$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: VIztD6sciviYc49yqqlQQxjcYMAikOQ2lLIQ6eaNrVw= Subject key identifier: 4E:92:E8:65:EC:8C:AE:19:F8:3A:6B:D1:81:B8:46:88:41:9E:4C:CA Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0888 Signing time: Tue 24 Mar 2026 20:24:48 +0000 Manifest this update: Tue 24 Mar 2026 20:24:47 +0000 Manifest next update: Tue 31 Mar 2026 20:24:47 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: oFKJohAHx2aoFjdC1FQWrS8rdy9szBFKf8NctSXjsWc=) 2: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 1BxQB/90BOAp9PRDMceVIt4omBUpX65e17xrsW9Ey98=) 3: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: BCGlhRLPOFUBZ5h3/NBuifkyt/vUvXmkmcPgcapZGk0=) 4: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: C/gCcxezA3MWUMIZZfARocJWxFwgULaiK11HqUVAJI8=) 5: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: YfrxXGO42q+6/ia+oj0y9mxJpbnGoWuIY/TIKAzAdhM=) 6: 67FF0960076911EF8569F157C4F9AE02.roa (hash: OgjXzdyKLb9e3ER0qSH5PPgDrGrIXmxcmLjxocZP9q0=) 7: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: 2qHKJj29Stc4i29leTShILZcyf4Ep+Zzk1ZPI4rXDjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Mar 24 20:24:47 2026 GMT Not After : Mar 31 20:24:47 2026 GMT Subject: CN=69c2f30f-657b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:5a:2d:2b:ce:ac:00:26:11:10:47:03:57: 89:0b:41:96:e8:1c:40:69:8e:3e:7d:b8:bc:1a:c2: df:d8:f0:4c:8b:94:78:f0:43:d4:51:5d:10:92:ae: 67:11:0b:72:4b:42:d8:ae:86:a7:2b:91:87:5d:bf: cd:5a:3c:31:dd:b5:55:c2:7d:79:54:0f:6a:7e:72: 8d:1e:79:43:65:0e:ba:cb:69:7d:d0:19:50:27:0d: 10:d4:45:9b:ea:f0:82:ad:2c:ca:8f:ca:b9:12:a8: c1:37:e0:fd:8b:46:cf:74:10:13:57:e6:9f:4b:f9: 01:fe:63:81:8b:d2:18:e9:4f:23:85:2b:25:4b:ed: 8e:4b:a2:b7:f6:40:2c:97:03:4c:75:2d:da:11:1a: b4:2a:57:74:a3:1d:cd:d1:24:b5:8f:98:56:4f:d2: a5:fa:59:8c:76:72:10:ba:ee:ba:88:1a:0b:45:39: ed:2d:a6:0a:e3:21:1a:4c:0d:02:85:5d:f8:53:ba: 28:72:b0:b0:8d:8d:7e:08:b8:b3:c9:6b:44:9b:71: 2a:23:32:94:cc:df:e5:6e:6a:a5:eb:1b:0f:87:6e: 30:45:6f:bb:4b:d9:e4:05:86:34:e2:64:e7:09:39: 3e:36:9b:6b:39:1c:24:53:fa:fc:2d:b1:2e:c2:f3: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:E8:65:EC:8C:AE:19:F8:3A:6B:D1:81:B8:46:88:41:9E:4C:CA X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d3:ea:3d:9b:e1:62:ff:18:2b:56:25:f9:b7:c6:cb:9b:16: 61:fe:39:91:4b:a8:81:0a:38:92:7c:83:3c:52:61:3c:c3:96: 76:24:d3:e0:4b:f1:2d:1b:ca:7f:b3:d5:c1:ef:6e:81:12:6f: 3a:d5:07:c5:6f:4a:a5:72:97:25:91:ed:07:65:3e:80:df:2c: 50:cb:e3:d0:04:f5:fd:93:00:80:98:ec:30:98:c9:69:89:ee: 6c:2b:f7:70:9e:68:56:7d:63:7f:0c:63:c9:e3:6d:66:e4:a6: 69:f5:de:be:e4:6c:2e:56:5e:7d:24:48:e0:a7:c6:0e:72:2b: 30:be:33:b0:2b:4e:f7:3b:71:5e:50:86:00:db:20:35:e1:7e: b5:2f:2f:fe:54:46:6b:21:fa:2f:19:83:43:8d:52:41:e6:01: 12:36:b4:cd:75:64:01:c7:49:38:80:47:c1:49:28:32:32:5a: 56:6a:ec:a5:4e:2f:40:95:b8:3a:37:a1:9b:ef:78:e9:c5:5b: a7:55:54:98:3b:29:6c:b9:ea:8a:c0:e5:58:2b:5a:ad:48:19: a0:33:0b:0e:3d:cb:f0:6e:bb:4a:dd:ac:16:7c:ae:1b:84:9e: 48:bb:80:95:cf:c9:0d:26:88:90:7f:fc:df:a2:32:21:9a:6c: c9:a5:dd:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwMzI0MjAyNDQ3WhcNMjYwMzMxMjAyNDQ3WjAYMRYwFAYD VQQDEw02OWMyZjMwZi02NTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnJaLSvOrAAmERBHA1eJC0GW6BxAaY4+fbi8GsLf2PBMi5R48EPUUV0Qkq5n EQtyS0LYroanK5GHXb/NWjwx3bVVwn15VA9qfnKNHnlDZQ66y2l90BlQJw0Q1EWb 6vCCrSzKj8q5EqjBN+D9i0bPdBATV+afS/kB/mOBi9IY6U8jhSslS+2OS6K39kAs lwNMdS3aERq0Kld0ox3N0SS1j5hWT9Kl+lmMdnIQuu66iBoLRTntLaYK4yEaTA0C hV34U7oocrCwjY1+CLizyWtEm3EqIzKUzN/lbmql6xsPh24wRW+7S9nkBYY04mTn CTk+NptrORwkU/r8LbEuwvNL6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6S6GXs jK4Z+Dpr0YG4RohBnkzKMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGNPqPZvhYv8YK1Yl+bfGy5sWYf45kUuogQo4knyDPFJhPMOWdiTT4EvxLRvK f7PVwe9ugRJvOtUHxW9KpXKXJZHtB2U+gN8sUMvj0AT1/ZMAgJjsMJjJaYnubCv3 cJ5oVn1jfwxjyeNtZuSmafXevuRsLlZefSRI4KfGDnIrML4zsCtO9ztxXlCGANsg NeF+tS8v/lRGayH6LxmDQ41SQeYBEja0zXVkAcdJOIBHwUkoMjJaVmrspU4vQJW4 Ojehm+946cVbp1VUmDspbLnqisDlWCtarUgZoDMLDj3L8G67St2sFnyuG4SeSLuA lc/JDSaIkH/836IyIZpsyaXdBw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:55 2026 by rpki-client