$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json) Hash identifier: nOxpQg3UlzLNCqbnISMf8BbhDIXE/7RV9aXoOVWNbWs= Subject key identifier: FF:FF:31:F5:14:E0:73:8C:AC:E7:C7:5D:08:36:7C:4A:54:EF:2A:08 Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft Manifest number: 4A Signing time: Wed 25 Mar 2026 07:39:46 +0000 Manifest this update: Wed 25 Mar 2026 07:39:45 +0000 Manifest next update: Wed 01 Apr 2026 07:39:45 +0000 Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: q/MnfNqjLO0DV+hic6xsbwOpU6RmkY2QgxSIv+0CnmI=) 2: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=) 3: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: pMD/GHJGLubTp0PpPOjyflk922Gz+1O37/zrmRW8WCQ=) 4: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=) 5: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=) 6: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=) 7: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Mar 25 07:39:45 2026 GMT Not After : Apr 1 07:39:45 2026 GMT Subject: CN=69c39142-436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:f3:52:6f:56:47:80:28:82:30:fa:86:5f: cb:38:e6:2c:9c:70:73:b8:62:49:6d:54:d7:76:8b: 56:49:a0:c1:85:53:56:e9:26:2f:f8:37:42:52:85: b1:cf:a8:ec:36:e5:55:3b:6c:5b:60:27:8c:b4:84: 23:09:ac:46:ef:d0:01:f7:c1:28:4b:64:93:19:2e: fb:72:dd:8a:97:89:1c:3b:3b:9b:76:6d:b7:d2:76: c7:94:39:5a:94:d1:f8:80:83:f8:bb:81:49:3e:b7: 4e:57:98:43:66:b4:30:de:5d:fb:59:8f:4f:67:50: 3c:80:34:37:95:12:85:5d:71:d1:b2:d9:a4:8c:3a: 32:3c:f7:df:51:ca:28:3a:3f:ae:03:15:3b:47:d0: 2d:e4:b7:06:9c:6e:7e:fe:02:f0:a6:64:c7:59:ec: 70:90:9c:45:3b:e7:df:3c:81:f5:09:0a:6b:fa:d4: 74:9d:bc:d5:3f:99:f9:39:e3:97:a6:63:d0:e5:d9: 2a:d7:0b:32:ab:8a:c8:f7:e2:4d:6b:35:d5:4a:59: a1:71:4c:f7:58:68:85:5d:4e:18:e2:ec:36:53:0f: e3:f4:1d:f3:ca:6a:6a:bd:63:c9:8b:e6:97:5c:f6: 1f:4c:5f:71:12:d6:b3:2b:a9:c6:10:60:8a:55:49: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:31:F5:14:E0:73:8C:AC:E7:C7:5D:08:36:7C:4A:54:EF:2A:08 X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:83:42:02:7d:ea:bf:8f:65:ce:0f:ff:82:73:80:c1:38:b9: f9:3c:5f:6b:f0:76:a7:b2:73:c2:2e:d5:30:a8:f4:39:95:62: 24:8d:c3:f2:e8:24:0a:ef:f5:12:0b:10:7a:9d:a3:21:e2:e7: 06:9c:ab:af:85:bb:af:43:35:a4:ab:f0:07:f9:1a:73:72:d9: 14:77:7b:c7:81:49:7d:c9:82:58:4f:32:e8:d7:85:b9:f4:b1: 44:57:4b:5d:41:fd:29:56:9e:54:cc:17:70:96:2c:1b:b7:2d: 4e:d5:10:f6:1e:97:13:06:22:dc:a7:06:2d:67:6d:d1:db:20: bc:9a:78:31:1a:93:04:09:9c:dd:84:a1:e2:62:34:a6:16:fb: 80:2b:87:2d:ea:c3:3d:93:b0:12:e3:f6:4c:f3:48:26:d8:3a: 67:89:0a:0b:00:b4:fd:e4:b0:25:22:f4:f5:f5:2e:9d:bc:98: ec:78:b6:a8:53:42:f4:cd:82:40:6b:b8:7b:57:cd:9a:ce:60: 35:d0:29:9c:96:b5:22:9d:7e:7b:5e:39:37:45:03:ad:92:05: 6b:10:88:94:3f:3c:6c:eb:09:9e:1b:26:1a:3f:cb:a4:63:e6: c8:6d:0c:92:a5:ac:a5:b4:61:82:ef:b7:87:36:28:f5:77:02: ab:e8:83:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNjAzMjUwNzM5NDVaFw0yNjA0MDEwNzM5NDVaMBgxFjAUBgNV BAMTDTY5YzM5MTQyLTQzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBBfNSb1ZHgCiCMPqGX8s45iyccHO4YkltVNd2i1ZJoMGFU1bpJi/4N0JShbHP qOw25VU7bFtgJ4y0hCMJrEbv0AH3wShLZJMZLvty3YqXiRw7O5t2bbfSdseUOVqU 0fiAg/i7gUk+t05XmENmtDDeXftZj09nUDyANDeVEoVdcdGy2aSMOjI8999Ryig6 P64DFTtH0C3ktwacbn7+AvCmZMdZ7HCQnEU75988gfUJCmv61HSdvNU/mfk545em Y9Dl2SrXCzKrisj34k1rNdVKWaFxTPdYaIVdThji7DZTD+P0HfPKamq9Y8mL5pdc 9h9MX3ES1rMrqcYQYIpVSajXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU//8x9RTg c4ys58ddCDZ8SlTvKggwHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhU aThZOXplbjE5aWF5cmZtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAg0ICfeq/j2XOD/+Cc4DBOLn5PF9r8HansnPCLtUwqPQ5lWIkjcPy6CQK7/US CxB6naMh4ucGnKuvhbuvQzWkq/AH+RpzctkUd3vHgUl9yYJYTzLo14W59LFEV0td Qf0pVp5UzBdwliwbty1O1RD2HpcTBiLcpwYtZ23R2yC8mngxGpMECZzdhKHiYjSm FvuAK4ct6sM9k7AS4/ZM80gm2DpniQoLALT95LAlIvT19S6dvJjseLaoU0L0zYJA a7h7V82azmA10CmclrUinX57Xjk3RQOtkgVrEIiUPzxs6wmeGyYaP8ukY+bIbQyS payltGGC77eHNij1dwKr6IOS -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:31 2026 by rpki-client