$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: MWVozNPE1ZtoMH1OxKQUeLYF9Sr8S3ZdpSpRFS+mfEk= Subject key identifier: 9C:70:34:30:FD:61:4E:F9:34:8A:87:C9:8A:AF:FE:AE:A6:61:9B:56 Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 09C7 Signing time: Tue 24 Mar 2026 19:41:50 +0000 Manifest this update: Tue 24 Mar 2026 19:41:49 +0000 Manifest next update: Tue 31 Mar 2026 19:41:49 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: 6+6qicCh2JdNqpAWzjrbOt0nmhqXzK7f0SSYamjnUvM=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XourWZvjWeRYuoG4eJzATWITu2fMjkfcMaCSGMduRx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Mar 24 19:41:49 2026 GMT Not After : Mar 31 19:41:49 2026 GMT Subject: CN=69c2e8fe-223c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:0d:ab:dd:d9:df:3c:6c:19:c5:5b:b2:c0: 31:6e:b1:ed:1f:70:29:4c:d4:4b:e1:e5:36:e7:08: 89:35:fa:2a:4b:39:25:bb:15:65:94:fe:88:bd:a1: dc:e6:09:1e:a0:96:67:f0:f7:5b:69:4e:99:7a:74: 59:ea:89:49:6b:9e:91:14:0a:60:17:10:90:3f:85: 7a:9e:c5:05:06:ab:82:db:52:ac:f4:7b:31:39:6b: c3:48:6f:75:2e:d1:55:80:13:0b:84:2b:fe:10:6f: de:5f:c5:cb:7f:83:53:2e:5e:45:80:fd:60:c0:3b: 34:35:59:b2:31:5e:81:64:9a:56:4a:d5:41:fb:23: cc:55:2f:35:33:be:a0:1a:f4:dd:56:6e:d3:b5:c4: f3:8d:c3:c2:85:b0:13:56:40:3b:01:12:3f:97:00: c3:1f:7e:d6:4e:33:65:55:01:79:e1:db:ed:7f:66: dc:5f:ba:b7:31:81:8d:0c:58:60:c8:39:60:66:a8: af:3e:44:89:f8:d6:ce:09:e8:09:e4:bd:75:d3:26: b9:3b:36:a9:81:59:88:10:86:fe:b0:41:77:2c:6c: d1:f8:a0:e3:92:1f:de:45:8b:3a:59:41:8a:7e:db: 6d:95:9a:ba:b8:96:60:62:17:f6:86:bc:97:00:9e: 8d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:34:30:FD:61:4E:F9:34:8A:87:C9:8A:AF:FE:AE:A6:61:9B:56 X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:70:bd:75:64:88:a9:19:8b:76:10:55:90:6b:36:8c:35:f6: 8d:8a:c3:03:0b:40:6c:56:64:44:be:bf:3c:1b:23:00:15:a5: 09:1d:18:4a:ae:50:54:f8:00:fc:c2:ed:53:a3:7f:e4:48:26: 96:f0:32:66:fa:8a:0b:32:e4:04:72:0d:b1:0b:13:2c:98:a5: 2a:71:07:b0:1e:e7:04:85:1e:bd:34:c1:58:07:3e:e8:cd:f4: b2:ce:71:6e:3b:a1:c4:fa:1c:a5:65:d6:8f:98:c0:86:11:dd: d6:45:31:cc:89:fa:2e:eb:b6:b8:ab:30:29:21:b5:c2:29:83: 88:bc:36:50:0e:af:32:0d:02:12:76:b0:06:4e:84:30:93:96: 15:2a:98:df:32:cf:f2:37:2a:d0:61:37:9e:c8:c9:d6:6d:9a: d1:b6:ac:90:9e:82:92:14:83:74:86:62:e9:ab:86:23:50:af: 18:fe:a0:43:38:5b:30:fb:f9:65:97:fc:ac:7e:bb:7f:8a:c1: 6c:f3:7f:c5:f1:31:50:54:02:0b:83:d9:85:3e:4d:7f:39:18: 7b:b7:ab:a5:7c:65:f3:a4:ce:8c:a6:ef:e6:33:8b:2c:d9:d8: 06:dc:6a:41:6a:f0:40:78:9d:ff:8b:07:f8:3d:20:68:62:3a: 0f:93:d8:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwMzI0MTk0MTQ5WhcNMjYwMzMxMTk0MTQ5WjAYMRYwFAYD VQQDEw02OWMyZThmZS0yMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRYNq93Z3zxsGcVbssAxbrHtH3ApTNRL4eU25wiJNfoqSzkluxVllP6IvaHc 5gkeoJZn8PdbaU6ZenRZ6olJa56RFApgFxCQP4V6nsUFBquC21Ks9HsxOWvDSG91 LtFVgBMLhCv+EG/eX8XLf4NTLl5FgP1gwDs0NVmyMV6BZJpWStVB+yPMVS81M76g GvTdVm7TtcTzjcPChbATVkA7ARI/lwDDH37WTjNlVQF54dvtf2bcX7q3MYGNDFhg yDlgZqivPkSJ+NbOCegJ5L110ya5OzapgVmIEIb+sEF3LGzR+KDjkh/eRYs6WUGK ftttlZq6uJZgYhf2hryXAJ6N5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxwNDD9 YU75NIqHyYqv/q6mYZtWMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHC9dWSIqRmLdhBVkGs2jDX2jYrDAwtAbFZkRL6/PBsjABWlCR0YSq5QVPgA /MLtU6N/5EgmlvAyZvqKCzLkBHINsQsTLJilKnEHsB7nBIUevTTBWAc+6M30ss5x bjuhxPocpWXWj5jAhhHd1kUxzIn6Luu2uKswKSG1wimDiLw2UA6vMg0CEnawBk6E MJOWFSqY3zLP8jcq0GE3nsjJ1m2a0baskJ6CkhSDdIZi6auGI1CvGP6gQzhbMPv5 ZZf8rH67f4rBbPN/xfExUFQCC4PZhT5NfzkYe7erpXxl86TOjKbv5jOLLNnYBtxq QWrwQHid/4sH+D0gaGI6D5PYaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:19:22 2026 by rpki-client