$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: LXSb1aG05PfA4Ug8jXgmnes1t0ySKWn3hnEWMDhyXKM= Subject key identifier: 55:55:76:EE:FA:0F:FD:BE:73:13:DA:DE:64:8B:CE:FC:BE:16:4A:C4 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0708 Signing time: Sat 04 Apr 2026 21:43:48 +0000 Manifest this update: Sat 04 Apr 2026 21:43:48 +0000 Manifest next update: Sat 11 Apr 2026 21:43:48 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: 271W6/kD1F6FucSmIdJWahO6hrHPxbFslyjKj+PaE5A=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: hBD68GW8EzVJvKT8oXKY6Hq3TsjlKL7/gUCCeWgsIJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Apr 4 21:43:48 2026 GMT Not After : Apr 11 21:43:48 2026 GMT Subject: CN=69d18614-6d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:4c:a9:26:79:d6:7e:ab:14:71:ef:8b:76: f3:fd:c2:6c:4d:e9:65:ef:db:40:61:1a:22:6e:f3: fb:9e:64:78:57:d9:27:54:e8:51:47:fc:b9:b5:08: 2f:69:d7:41:bf:b9:87:b2:b2:b8:49:f4:4b:0a:a5: 2b:1c:8e:bd:7a:23:e8:c8:a5:6f:63:4d:96:e8:b0: 8e:e6:08:f1:12:d2:ee:14:75:64:43:3b:87:9c:f8: 62:5b:de:e7:d4:51:7b:c3:e1:06:e0:ca:1c:92:fb: 71:0a:e9:7d:d7:b8:56:5f:32:7d:03:9d:7e:2a:ca: ef:33:e3:2e:09:0a:74:95:e4:10:8e:08:35:24:61: 30:fb:e0:6f:aa:a5:e1:dd:31:bc:8d:92:f5:2d:d1: 71:b9:5e:40:be:d6:16:0b:04:52:dc:d5:0a:14:69: 99:98:b3:fa:df:08:ca:6b:db:25:b1:ae:0b:3f:76: 67:e3:29:fe:a2:ab:d9:d3:ea:04:5b:f2:92:4b:03: ec:3c:f6:17:32:49:f2:f1:9a:80:38:66:70:51:f1: 6a:cb:ed:8c:37:96:ff:53:13:3f:59:96:b9:69:58: cb:cb:c9:bd:63:f4:b9:14:02:59:9a:fe:c5:05:fe: f1:c3:75:03:c3:fc:ba:85:04:e2:d7:fc:1d:ac:3f: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:55:76:EE:FA:0F:FD:BE:73:13:DA:DE:64:8B:CE:FC:BE:16:4A:C4 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c8:0f:23:6a:87:31:05:5e:f0:b7:21:72:1f:cf:24:8c:65: ff:9f:98:7e:08:cb:18:13:67:16:90:5c:55:e6:db:12:11:d7: ea:6c:a7:47:49:4e:c0:53:80:b5:e4:72:ec:3f:02:ea:3a:4a: c0:55:fa:dc:22:ed:fa:66:72:72:7f:75:8f:b2:2f:93:97:84: 76:69:81:71:52:bc:49:bc:95:8f:a6:60:33:70:f0:dd:aa:9f: c2:52:71:0e:77:37:44:f4:c6:c9:4c:fd:95:b4:27:ea:60:d3: 4a:be:c5:08:fb:0e:9b:0c:97:b4:45:f2:fa:f3:0d:d9:03:2c: e7:5a:97:c6:9c:bc:a5:b3:ec:e2:ea:60:d5:16:c2:b7:84:44: a2:5f:9c:74:bd:9d:0c:30:f9:40:c5:4c:ca:14:40:17:22:2d: 5e:b3:2b:84:1c:d0:c5:6d:13:cf:51:c0:5a:ea:14:0a:09:6c: b8:85:c9:a0:a3:11:98:35:00:d1:a7:03:6e:ba:67:7d:1e:3a: ff:80:00:78:7b:67:3f:23:89:35:06:16:6f:cf:9b:c0:45:64: 16:3d:88:af:fa:2d:23:9d:28:95:3e:d1:78:a3:84:ff:88:01: ea:71:c4:b9:b8:f1:47:bd:00:9f:7d:c8:62:18:34:3f:b5:14: 4e:db:09:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjYwNDA0MjE0MzQ4WhcNMjYwNDExMjE0MzQ4WjAYMRYwFAYD VQQDEw02OWQxODYxNC02ZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgVMqSZ51n6rFHHvi3bz/cJsTell79tAYRoibvP7nmR4V9knVOhRR/y5tQgv addBv7mHsrK4SfRLCqUrHI69eiPoyKVvY02W6LCO5gjxEtLuFHVkQzuHnPhiW97n 1FF7w+EG4MockvtxCul917hWXzJ9A51+KsrvM+MuCQp0leQQjgg1JGEw++BvqqXh 3TG8jZL1LdFxuV5AvtYWCwRS3NUKFGmZmLP63wjKa9slsa4LP3Zn4yn+oqvZ0+oE W/KSSwPsPPYXMkny8ZqAOGZwUfFqy+2MN5b/UxM/WZa5aVjLy8m9Y/S5FAJZmv7F Bf7xw3UDw/y6hQTi1/wdrD9TnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVVdu76 D/2+cxPa3mSLzvy+FkrEMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYMgPI2qHMQVe8Lchch/PJIxl/5+YfgjLGBNnFpBcVebbEhHX6mynR0lOwFOA teRy7D8C6jpKwFX63CLt+mZycn91j7Ivk5eEdmmBcVK8SbyVj6ZgM3Dw3aqfwlJx Dnc3RPTGyUz9lbQn6mDTSr7FCPsOmwyXtEXy+vMN2QMs51qXxpy8pbPs4upg1RbC t4REol+cdL2dDDD5QMVMyhRAFyItXrMrhBzQxW0Tz1HAWuoUCglsuIXJoKMRmDUA 0acDbrpnfR46/4AAeHtnPyOJNQYWb8+bwEVkFj2Ir/otI50olT7ReKOE/4gB6nHE ubjxR70An33IYhg0P7UUTtsJHg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:38:18 2026 by rpki-client