$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: B0j3n0TJ+diS20QdrJUIMbSx8pbK8x4EMPK0YNMXsGA= Subject key identifier: E9:18:6F:31:E1:F5:18:01:C2:DB:7D:BE:50:88:21:56:51:0B:73:7A Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0702 Signing time: Tue 24 Mar 2026 21:40:30 +0000 Manifest this update: Tue 24 Mar 2026 21:40:30 +0000 Manifest next update: Tue 31 Mar 2026 21:40:30 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: oO+HK+CoSeMUeuIrdMGmPmcIQbpaG/YtT4H+C4Kgmck=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: hBD68GW8EzVJvKT8oXKY6Hq3TsjlKL7/gUCCeWgsIJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Mar 24 21:40:30 2026 GMT Not After : Mar 31 21:40:30 2026 GMT Subject: CN=69c304ce-62f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:2a:c2:6d:79:02:4d:7a:b2:7c:af:5c:25: 73:f9:82:a2:b4:76:4c:c3:ed:21:32:a8:3a:d7:0e: f2:70:98:64:2d:5f:99:72:51:1d:43:0b:af:ea:93: 72:1c:cf:05:9e:a2:9a:22:94:30:07:85:6e:7d:25: 4e:f0:a8:1a:3a:81:84:72:8a:bb:81:13:bc:59:4a: 27:04:67:e8:6a:04:ab:d5:09:00:3a:92:c2:93:12: 40:d1:7a:18:74:59:2e:59:3d:28:ca:c5:87:1b:d9: b9:d1:14:a2:31:2c:60:53:f9:ce:9f:4d:1e:c9:72: c7:4b:a9:1e:88:15:47:e7:9a:31:3b:ce:48:1d:cd: 40:61:40:ee:3a:08:35:21:35:3d:3c:8e:b3:c7:84: d2:60:52:a8:62:56:56:ce:d6:06:a5:37:26:a2:62: 1e:8b:1b:09:ec:d5:b4:90:c4:c7:0a:0d:a1:19:9c: fc:86:38:29:0d:49:c9:4c:e8:77:0c:e2:88:4b:58: a8:52:98:5c:96:43:72:07:02:98:87:f8:35:d3:0a: 8c:37:37:9a:c5:09:36:e4:18:90:40:bf:68:3d:e6: cd:79:cf:c5:34:f7:41:65:90:b4:15:ad:d2:1f:d8: 6a:87:22:f3:9e:b0:13:b5:1d:f3:de:db:97:a0:ab: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:18:6F:31:E1:F5:18:01:C2:DB:7D:BE:50:88:21:56:51:0B:73:7A X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3d:22:b5:b0:85:f2:fc:bc:d5:ca:51:e0:01:b0:d0:8a:4f: f4:e5:1e:8d:3b:65:46:c4:63:aa:77:61:69:d1:de:1a:4b:aa: b4:c7:d7:55:8a:e6:21:8c:c9:f6:d2:53:25:b3:f1:c4:32:3c: 45:38:69:98:76:08:49:86:50:d9:1d:63:54:8c:0a:ed:e4:66: e2:39:1d:74:bc:c3:ee:0f:57:82:f1:d3:4f:5e:58:5d:69:54: 5d:5c:0a:25:73:04:d4:f2:47:49:8e:bc:50:2c:b2:8f:eb:f0: 78:c2:d1:90:04:2f:a3:c2:55:b4:b4:35:cc:b5:0d:29:23:d8: 2e:76:14:1b:8b:14:91:a1:9f:68:f4:fe:fb:c9:0c:b5:01:3a: 3d:9e:f3:a8:bc:82:27:3b:fb:d3:1d:1d:19:36:35:a8:2b:f0: b1:56:94:f4:33:f7:4e:e1:e2:09:1b:3d:27:a6:33:10:fd:5f: e1:fd:d5:65:e8:97:8d:04:f1:26:0d:30:e2:31:53:50:ee:21: b6:ad:e1:ba:fa:70:c3:8a:ae:ba:f0:6c:6c:04:d8:59:ba:c9: 8f:7b:da:ae:45:e2:83:29:7d:14:16:63:4f:d5:f2:ca:d0:73: 35:65:2a:9e:52:8b:39:dc:62:9b:b0:42:cd:ec:0d:cb:da:99: 16:fb:ce:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjYwMzI0MjE0MDMwWhcNMjYwMzMxMjE0MDMwWjAYMRYwFAYD VQQDEw02OWMzMDRjZS02MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof8qwm15Ak16snyvXCVz+YKitHZMw+0hMqg61w7ycJhkLV+ZclEdQwuv6pNy HM8FnqKaIpQwB4VufSVO8KgaOoGEcoq7gRO8WUonBGfoagSr1QkAOpLCkxJA0XoY dFkuWT0oysWHG9m50RSiMSxgU/nOn00eyXLHS6keiBVH55oxO85IHc1AYUDuOgg1 ITU9PI6zx4TSYFKoYlZWztYGpTcmomIeixsJ7NW0kMTHCg2hGZz8hjgpDUnJTOh3 DOKIS1ioUphclkNyBwKYh/g10wqMNzeaxQk25BiQQL9oPebNec/FNPdBZZC0Fa3S H9hqhyLznrATtR3z3tuXoKtpFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkYbzHh 9RgBwtt9vlCIIVZRC3N6MB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApz0itbCF8vy81cpR4AGw0IpP9OUejTtlRsRjqndhadHeGkuqtMfXVYrmIYzJ 9tJTJbPxxDI8RThpmHYISYZQ2R1jVIwK7eRm4jkddLzD7g9XgvHTT15YXWlUXVwK JXME1PJHSY68UCyyj+vweMLRkAQvo8JVtLQ1zLUNKSPYLnYUG4sUkaGfaPT++8kM tQE6PZ7zqLyCJzv70x0dGTY1qCvwsVaU9DP3TuHiCRs9J6YzEP1f4f3VZeiXjQTx Jg0w4jFTUO4htq3huvpww4quuvBsbATYWbrJj3varkXigyl9FBZjT9XyytBzNWUq nlKLOdxim7BCzewNy9qZFvvOjg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:00 2026 by rpki-client