$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: JKjRSn35RPgpF6EmKqKA+XKnIgEbuIh5BJuxcyn7dUw= Subject key identifier: F3:AB:7E:23:CB:91:41:03:8B:F7:A8:3B:80:45:91:BF:28:7B:98:05 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 3525 Signing time: Tue 24 Mar 2026 15:13:30 +0000 Manifest this update: Tue 24 Mar 2026 15:13:30 +0000 Manifest next update: Tue 31 Mar 2026 15:13:30 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: EuWYuIpBo2auT0CHoLis+fn9hxNBSHeC8SQZV4ApG9g=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Mar 24 15:13:30 2026 GMT Not After : Mar 31 15:13:30 2026 GMT Subject: CN=69c2aa1a-64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:af:db:48:7d:dd:77:1f:ba:d3:28:6a:4e: 6d:2a:59:b0:a9:7a:1c:79:bf:bf:92:16:0c:1a:dd: d9:43:c6:63:a7:97:cd:d7:f0:b6:82:8a:d2:33:fb: a8:ad:48:c7:79:e0:00:f8:33:91:98:2d:5a:be:44: 35:88:af:6f:37:62:1b:e9:38:a6:4f:ee:74:32:35: 31:c7:52:51:02:1e:40:c5:c1:83:d0:ad:12:1a:fc: 6a:4d:ff:37:5c:f8:e2:56:82:25:1a:63:2c:c8:98: d9:47:c3:18:cd:99:75:fb:53:5f:3f:23:e0:82:18: d7:87:b7:4d:e0:e2:b9:19:53:74:06:ef:17:ad:39: 5d:97:d3:46:6f:bf:63:27:b6:08:d1:a0:67:a7:b0: 1f:c6:83:93:91:28:87:36:69:5b:7d:19:18:59:13: bf:53:f1:0b:63:b7:84:60:15:f2:fd:46:12:92:3a: 62:aa:f5:f5:48:a6:ff:56:88:fd:57:19:b5:03:fe: 2b:26:94:31:2b:f9:15:d4:e2:29:de:a0:e4:0a:e4: 6b:7c:ad:97:22:97:39:35:58:2d:e1:d5:16:24:28: ca:2a:f7:67:d0:b8:e6:89:e6:76:6c:dd:c3:16:1b: 5c:64:56:f6:df:89:49:35:97:ec:d0:38:c6:f8:eb: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:7E:23:CB:91:41:03:8B:F7:A8:3B:80:45:91:BF:28:7B:98:05 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:ac:d0:42:a3:da:17:bf:77:d5:95:e3:9e:f4:37:f4:73:8c: b0:4e:f0:e3:80:7e:18:72:e2:36:b9:f6:c2:71:2e:1c:d2:1f: 3b:1c:2a:f8:89:ef:86:2f:68:e2:68:85:7e:a6:bd:78:64:eb: 22:a9:8d:7b:af:9f:e8:57:3b:13:ca:a7:5b:2e:66:5d:98:3a: 4c:7f:88:cd:77:c9:0a:78:a8:0c:3b:aa:39:fa:76:b7:d9:5e: e1:16:97:c5:ae:45:35:20:93:c1:d7:b4:fb:9b:73:0a:d8:78: cb:c5:8a:8f:0c:5c:f4:06:d8:db:fb:e6:ae:4d:00:6e:41:5a: 4f:2d:bb:56:0a:16:70:79:3d:bd:38:29:0b:14:47:a9:2e:c5: 2a:13:87:86:95:71:cf:29:e4:68:f7:8d:df:d3:5e:93:6a:2a: 15:5e:53:20:aa:99:ac:15:89:31:dd:6a:9f:ea:b1:b3:13:b2: e8:a3:16:60:63:e6:35:ad:42:fc:48:89:bc:94:39:fe:89:3d: 49:02:c2:8b:7a:52:38:36:f0:e9:6a:23:07:61:ab:5a:1b:05: 6d:df:4e:51:74:60:64:14:e5:fb:a5:f9:8e:5b:3b:d0:e2:4e: e5:00:a0:f6:e8:7a:f7:03:61:cc:57:30:e5:0c:4d:bd:dc:8b: 31:ef:99:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjYwMzI0MTUxMzMwWhcNMjYwMzMxMTUxMzMwWjAYMRYwFAYD VQQDEw02OWMyYWExYS02NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXav20h93XcfutMoak5tKlmwqXoceb+/khYMGt3ZQ8Zjp5fN1/C2gorSM/uo rUjHeeAA+DORmC1avkQ1iK9vN2Ib6TimT+50MjUxx1JRAh5AxcGD0K0SGvxqTf83 XPjiVoIlGmMsyJjZR8MYzZl1+1NfPyPgghjXh7dN4OK5GVN0Bu8XrTldl9NGb79j J7YI0aBnp7AfxoOTkSiHNmlbfRkYWRO/U/ELY7eEYBXy/UYSkjpiqvX1SKb/Voj9 Vxm1A/4rJpQxK/kV1OIp3qDkCuRrfK2XIpc5NVgt4dUWJCjKKvdn0LjmieZ2bN3D FhtcZFb234lJNZfs0DjG+OvsTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOrfiPL kUEDi/eoO4BFkb8oe5gFMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA36zQQqPaF7931ZXjnvQ39HOMsE7w44B+GHLiNrn2wnEuHNIfOxwq+Invhi9o 4miFfqa9eGTrIqmNe6+f6Fc7E8qnWy5mXZg6TH+IzXfJCnioDDuqOfp2t9le4RaX xa5FNSCTwde0+5tzCth4y8WKjwxc9AbY2/vmrk0AbkFaTy27VgoWcHk9vTgpCxRH qS7FKhOHhpVxzynkaPeN39Nek2oqFV5TIKqZrBWJMd1qn+qxsxOy6KMWYGPmNa1C /EiJvJQ5/ok9SQLCi3pSODbw6WojB2GrWhsFbd9OUXRgZBTl+6X5jls70OJO5QCg 9uh69wNhzFcw5QxNvdyLMe+ZbQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:03:20 2026 by rpki-client