fe:d5:27:ae:87:1b:c5:2e:c9:b8:b0:f0: 3b:d3:48:ae:ae:8b:18:e6:8b:93:06:a5:c6:7a:6d: 8e:9f:81:6d:83:ce:54:a1:c2:0b:52:42:3b:a7:f2: 1c:aa:c3:9b:44:74:b0:90:3c:bf:b6:79:a3:31:0d: a8:77:71:57:ca:d8:ef:92:91:ce:cc:b2:3e:21:15: 95:59:e1:7f:a9:bb:5b:f7:e7:69:32:c9:dd:1e:cb: e1:c6:30:e4:42:11:e0:fa:08:c2:31:f3:63:eb:10: 50:cf:15:cb:e3:ff:92:29:86:f8:f5:5b:2d:9c:f3: bb:e3:94:31:5e:7e:8c:d0:78:7d:84:c9:65:00:16: c6:18:1c:4f:94:06:f6:69:cd:dc:88:fd:2d:de:61: eb:0a:88:55:64:f6:a4:d5:12:00:5d:ff:7c:16:1f: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FB:51:1B:CB:F1:15:27:1C:93:71:F0:4F:C4:47:BB:B8:AC:A0:35 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:b3:e2:3d:d5:50:8c:46:23:a9:b2:96:6d:5d:de:41:6b: 10:8c:32:8d:66:0a:30:06:38:80:74:b9:03:ac:35:64:73:46: b3:9b:61:e6:cb:cf:57:bd:c1:3a:ba:e9:96:b1:b3:43:4e:3d: 41:31:8e:7e:f2:49:9d:96:04:f3:ba:47:74:d9:a9:7e:dd:7b: 61:b4:12:f7:b1:66:95:c3:8b:43:4a:56:b9:8c:0f:cd:87:ac: dc:67:ae:55:90:6b:21:44:92:c0:6a:3d:f0:87:1a:38:ac:f9: 4f:f3:0f:70:e3:d7:94:66:39:94:97:62:7d:6a:0b:97:b4:2b: 7d:3b:41:0c:04:a5:89:19:21:ac:d0:88:7c:ca:76:4e:94:f3: 71:2c:bf:5a:e8:18:06:cd:01:46:7c:62:a8:17:8c:b6:77:34: 65:cf:7d:f9:09:01:7e:4d:ac:26:09:b1:eb:3d:f1:34:3f:2d: 1c:9d:0e:a9:1b:c4:e6:d9:3c:de:a9:d9:be:d0:44:28:47:a7: d7:94:59:35:04:74:7f:40:63:b3:24:43:da:e4:16:ee:80:85: d1:97:ff:ae:1a:5f:b5:76:17:12:5f:48:4d:57:21:7f:6f:7b: 38:d1:5f:3e:80:1d:83:80:7c:f4:86:4d:6b:de:ca:59:6c:26: ec:a7:25:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjYwNTI2MjAxNTU3WhcNMjYwNjAyMjAxNTU3WjAYMRYwFAYD VQQDEw02YTE1ZmY3ZS03YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7QQuHf2y7rxwaGwN/vRNXpFcdIy+qCFyy84zDma9X7GgaFnzWsbwGftjQp4 hZiIIzSKJMHlxgOqlBzOgNMIAxFoeZTC/rv+DxDj4cV+0QiQKpxj3+rLLq6XUxj+ 1SeuhxvFLsm4sPA700iurosY5ouTBqXGem2On4Ftg85UocILUkI7p/IcqsObRHSw kDy/tnmjMQ2od3FXytjvkpHOzLI+IRWVWeF/qbtb9+dpMsndHsvhxjDkQhHg+gjC MfNj6xBQzxXL4/+SKYb49VstnPO745QxXn6M0Hh9hMllABbGGBxPlAb2ac3ciP0t 3mHrCohVZPak1RIAXf98Fh8u+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBj7URvL 8RUnHJNx8E/ER7u4rKA1MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMPSz4j3VUIxGI6mylm1d3kFrEIwyjWYKMAY4gHS5A6w1ZHNGs5th5svPV73B OrrplrGzQ049QTGOfvJJnZYE87pHdNmpft17YbQS97FmlcOLQ0pWuYwPzYes3Geu VZBrIUSSwGo98IcaOKz5T/MPcOPXlGY5lJdifWoLl7QrfTtBDASliRkhrNCIfMp2 TpTzcSy/WugYBs0BRnxiqBeMtnc0Zc99+QkBfk2sJgmx6z3xND8tHJ0OqRvE5tk8 3qnZvtBEKEen15RZNQR0f0BjsyRD2uQW7oCF0Zf/rhpftXYXEl9ITVchf297ONFf PoAdg4B89IZNa97KWWwm7KclQA== -----END CERTIFICATE-----Generated at Wed May 27 17:42:33 2026 by rpki-client