$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: tP/VtlHPn7RveBcruedNtgEpbKagKbnrE5zQ2TqF61w= Subject key identifier: 66:F1:20:4F:E0:F4:B3:5C:11:FE:ED:1E:4F:CB:E3:6E:29:91:65:D7 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 360B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3586 Signing time: Sat 14 Mar 2026 14:25:51 +0000 Manifest this update: Sat 14 Mar 2026 14:25:50 +0000 Manifest next update: Sat 21 Mar 2026 14:25:50 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: WZF22x3p/86a169M4WBFeFDQoWT6umH3R1wYRsjMe3U=) 2: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: +EvvxARvsL5/RglBY+Jh4XrkPl9ijVHUES7FlYNYows=) 3: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: TXMQQ1A35wcn0vd2F/lg63dSiXn2E+vH3CzPG5I1pTw=) 4: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: 35VgX9rf+XhH26LlIXgW4m4oJdqmNJWXhKFWnvMUpIg=) 5: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 2zyppsSURTOn3zdsXlXSIBSh5cgiacXxcTYDO0urYho=) 6: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: YijLflInNWKirZ+Amp3ReIzopyb5zO6JUo1pwdICiQ4=) 7: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: GpR3OGvbnTrDlBYbHFJbxtAT3tJNM7GEQVH8f2/yUaA=) 8: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 6nZ4JvdEqawdRMU4DMQ0s0luXIXk7iBOFgicrumlEU8=) 9: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: m0Un1LZunOEx8tJ3JVZoA33oEl7vompkxVrJm4Tr/+U=) 10: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: r3JYBnswXkhUT0pAellu2gkvKhVKlRYjFdaMpDHp8wk=) 11: BDDE4EC2024411F18C2650671F3D8C67.roa (hash: htqzcjX9L4qnk3PFtIxLP/2WcVp6WtsQCCJ6i1NyuP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13835 (0x360b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Mar 14 14:25:50 2026 GMT Not After : Mar 21 14:25:50 2026 GMT Subject: CN=69b56fef-4ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:9c:02:45:e3:cd:1f:00:8e:01:ee:72:47: 94:38:5a:fc:6d:dd:31:b4:1f:0b:e2:01:85:73:ea: ba:c7:24:a9:a0:16:c0:e4:50:64:9d:c4:48:da:06: 7f:49:ab:21:b9:3b:23:79:f6:dc:81:14:8f:af:70: e7:e6:cb:8b:7f:8e:79:d7:57:90:d4:ad:cb:22:94: 50:50:fa:07:18:f6:b7:cd:d2:f8:94:88:7c:53:a2: fc:56:62:1e:d9:df:68:99:ba:f5:4d:57:e9:3a:19: 2f:28:5f:ec:7e:99:9c:88:39:f0:b2:2e:31:84:37: 85:91:69:e1:97:38:8e:7e:5e:48:1e:1d:b2:66:71: 95:f4:5b:e6:d2:8a:a9:eb:c3:a5:86:89:df:09:ab: 76:5b:1a:f2:18:68:9f:f1:ac:ac:cc:06:13:ea:c7: 24:8d:3f:cf:28:82:a8:3f:f4:c8:f4:68:38:9a:e0: 77:a0:48:81:25:ac:b7:8a:64:bf:3b:67:83:a6:fb: 9d:df:04:0a:0e:b1:47:93:80:86:f0:a7:c7:e6:9b: d2:a4:ad:93:0f:12:77:bd:cf:4a:94:eb:8e:f6:7c: cb:7a:7e:66:e5:ad:14:26:c9:6c:b2:d2:ff:4d:6c: d5:3d:25:14:e6:fd:d3:26:82:44:a8:d9:11:18:c0: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F1:20:4F:E0:F4:B3:5C:11:FE:ED:1E:4F:CB:E3:6E:29:91:65:D7 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:87:b1:7c:ad:a5:46:cc:e5:1f:1b:6f:5e:eb:48:ad:b9:f9: 90:1d:cf:3a:0e:35:97:c4:3a:37:5b:45:bd:88:57:9e:02:ec: 6e:18:5c:47:da:49:e2:09:64:8d:0e:89:4f:09:86:af:77:90: 5c:0e:11:5e:4a:5e:e9:6f:bb:f1:8c:c7:8d:d3:bb:08:2b:8e: ea:0e:4f:ae:c4:ce:92:fd:db:0f:49:a6:c4:80:7a:0c:ee:57: d8:8a:e1:f4:b6:66:df:9e:e2:ea:2a:8d:61:99:f3:02:19:bb: 42:c0:94:0e:ca:ee:cf:20:0f:ff:bd:2b:ee:57:75:64:b6:52: 45:fb:88:8f:55:2e:68:84:6a:28:99:34:de:83:5d:79:ce:16: fb:49:21:35:13:55:d9:05:8f:73:a2:07:ba:a9:9e:39:e6:26: 92:be:16:00:4d:16:89:98:5f:b5:6f:29:6b:1b:43:3a:f2:f4: f8:c6:e5:b3:ad:ef:7d:e5:0c:4a:3c:3a:8d:4a:a9:ec:1c:a9: f9:c2:c0:94:b3:00:68:e3:b9:c4:51:36:6e:fd:1d:3a:0f:25: 9b:de:86:1a:2d:aa:c0:fb:18:07:1a:16:c8:72:7c:22:8d:a2: 62:d6:03:bb:72:fa:a8:55:ec:f2:39:f0:4e:b3:03:ae:9b:67: 86:c2:79:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwMzE0MTQyNTUwWhcNMjYwMzIxMTQyNTUwWjAYMRYwFAYD VQQDEw02OWI1NmZlZi00ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS2cAkXjzR8AjgHuckeUOFr8bd0xtB8L4gGFc+q6xySpoBbA5FBkncRI2gZ/ SashuTsjefbcgRSPr3Dn5suLf45511eQ1K3LIpRQUPoHGPa3zdL4lIh8U6L8VmIe 2d9ombr1TVfpOhkvKF/sfpmciDnwsi4xhDeFkWnhlziOfl5IHh2yZnGV9Fvm0oqp 68OlhonfCat2WxryGGif8ayszAYT6sckjT/PKIKoP/TI9Gg4muB3oEiBJay3imS/ O2eDpvud3wQKDrFHk4CG8KfH5pvSpK2TDxJ3vc9KlOuO9nzLen5m5a0UJslsstL/ TWzVPSUU5v3TJoJEqNkRGMADUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbxIE/g 9LNcEf7tHk/L424pkWXXMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK4exfK2lRszlHxtvXutIrbn5kB3POg41l8Q6N1tFvYhXngLsbhhcR9pJ4glk jQ6JTwmGr3eQXA4RXkpe6W+78YzHjdO7CCuO6g5PrsTOkv3bD0mmxIB6DO5X2Irh 9LZm357i6iqNYZnzAhm7QsCUDsruzyAP/70r7ld1ZLZSRfuIj1UuaIRqKJk03oNd ec4W+0khNRNV2QWPc6IHuqmeOeYmkr4WAE0WiZhftW8paxtDOvL0+Mbls63vfeUM Sjw6jUqp7Byp+cLAlLMAaOO5xFE2bv0dOg8lm96GGi2qwPsYBxoWyHJ8Io2iYtYD u3L6qFXs8jnwTrMDrptnhsJ5Fg== -----END CERTIFICATE-----Generated at Sun Mar 15 09:24:55 2026 by rpki-client