$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: x9OwIWmJTrCJerL+TRnFqX5lqNgdxXt0kh8A4TLtH2k= Subject key identifier: 1B:61:E4:C7:F0:33:A3:C4:7D:20:F5:41:FF:78:F6:94:FC:16:18:BC Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 79 Signing time: Wed 25 Mar 2026 07:02:09 +0000 Manifest this update: Wed 25 Mar 2026 07:02:08 +0000 Manifest next update: Wed 01 Apr 2026 07:02:08 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: BNe/HrwZG5Z4H36FQCP4sbfvGpLq6h5N14/UJErtRuA=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Mar 25 07:02:08 2026 GMT Not After : Apr 1 07:02:08 2026 GMT Subject: CN=69c38871-a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:a0:2a:38:1d:89:7b:9e:91:44:3e:c7:d7: 8b:1d:a1:4b:9c:46:1a:42:fc:66:26:0b:af:db:9c: e9:4b:94:1a:0d:3e:35:5f:3b:da:85:78:17:a6:45: ff:31:10:f6:17:6c:5a:7a:bc:85:ad:97:c2:04:f9: d2:41:0f:31:e3:69:fa:5e:fe:59:fd:14:27:15:a8: cf:c5:ad:c1:39:df:dc:3e:ff:1a:9d:df:67:03:81: d1:ba:f5:7b:dd:77:8c:4b:9f:41:fe:f3:9a:67:a3: 3e:a3:e9:34:e3:bd:78:0c:8c:27:e6:cf:66:8c:70: ee:29:ea:55:a5:64:a5:fa:ec:81:4d:56:56:3d:5a: 36:f0:e7:58:ea:be:e3:ac:ab:5a:55:35:aa:89:d2: 26:ad:88:25:35:ba:f2:35:cf:19:ae:fb:cf:fb:ac: 80:7e:6e:32:56:c3:76:f1:df:df:2d:67:8b:79:e2: 97:ba:0a:0a:6d:06:5d:55:cb:10:b9:83:c5:54:6d: 79:39:71:5d:b5:51:ed:17:8b:d9:53:82:68:a5:ff: 1b:b8:bc:cd:a6:79:25:a7:30:a1:44:d0:55:02:38: 12:0e:3c:7f:13:f4:ed:ac:a8:c7:8c:fa:db:9b:29: 8e:c2:b7:68:7c:65:f3:76:ff:fa:71:91:cb:fc:39: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:61:E4:C7:F0:33:A3:C4:7D:20:F5:41:FF:78:F6:94:FC:16:18:BC X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:59:24:c3:cd:37:81:44:8a:a1:7c:54:31:57:fb:e6:7e:e2: 80:0a:0b:cb:58:ee:e3:f3:9f:0e:1a:61:3c:68:1b:4d:97:71: 99:1b:3b:51:29:ef:7d:de:f3:62:83:6c:bd:fc:d3:ba:83:4a: 9e:df:70:3d:26:9d:73:bb:c8:46:7d:ee:92:2e:51:6b:6c:28: 80:f9:d7:49:f9:84:8d:42:67:67:3c:18:94:d7:8b:d0:64:ea: 0d:03:95:c0:e4:14:fa:49:64:d4:4e:05:8b:be:e6:fd:ba:6e: 9c:19:73:be:64:4f:74:7f:f9:63:91:41:29:48:56:96:b6:51: 6d:ca:4d:42:bc:70:8b:61:8b:5c:21:77:d4:e8:0c:c4:cd:22: f2:a1:ce:77:05:e5:7e:5a:b7:11:69:ca:24:76:16:27:1d:83: d7:7a:08:25:c8:d4:0c:3c:fa:05:56:5a:fd:a7:97:8e:65:16: 81:6a:e3:6b:ae:9a:4e:ef:d4:96:9d:e5:ff:b7:cd:eb:03:ff: 2b:21:49:23:fa:6c:fd:2f:55:53:24:d9:56:76:72:85:59:95: 3f:3e:bb:e2:7f:a8:e6:e9:c2:00:81:40:5d:f5:7e:26:e4:43: f3:ea:3b:5c:77:63:67:7f:65:41:1e:ec:3c:14:57:7d:58:a7: 65:8e:cc:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNjAzMjUwNzAyMDhaFw0yNjA0MDEwNzAyMDhaMBgxFjAUBgNV BAMTDTY5YzM4ODcxLWE2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDloqAqOB2Je56RRD7H14sdoUucRhpC/GYmC6/bnOlLlBoNPjVfO9qFeBemRf8x EPYXbFp6vIWtl8IE+dJBDzHjafpe/ln9FCcVqM/FrcE539w+/xqd32cDgdG69Xvd d4xLn0H+85pnoz6j6TTjvXgMjCfmz2aMcO4p6lWlZKX67IFNVlY9Wjbw51jqvuOs q1pVNaqJ0iatiCU1uvI1zxmu+8/7rIB+bjJWw3bx398tZ4t54pe6CgptBl1VyxC5 g8VUbXk5cV21Ue0Xi9lTgmil/xu4vM2meSWnMKFE0FUCOBIOPH8T9O2sqMeM+tub KY7Ct2h8ZfN2//pxkcv8OQXrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG2Hkx/Az o8R9IPVB/3j2lPwWGLwwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgWSTDzTeBRIqhfFQxV/vmfuKACgvLWO7j858OGmE8aBtNl3GZGztRKe993vNi g2y9/NO6g0qe33A9Jp1zu8hGfe6SLlFrbCiA+ddJ+YSNQmdnPBiU14vQZOoNA5XA 5BT6SWTUTgWLvub9um6cGXO+ZE90f/ljkUEpSFaWtlFtyk1CvHCLYYtcIXfU6AzE zSLyoc53BeV+WrcRacokdhYnHYPXegglyNQMPPoFVlr9p5eOZRaBauNrrppO79SW neX/t83rA/8rIUkj+mz9L1VTJNlWdnKFWZU/Prvif6jm6cIAgUBd9X4m5EPz6jtc d2Nnf2VBHuw8FFd9WKdljsxe -----END CERTIFICATE-----Generated at Fri Mar 27 00:54:57 2026 by rpki-client