$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: AvffYRxO5mypDiLRkBko/mu8Lq4wifi+vBMdEdeEqcQ= Subject key identifier: 2C:77:3E:8E:DD:0B:0B:A7:B0:88:9E:A4:78:29:90:47:3F:3D:AA:85 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 0488 Signing time: Tue 24 Mar 2026 23:42:39 +0000 Manifest this update: Tue 24 Mar 2026 23:42:39 +0000 Manifest next update: Tue 31 Mar 2026 23:42:39 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: gEcXnVjVt6UbtZDhu3HdRq3hOaZcRWexpdAAgic0so4=) 2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: /E8Bz1o/Li1NSO67L1IUds5Qh4yC3jFbenGEE36wB+g=) 3: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: O0V0vlEtgJw0+v4YneII/jwXUKrih5E+dHib5a1J4w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Mar 24 23:42:39 2026 GMT Not After : Mar 31 23:42:39 2026 GMT Subject: CN=69c3216f-e871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:40:5b:94:64:fa:0d:32:10:af:07:76:94: 73:0e:63:48:95:73:1a:57:14:80:a9:02:d4:d0:1f: 0f:81:3d:35:1c:85:2b:3d:65:dd:30:df:fe:7e:c6: 38:14:6f:b9:44:1f:fa:f4:30:d5:5c:93:83:a7:34: 2d:fc:0f:ab:6d:b6:21:b5:76:f4:c7:34:87:f3:a5: bb:d7:b6:81:7e:0c:d7:39:38:39:ac:6f:ef:d2:f2: a4:ae:a5:88:5f:bf:2b:74:d6:79:eb:b0:98:f0:81: 6a:b6:30:0e:1c:ca:b7:b9:a9:14:a2:80:dc:91:2a: f7:7d:f0:1f:8a:e4:27:20:1d:d0:fa:7a:a1:d0:07: be:86:7e:5f:1c:3f:a9:3d:23:59:ea:8f:99:fb:cb: 05:71:3f:96:11:af:f0:1e:e6:95:66:36:89:36:35: 84:15:bd:ea:b7:b2:55:ef:40:02:19:17:11:c9:b0: 44:41:75:bc:d8:84:ca:b3:08:07:30:50:9f:98:9a: df:48:9b:95:2f:44:e6:98:71:b9:e2:2f:7b:49:49: 90:f5:64:7a:df:23:22:e1:ff:ee:cf:09:a1:59:92: 5a:b5:9c:05:cc:18:37:6a:2f:1d:38:88:f5:62:6d: 56:60:57:ba:e5:bf:09:ad:e6:c2:0f:44:5c:77:cb: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:77:3E:8E:DD:0B:0B:A7:B0:88:9E:A4:78:29:90:47:3F:3D:AA:85 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:38:b4:0e:ed:ec:36:7f:4f:8d:d2:7d:ba:18:f1:b4:61:5a: 0b:da:75:61:7a:a1:60:77:38:98:80:d6:ff:a0:b4:0e:14:38: 46:b4:0d:7d:d0:33:3b:c4:19:43:46:fa:c9:f5:08:52:98:c7: 3c:a0:e7:11:08:94:fa:a0:97:a4:93:20:70:0d:35:26:5f:ee: 32:a7:93:d4:90:f7:86:46:df:5e:e3:bf:e8:21:00:07:e5:4b: 0f:01:30:f0:9a:0b:d9:aa:11:88:ed:e0:f2:42:ca:15:3e:5f: df:d7:fa:1d:98:2b:60:8a:b4:68:fa:5c:51:51:a5:93:32:ec: 0e:6d:43:78:49:42:a8:ce:b2:84:5c:69:65:16:a9:fd:e5:13: b4:5e:31:b7:50:97:92:d5:2e:3c:a5:bf:27:08:70:10:8b:ec: ab:2f:94:40:c3:9b:d2:6b:9e:88:d5:62:63:88:0f:04:a1:a4: e2:17:82:5b:a2:c5:84:de:3a:03:21:a9:69:e9:b8:e6:0c:3f: 9e:a8:5f:1e:98:e6:a0:17:a5:ef:dc:77:e7:b1:4d:5c:44:3d: 9b:e3:42:eb:00:da:49:16:b3:52:44:47:38:5b:27:25:62:20: 8c:eb:aa:5d:a6:e2:66:ba:13:84:90:14:87:b8:ba:55:60:9d: 71:ff:d4:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwMzI0MjM0MjM5WhcNMjYwMzMxMjM0MjM5WjAYMRYwFAYD VQQDEw02OWMzMjE2Zi1lODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptJAW5Rk+g0yEK8HdpRzDmNIlXMaVxSAqQLU0B8PgT01HIUrPWXdMN/+fsY4 FG+5RB/69DDVXJODpzQt/A+rbbYhtXb0xzSH86W717aBfgzXOTg5rG/v0vKkrqWI X78rdNZ567CY8IFqtjAOHMq3uakUooDckSr3ffAfiuQnIB3Q+nqh0Ae+hn5fHD+p PSNZ6o+Z+8sFcT+WEa/wHuaVZjaJNjWEFb3qt7JV70ACGRcRybBEQXW82ITKswgH MFCfmJrfSJuVL0TmmHG54i97SUmQ9WR63yMi4f/uzwmhWZJatZwFzBg3ai8dOIj1 Ym1WYFe65b8JrebCD0Rcd8sT4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx3Po7d CwunsIiepHgpkEc/PaqFMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeji0Du3sNn9PjdJ9uhjxtGFaC9p1YXqhYHc4mIDW/6C0DhQ4RrQNfdAzO8QZ Q0b6yfUIUpjHPKDnEQiU+qCXpJMgcA01Jl/uMqeT1JD3hkbfXuO/6CEAB+VLDwEw 8JoL2aoRiO3g8kLKFT5f39f6HZgrYIq0aPpcUVGlkzLsDm1DeElCqM6yhFxpZRap /eUTtF4xt1CXktUuPKW/JwhwEIvsqy+UQMOb0mueiNViY4gPBKGk4heCW6LFhN46 AyGpaem45gw/nqhfHpjmoBel79x357FNXEQ9m+NC6wDaSRazUkRHOFsnJWIgjOuq XabiZroThJAUh7i6VWCdcf/UTQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:49 2026 by rpki-client