$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: Ca1mD9Vim8cL4lnid3zHkib/uJsaIfcU7srTMdQcZBc= Subject key identifier: 65:67:42:7C:FD:8B:6F:DF:95:A0:E8:74:D8:89:DD:C3:AA:8B:4A:E0 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 0268 Signing time: Sun 05 Apr 2026 01:57:01 +0000 Manifest this update: Sun 05 Apr 2026 01:57:01 +0000 Manifest next update: Sun 12 Apr 2026 01:57:01 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: sh7vAWktUxGAIHJE2xcR/ZRXfDdBHGvCh5WcheZCBoo=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: TeRWBfEG3uwWCl9t9TU6uhV4FDG54RTyHLTBDxO2Pfc=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: IA2cnofgesD8NH5qLRaqWocT6Vu87oypmq0T6xDE1wI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Apr 5 01:57:01 2026 GMT Not After : Apr 12 01:57:01 2026 GMT Subject: CN=69d1c16d-daac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:4e:20:de:a4:aa:86:8c:77:2c:c9:f1:35: b1:1d:bf:a9:1e:07:10:91:7f:6a:7a:14:5f:e6:b3: d0:f7:17:d9:5d:a5:87:7a:90:9e:12:4c:24:a9:1d: 46:9a:a4:ef:34:2e:f2:14:03:ae:eb:b7:a8:44:8b: 73:37:79:85:ac:67:67:81:08:19:19:e2:0c:c0:08: 04:a1:24:e2:a4:b5:33:3c:0e:89:e9:41:b3:5c:9c: 7f:73:81:39:e6:cf:34:77:b6:d9:3b:be:09:b6:0d: 8a:19:27:40:a0:48:d6:73:78:42:56:e6:0f:c5:24: 34:2b:98:bb:5c:89:33:fa:7a:26:78:a8:bf:34:83: 42:33:7b:87:2a:3e:13:e2:78:9c:26:f4:d1:f8:8e: 18:69:57:e2:f6:7f:17:b9:50:6d:3c:22:ff:33:66: 21:de:eb:c8:f1:a8:d9:65:b0:a9:7a:4f:34:b7:4f: 6a:1c:2d:51:2d:f0:81:ca:b0:a0:a1:b4:71:85:af: bc:fd:4c:aa:c6:90:b0:2c:ce:dc:86:b3:92:2e:2a: f3:1f:f3:50:d8:47:37:1d:3a:38:c1:1d:c9:57:87: 03:db:d8:41:34:f7:ca:b2:da:e1:1f:57:a2:a0:a7: 26:a9:c9:ac:39:61:23:8b:ad:97:8d:3b:c1:56:cd: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:42:7C:FD:8B:6F:DF:95:A0:E8:74:D8:89:DD:C3:AA:8B:4A:E0 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:68:08:73:91:5c:88:3e:b0:df:8e:34:5c:fa:ed:48:13:9c: 8a:f8:a6:3d:10:cc:b5:18:50:16:08:6b:9e:24:13:91:49:cf: 99:e2:b3:8d:28:b0:c2:3e:c0:42:25:67:8f:6a:27:90:8b:23: fa:8c:09:dd:84:69:7f:3a:ca:ba:69:93:ad:5e:f6:33:70:66: 11:6e:c0:0a:70:dd:33:a9:c4:ca:0b:1e:2f:b9:9c:86:80:f8: 85:db:c9:28:34:12:c7:a4:9c:ea:da:4a:26:93:04:dc:e0:f7: 22:bc:35:d7:0a:d4:c7:94:da:f8:f6:c9:8b:ff:66:07:c6:f7: ce:98:b4:e3:a0:52:88:eb:cd:f5:9c:52:d1:c5:c4:27:0e:08: 8b:9f:3b:cc:60:e7:ff:3d:21:cb:07:c9:6f:8d:cc:e6:4d:bd: 50:c3:96:23:1b:f5:35:70:fb:08:53:8f:55:05:51:03:34:56: 05:74:8c:c1:18:f8:29:72:1f:20:06:3a:e2:ea:3e:1b:91:b1: 06:9c:46:72:b6:ab:35:35:3d:70:9c:94:91:7e:11:e6:b3:09: b4:6a:bc:af:fd:b4:91:ed:29:8b:84:ef:82:e8:a8:33:a8:44: 56:b4:4c:85:e3:d6:b0:df:d8:c1:89:98:06:15:2e:cf:4c:41: 5d:33:5d:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjYwNDA1MDE1NzAxWhcNMjYwNDEyMDE1NzAxWjAYMRYwFAYD VQQDEw02OWQxYzE2ZC1kYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnROIN6kqoaMdyzJ8TWxHb+pHgcQkX9qehRf5rPQ9xfZXaWHepCeEkwkqR1G mqTvNC7yFAOu67eoRItzN3mFrGdngQgZGeIMwAgEoSTipLUzPA6J6UGzXJx/c4E5 5s80d7bZO74Jtg2KGSdAoEjWc3hCVuYPxSQ0K5i7XIkz+nomeKi/NINCM3uHKj4T 4nicJvTR+I4YaVfi9n8XuVBtPCL/M2Yh3uvI8ajZZbCpek80t09qHC1RLfCByrCg obRxha+8/UyqxpCwLM7chrOSLirzH/NQ2Ec3HTo4wR3JV4cD29hBNPfKstrhH1ei oKcmqcmsOWEji62XjTvBVs2ftwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVnQnz9 i2/flaDodNiJ3cOqi0rgMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcWgIc5FciD6w3440XPrtSBOcivimPRDMtRhQFghrniQTkUnPmeKzjSiwwj7A QiVnj2onkIsj+owJ3YRpfzrKummTrV72M3BmEW7ACnDdM6nEygseL7mchoD4hdvJ KDQSx6Sc6tpKJpME3OD3Irw11wrUx5Ta+PbJi/9mB8b3zpi046BSiOvN9ZxS0cXE Jw4Ii587zGDn/z0hywfJb43M5k29UMOWIxv1NXD7CFOPVQVRAzRWBXSMwRj4KXIf IAY64uo+G5GxBpxGcrarNTU9cJyUkX4R5rMJtGq8r/20ke0pi4TvguioM6hEVrRM hePWsN/YwYmYBhUuz0xBXTNdGw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:59:10 2026 by rpki-client