$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: Xijf5qEqlAi/IyWfyCe5XtxYOHCH51J5BThmFwdxMnk= Subject key identifier: C7:D3:AA:4C:B0:F6:EA:10:53:D5:57:3D:48:6A:15:29:BD:B6:23:2D Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 07:37:34 +0000 Manifest this update: Fri 27 Mar 2026 07:37:34 +0000 Manifest next update: Fri 03 Apr 2026 07:37:34 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: /wLtoaUd6mXIvyn4I9V6ef1Jo0Be8yBdIZxq4MiCKIk=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: Vs4txb4DJFXLwizfk18zd1bm+3el525ckpu5LIU2/Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Mar 27 07:37:34 2026 GMT Not After : Apr 3 07:37:34 2026 GMT Subject: CN=69c633be-8d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2c:b5:ed:97:b8:cf:66:e3:a8:f0:29:64:bb: 22:15:9c:c4:21:bc:5d:85:d6:30:c9:1f:44:c4:18: 09:28:38:d5:ba:57:36:5c:46:c2:02:4d:61:2e:76: 76:9f:5b:52:e7:83:b0:7e:85:87:9b:fe:66:db:42: f6:84:29:0f:59:d4:10:7e:d0:25:b6:f6:24:fb:e4: c9:d0:91:0d:63:9e:9d:3c:8f:eb:5a:c7:62:b6:05: e4:df:55:0c:22:a6:25:57:03:de:77:68:e5:ee:db: 5a:62:a7:10:b0:ed:27:d1:16:f0:30:9c:fa:44:8a: a6:51:f1:6d:d6:7f:75:18:2a:2c:bd:dc:30:12:d2: 25:5b:bc:fe:28:20:f3:d4:a8:91:d0:64:51:7b:d3: b8:7d:bc:66:6a:08:b9:71:6b:0a:14:1c:a7:ae:d6: 84:57:8d:54:87:2a:00:72:61:86:7f:a9:36:cd:30: 55:9c:a6:0d:26:97:bd:74:14:ea:03:c5:63:76:28: 62:f6:fb:f3:33:03:61:6a:45:11:00:8a:97:fb:f0: 3d:a8:35:79:54:53:6e:3e:52:4c:f1:e7:35:91:ac: 65:5e:cf:f2:3a:66:14:62:2a:21:af:dd:dd:8b:c1: c8:20:c2:a5:55:6c:ee:b6:f8:07:3c:a7:86:ab:a2: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:AA:4C:B0:F6:EA:10:53:D5:57:3D:48:6A:15:29:BD:B6:23:2D X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:ea:24:06:da:d5:12:94:6d:d4:22:f3:d4:f0:93:05:aa: 31:07:c0:3a:10:cd:99:db:8d:aa:9c:d1:27:f6:79:56:57:79: 0d:a2:e1:63:c3:5e:5f:0d:8a:bd:2c:c8:6f:7f:cb:1c:da:1e: 4e:16:0d:e3:ab:b9:5d:0b:e2:04:27:e5:81:81:ed:95:7a:c9: fc:b2:13:a3:8e:58:4d:86:b8:bb:bc:74:6f:dc:a0:32:82:79: 7d:78:d6:46:7f:10:47:8a:d8:ef:b6:5d:ea:e9:20:27:c1:96: 6c:51:a6:c5:0e:16:64:01:ee:01:d7:58:1c:0f:8b:23:ec:67: e2:11:6b:82:34:b4:05:52:37:b5:20:6c:32:79:8c:47:c3:0c: cd:23:ba:d5:e0:06:bc:ab:98:3f:c1:1f:b4:a6:b3:a8:cd:61: 73:75:5e:f6:49:3b:e5:ae:be:5f:cc:29:94:71:43:ed:d2:ed: 8e:29:55:fa:b4:ae:7a:31:e3:bc:a1:f8:2c:8a:f5:6b:c2:5c: 05:77:d0:c9:0d:fa:9a:d8:d1:e0:00:23:ab:d9:50:9b:c7:da: dc:4e:68:ae:54:3e:a4:a6:0a:e1:58:f8:53:0a:ca:06:d2:a3: 5f:15:af:78:f9:bf:be:c1:b6:29:e3:7a:ae:bc:cc:b3:3b:18: 10:c0:ae:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNjAzMjcwNzM3MzRaFw0yNjA0MDMwNzM3MzRaMBgxFjAUBgNV BAMTDTY5YzYzM2JlLThkM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5LLXtl7jPZuOo8ClkuyIVnMQhvF2F1jDJH0TEGAkoONW6VzZcRsICTWEudnaf W1Lng7B+hYeb/mbbQvaEKQ9Z1BB+0CW29iT75MnQkQ1jnp08j+tax2K2BeTfVQwi piVXA953aOXu21pipxCw7SfRFvAwnPpEiqZR8W3Wf3UYKiy93DAS0iVbvP4oIPPU qJHQZFF707h9vGZqCLlxawoUHKeu1oRXjVSHKgByYYZ/qTbNMFWcpg0ml710FOoD xWN2KGL2+/MzA2FqRREAipf78D2oNXlUU24+Ukzx5zWRrGVez/I6ZhRiKiGv3d2L wcggwqVVbO62+Ac8p4arogmBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx9OqTLD2 6hBT1Vc9SGoVKb22Iy0wHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApg+okBtrVEpRt1CLz1PCTBaoxB8A6EM2Z242qnNEn9nlWV3kNouFjw15fDYq9 LMhvf8sc2h5OFg3jq7ldC+IEJ+WBge2Vesn8shOjjlhNhri7vHRv3KAygnl9eNZG fxBHitjvtl3q6SAnwZZsUabFDhZkAe4B11gcD4sj7GfiEWuCNLQFUje1IGwyeYxH wwzNI7rV4Aa8q5g/wR+0prOozWFzdV72STvlrr5fzCmUcUPt0u2OKVX6tK56MeO8 ofgsivVrwlwFd9DJDfqa2NHgACOr2VCbx9rcTmiuVD6kpgrhWPhTCsoG0qNfFa94 +b++wbYp43quvMyzOxgQwK5z -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:53 2026 by rpki-client