$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft File: sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json) Hash identifier: W0+hquplGrkUGWSiWA77F+IlSTS3bd2HaJ5z+f+bIUM= Subject key identifier: 94:96:CF:9A:37:79:BD:96:C6:0A:2B:DF:0D:E3:4F:18:DA:F2:0F:14 Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft Manifest number: 48 Signing time: Sat 21 Mar 2026 07:21:49 +0000 Manifest this update: Sat 21 Mar 2026 07:21:48 +0000 Manifest next update: Sat 28 Mar 2026 07:21:48 +0000 Files and hashes: 1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: TRXOrml+buUgkNyP6pNygfZfNhcB6hqxHE62cUXhTdY=) 2: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=) 3: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=) 4: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=) 5: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=) 6: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=) 7: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: pMD/GHJGLubTp0PpPOjyflk922Gz+1O37/zrmRW8WCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Validity Not Before: Mar 21 07:21:48 2026 GMT Not After : Mar 28 07:21:48 2026 GMT Subject: CN=69be470d-0294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:cb:d3:72:1d:bc:26:74:33:41:18:6d:89: e0:07:62:77:4f:3b:60:6c:26:93:2b:06:83:a2:1a: c6:cd:2f:42:30:00:43:52:34:6a:c4:3b:df:49:44: ac:d0:41:78:4a:55:89:3a:3d:95:1d:09:a2:80:00: 5a:2f:1d:f8:dd:fb:02:f3:4b:68:00:32:18:ed:6b: eb:a4:8b:26:21:77:3c:3c:63:aa:a5:0b:23:a9:d6: c2:af:a8:00:ef:30:93:14:36:18:e6:04:06:40:66: d3:a2:30:9f:74:da:2e:4d:48:3d:da:34:b2:0b:8b: 44:fc:ba:26:4f:90:61:12:9c:86:ce:c2:6d:3e:b5: ca:88:da:e9:20:ee:7f:a6:05:c9:12:2d:2d:f3:00: 93:de:20:e2:cd:3c:3b:48:b9:9f:2a:4a:bf:c5:36: 7a:a1:61:5b:12:b7:11:3f:f4:79:9b:b7:62:53:86: aa:ea:63:56:e4:e9:b6:6f:f3:2e:6b:f5:f3:d2:ab: df:6b:4a:69:c1:a6:30:f5:e4:a7:b3:0f:b2:ef:16: e5:fd:bc:ef:e8:05:ae:9d:1f:f7:74:f5:e7:ed:1d: 7c:ac:09:87:56:e0:72:24:aa:6f:38:ad:ca:1b:bc: 3c:a0:8c:25:a7:13:41:59:50:84:c6:13:07:f4:ea: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:CF:9A:37:79:BD:96:C6:0A:2B:DF:0D:E3:4F:18:DA:F2:0F:14 X509v3 Authority Key Identifier: keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2e:03:f7:21:d8:1f:52:dd:47:e1:71:35:67:b0:7a:7b:b6: 6e:bf:1a:04:89:d8:1b:4d:51:a0:f2:92:02:c8:db:b3:c6:bf: d1:29:de:cf:82:6a:f7:76:84:89:88:2f:0b:36:a6:f6:f6:9a: 4a:55:41:56:25:bc:81:5a:9b:64:d9:d5:da:be:3d:9a:17:24: a8:30:fb:fd:53:fe:43:3a:1a:bc:8a:da:79:ba:73:91:4c:cf: 04:50:3f:4e:0e:ac:5d:06:cd:f5:2e:0b:e3:59:be:b9:90:b9: dd:80:e6:3c:bd:85:29:28:95:dc:a1:05:73:ed:ca:98:ea:9f: 0f:cd:07:d3:98:9d:e7:53:9f:00:5a:86:ff:b4:56:e5:3c:09: b5:7c:8c:7b:ee:7a:dd:e9:e4:29:7a:03:a0:90:7e:c1:3a:c9: 45:7e:38:0a:cf:68:be:99:36:ee:ec:21:a1:4e:f4:99:96:ed: 98:61:fe:4a:8f:3f:ea:b9:52:d0:4f:f6:f9:98:cb:e9:6c:d2: 45:27:a3:e6:01:28:03:e0:19:c1:bc:2f:10:a6:36:fe:c8:2b: 60:9c:e5:17:77:93:c8:f4:2c:f6:2f:84:30:cb:85:ea:7c:18: 39:be:8c:49:12:2b:46:fb:12:80:ea:6e:a0:4a:a8:ec:22:9d: aa:1b:86:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTgzQjExMC8GA1UEBRMoQjMxNkMwMUI3Qjc1NDMxNEUyRjE4RjczN0E3RDdEODlB Q0FCN0U2ODAeFw0yNjAzMjEwNzIxNDhaFw0yNjAzMjgwNzIxNDhaMBgxFjAUBgNV BAMTDTY5YmU0NzBkLTAyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaQsvTch28JnQzQRhtieAHYndPO2BsJpMrBoOiGsbNL0IwAENSNGrEO99JRKzQ QXhKVYk6PZUdCaKAAFovHfjd+wLzS2gAMhjta+ukiyYhdzw8Y6qlCyOp1sKvqADv MJMUNhjmBAZAZtOiMJ902i5NSD3aNLILi0T8uiZPkGESnIbOwm0+tcqI2ukg7n+m BckSLS3zAJPeIOLNPDtIuZ8qSr/FNnqhYVsStxE/9Hmbt2JThqrqY1bk6bZv8y5r 9fPSq99rSmnBpjD15KezD7LvFuX9vO/oBa6dH/d09eftHXysCYdW4HIkqm84rcob vDygjCWnE0FZUITGEwf06uxpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlJbPmjd5 vZbGCivfDeNPGNryDxQwHwYDVR0jBBgwFoAUsxbAG3t1QxTi8Y9zen19iayrfmgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5ODNCL0RGQUY5OTkyQ0Mw MzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhUaThZOXplbjE5aWF5cmZt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hiQUczdDFReFRpOFk5emVuMTlpYXlyZm1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyL3N4YkFHM3QxUXhU aThZOXplbjE5aWF5cmZtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8LgP3IdgfUt1H4XE1Z7B6e7ZuvxoEidgbTVGg8pICyNuzxr/RKd7Pgmr3doSJ iC8LNqb29ppKVUFWJbyBWptk2dXavj2aFySoMPv9U/5DOhq8itp5unORTM8EUD9O DqxdBs31LgvjWb65kLndgOY8vYUpKJXcoQVz7cqY6p8PzQfTmJ3nU58AWob/tFbl PAm1fIx77nrd6eQpegOgkH7BOslFfjgKz2i+mTbu7CGhTvSZlu2YYf5Kjz/quVLQ T/b5mMvpbNJFJ6PmASgD4BnBvC8Qpjb+yCtgnOUXd5PI9Cz2L4Qwy4XqfBg5voxJ EitG+xKA6m6gSqjsIp2qG4Y2 -----END CERTIFICATE-----Generated at Sun Mar 22 19:03:25 2026 by rpki-client