$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: sgCdJ63SfPyZLDOJtiPVVpVMlP16F3KDqqNK+6/xfX8= Subject key identifier: 7B:22:64:D3:CF:D0:42:10:BF:FF:5B:8F:12:14:F3:5D:2C:C4:01:12 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: 0121 Signing time: Wed 15 Apr 2026 05:18:49 +0000 Manifest this update: Wed 15 Apr 2026 05:18:48 +0000 Manifest next update: Wed 22 Apr 2026 05:18:48 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 3OAKhooQO12h4a6oxyqOfDNt7pB40s1LFxYV7GJCsmU=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Apr 15 05:18:48 2026 GMT Not After : Apr 22 05:18:48 2026 GMT Subject: CN=69df1fb9-8ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:3d:92:d7:ed:3b:83:4e:cb:c6:63:ce:23: a6:6c:dc:ef:23:7d:29:b3:d9:48:e9:0d:a1:7d:0e: cf:b6:b0:66:3a:d6:ea:2e:bc:71:8d:75:70:71:9e: ea:4e:be:2d:77:c9:8b:03:a2:f7:0f:ce:a1:f0:e4: 1d:41:d2:25:59:a0:39:7a:37:57:b5:af:28:8f:ec: 5c:a2:13:9d:83:06:d9:b5:c3:0c:66:74:ae:84:61: d3:af:1a:f6:c1:f3:83:48:e0:4d:eb:14:74:40:68: 8a:ed:fc:0d:43:c4:d0:28:18:d1:46:9f:aa:04:7c: 92:2e:f2:21:c8:0c:de:4d:7e:7f:ba:0f:f7:51:45: 92:1c:ac:49:1e:20:ae:9c:cf:32:79:02:a8:48:d4: 75:ef:f5:fc:82:f2:ee:94:3a:94:b8:77:56:9e:d5: 5b:51:85:48:57:a2:be:0d:6e:54:12:f6:c5:11:a7: 52:31:51:8c:69:5a:56:9f:7b:04:a2:74:ed:0b:cf: 52:2f:ad:76:cc:61:e2:3e:db:83:b1:14:31:77:6a: 0f:98:3d:b8:cf:02:12:1f:05:47:a2:be:11:ef:77: 50:de:75:ba:c9:f2:bd:34:5e:77:c1:bd:36:40:41: 2c:1d:e1:29:c2:81:3a:18:53:64:df:eb:dc:bb:49: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:64:D3:CF:D0:42:10:BF:FF:5B:8F:12:14:F3:5D:2C:C4:01:12 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:77:8d:28:d0:cc:b6:9f:e3:21:83:6e:3c:88:e8:8e:99: 9b:91:3f:5b:25:59:b0:2e:85:da:93:c9:f5:8a:67:a6:2f:62: 43:dc:92:5c:78:ac:4b:76:99:ee:bf:f2:cb:da:28:19:14:fa: 1a:8d:a0:0a:d3:96:6b:f9:4b:49:62:a1:3c:fb:fe:d1:d8:3d: e0:04:2e:7d:aa:2d:cb:d3:65:3d:93:07:54:f6:84:45:85:39: d4:80:19:01:e7:2a:e8:39:2f:e4:8e:43:ba:3c:e3:d0:45:9a: f8:45:24:97:aa:f6:3a:fb:fc:9c:4e:fa:c9:d7:b8:b4:41:9b: 0b:8b:5d:94:4a:61:9d:11:64:c6:cc:59:24:1c:1c:83:4d:f3: 59:6f:fb:c9:5d:49:0f:c2:b7:4e:31:c5:f0:05:63:aa:96:eb: 89:50:4b:36:69:b4:96:04:ae:fc:14:23:7d:88:af:28:48:77: 9f:8c:56:16:fb:4e:b4:19:10:3d:69:ff:7c:89:d7:82:35:30: 85:48:04:37:3c:07:46:c9:e5:9a:ec:9f:59:6e:6b:47:5c:1c: 45:b3:df:1c:6e:95:01:ac:cb:67:7f:14:92:c0:8e:6b:15:0d: 9b:a4:75:74:90:ea:e3:38:d4:3a:6e:7b:d0:17:19:d2:56:b2: e9:b5:67:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjYwNDE1MDUxODQ4WhcNMjYwNDIyMDUxODQ4WjAYMRYwFAYD VQQDEw02OWRmMWZiOS04YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXo9ktftO4NOy8ZjziOmbNzvI30ps9lI6Q2hfQ7PtrBmOtbqLrxxjXVwcZ7q Tr4td8mLA6L3D86h8OQdQdIlWaA5ejdXta8oj+xcohOdgwbZtcMMZnSuhGHTrxr2 wfODSOBN6xR0QGiK7fwNQ8TQKBjRRp+qBHySLvIhyAzeTX5/ug/3UUWSHKxJHiCu nM8yeQKoSNR17/X8gvLulDqUuHdWntVbUYVIV6K+DW5UEvbFEadSMVGMaVpWn3sE onTtC89SL612zGHiPtuDsRQxd2oPmD24zwISHwVHor4R73dQ3nW6yfK9NF53wb02 QEEsHeEpwoE6GFNk3+vcu0kl3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsiZNPP 0EIQv/9bjxIU810sxAESMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWu53jSjQzLaf4yGDbjyI6I6Zm5E/WyVZsC6F2pPJ9Ypnpi9iQ9ySXHisS3aZ 7r/yy9ooGRT6Go2gCtOWa/lLSWKhPPv+0dg94AQufaoty9NlPZMHVPaERYU51IAZ Aecq6Dkv5I5Dujzj0EWa+EUkl6r2Ovv8nE76yde4tEGbC4tdlEphnRFkxsxZJBwc g03zWW/7yV1JD8K3TjHF8AVjqpbriVBLNmm0lgSu/BQjfYivKEh3n4xWFvtOtBkQ PWn/fInXgjUwhUgENzwHRsnlmuyfWW5rR1wcRbPfHG6VAazLZ38UksCOaxUNm6R1 dJDq4zjUOm570BcZ0lay6bVnYQ== -----END CERTIFICATE-----Generated at Thu Apr 16 06:33:09 2026 by rpki-client