$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: aKVAZPeg9GVhylmddofVXehHNJ0pWJ6nXFxTVP3oCrY= Subject key identifier: 69:DD:F9:BA:D3:8A:B8:E7:B0:CD:1D:BD:B2:7D:1C:01:CF:87:98:77 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 0491 Signing time: Sat 04 Apr 2026 23:47:46 +0000 Manifest this update: Sat 04 Apr 2026 23:47:45 +0000 Manifest next update: Sat 11 Apr 2026 23:47:45 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: OvJrDMW5UN3fxeDm/RvkgKBq07ByUbHJ2YanbkjzWfA=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: pwbub50OdisHRHuS+ukx/m10TX4s6/bfnVtkvdfMQoE=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: VijEsrJdEmrK96IfGvqYWwiY/EG5RbV1c0CToMH2Ecw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Apr 4 23:47:45 2026 GMT Not After : Apr 11 23:47:45 2026 GMT Subject: CN=69d1a321-70a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:5d:7e:61:9c:3b:a0:10:4b:b6:13:c9:fe: 25:62:42:3f:07:87:8d:f7:37:bb:50:32:9a:7e:cf: 6d:08:6e:f0:d4:d5:d6:fb:c9:fc:77:22:94:a6:57: a7:31:55:d7:b7:e8:03:89:0a:63:20:c8:fa:97:3d: ae:f8:20:38:c2:4b:41:0a:10:82:13:90:08:f5:44: 0f:4b:e3:1e:21:54:78:0a:3d:0b:10:22:ce:0c:e0: 61:7c:bb:cc:a1:d5:b9:ae:64:f5:61:7d:f2:1e:30: 26:75:8b:4c:45:5b:2d:9b:84:7d:e8:b5:6f:1c:2a: 2a:6d:c0:b6:05:65:ef:15:91:65:6e:4d:72:17:c3: 6d:6c:81:7f:8d:f5:60:b4:67:0b:cf:c3:1c:ed:49: b3:74:2b:38:8a:7d:9d:d5:32:85:65:a1:85:b3:00: 1f:80:f1:1b:e0:d4:11:27:1f:e3:0e:64:7b:a7:e6: 82:b6:a3:89:e8:f9:76:98:6c:af:cb:b5:53:6e:e3: 60:4c:8b:26:6f:dd:77:4d:05:47:0b:93:da:21:df: cf:8a:9e:ee:c1:6a:b5:33:7b:65:1d:ba:12:fb:6b: 20:7c:9f:22:67:23:dd:c5:18:37:24:de:63:ea:8c: 93:17:0b:b7:64:bf:e3:4c:e6:92:b8:79:dc:c1:ae: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DD:F9:BA:D3:8A:B8:E7:B0:CD:1D:BD:B2:7D:1C:01:CF:87:98:77 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:db:a6:92:8d:79:f2:3a:d8:c8:06:6d:ee:43:d6:e6:cc:56: d1:c5:0f:42:1f:1b:19:6a:ba:a4:54:10:2a:03:88:b6:b9:bb: 97:0b:fb:ba:13:31:eb:21:76:56:4b:54:28:3d:f6:59:72:94: e3:36:f2:0e:b3:41:b7:a7:cf:95:3a:74:4f:21:cd:57:47:f2: 0b:fe:9a:42:09:7e:71:78:da:3d:31:75:48:e4:d8:c8:88:db: 78:53:8a:8a:bb:fb:c2:66:1e:d4:a2:d3:a0:02:20:f5:17:83: 73:11:9d:d8:65:7a:f3:81:9d:cf:68:2e:c3:a2:c1:5b:06:cd: 17:0c:a0:eb:0b:52:7f:8c:36:81:c4:c8:25:ba:c9:53:aa:05: f0:e7:16:c4:2d:f8:1d:68:72:5e:fa:61:89:29:f6:da:2c:5d: 93:41:a2:db:78:e2:30:0f:93:79:94:ce:4a:af:aa:6b:54:f9: 34:aa:23:2e:60:05:9a:7b:04:75:ef:51:3d:53:2d:7b:2e:d7: d1:05:68:2d:10:de:9b:c2:37:f6:c5:f5:f1:f4:db:f4:54:1d: 24:2a:19:69:9f:6d:f7:8a:87:be:ab:cd:d4:ba:d1:0d:91:27: 70:46:05:29:e6:d1:71:75:3b:e0:55:8f:12:2f:dc:b0:88:fe: 90:c4:a1:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwNDA0MjM0NzQ1WhcNMjYwNDExMjM0NzQ1WjAYMRYwFAYD VQQDEw02OWQxYTMyMS03MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt29dfmGcO6AQS7YTyf4lYkI/B4eN9ze7UDKafs9tCG7w1NXW+8n8dyKUplen MVXXt+gDiQpjIMj6lz2u+CA4wktBChCCE5AI9UQPS+MeIVR4Cj0LECLODOBhfLvM odW5rmT1YX3yHjAmdYtMRVstm4R96LVvHCoqbcC2BWXvFZFlbk1yF8NtbIF/jfVg tGcLz8Mc7UmzdCs4in2d1TKFZaGFswAfgPEb4NQRJx/jDmR7p+aCtqOJ6Pl2mGyv y7VTbuNgTIsmb913TQVHC5PaId/Pip7uwWq1M3tlHboS+2sgfJ8iZyPdxRg3JN5j 6oyTFwu3ZL/jTOaSuHncwa7aIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnd+brT irjnsM0dvbJ9HAHPh5h3MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNumko158jrYyAZt7kPW5sxW0cUPQh8bGWq6pFQQKgOItrm7lwv7uhMx6yF2 VktUKD32WXKU4zbyDrNBt6fPlTp0TyHNV0fyC/6aQgl+cXjaPTF1SOTYyIjbeFOK irv7wmYe1KLToAIg9ReDcxGd2GV684Gdz2guw6LBWwbNFwyg6wtSf4w2gcTIJbrJ U6oF8OcWxC34HWhyXvphiSn22ixdk0Gi23jiMA+TeZTOSq+qa1T5NKojLmAFmnsE de9RPVMtey7X0QVoLRDem8I39sX18fTb9FQdJCoZaZ9t94qHvqvN1LrRDZEncEYF KebRcXU74FWPEi/csIj+kMShNQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:48 2026 by rpki-client