$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json) Hash identifier: fBwKD39r6qKveq5rYe7Kj2RDQ2QDnvZf7hvu96tdjAc= Subject key identifier: B2:D9:80:76:30:4C:5B:9F:B8:82:AA:AD:EF:D2:49:93:9D:24:37:B6 Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft Manifest number: 0103 Signing time: Sun 05 Apr 2026 05:31:58 +0000 Manifest this update: Sun 05 Apr 2026 05:31:57 +0000 Manifest next update: Sun 12 Apr 2026 05:31:57 +0000 Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: nRqQEeSlWgYNWnDwi8bVlapyEphMqCMH5tIKvGw8qhM=) 2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: PGZEC43Jrl4xxGDivGAOBx4e7We0intHItmZzFxukHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Validity Not Before: Apr 5 05:31:57 2026 GMT Not After : Apr 12 05:31:57 2026 GMT Subject: CN=69d1f3ce-dd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:59:c0:9d:59:59:82:e4:c6:c4:10:c7:57:ae: f0:e6:91:f4:28:36:13:ca:c1:a9:33:60:71:f8:c3: 63:97:c9:1e:ae:83:90:1c:53:66:96:1c:7d:a8:be: cd:4a:4c:6e:88:9b:95:dc:2b:d8:2c:79:31:34:59: da:50:d6:68:67:e5:2c:23:10:6e:2a:3d:8d:a4:2b: d5:09:39:81:41:52:d5:29:5c:24:44:51:86:16:03: 05:b7:57:5e:03:dc:04:fc:93:06:26:31:2f:bf:d3: 96:96:97:6a:6a:3e:09:0e:f2:51:9d:f8:c8:12:11: 17:3e:22:50:c1:32:3e:f9:1d:fe:14:0d:aa:c0:08: 3e:62:ea:d6:f0:9d:20:da:3e:1f:fa:c7:75:46:ba: 42:5e:eb:f6:b4:a2:ed:36:58:91:8d:5a:9c:83:ad: af:6f:35:0c:ef:53:11:b0:68:c2:50:3c:1b:01:2c: 32:5d:2a:ca:34:d3:23:16:0c:4b:be:70:6d:57:d7: b0:fb:c9:7d:e2:d0:a6:1b:ed:80:0f:c7:19:d3:8e: 3b:83:a7:47:b1:d7:8c:11:b9:64:17:a1:14:75:95: 67:8d:58:72:85:94:40:3e:0a:28:01:38:bc:d7:08: a1:72:74:41:65:40:34:8e:65:1b:ea:cb:a2:56:af: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:80:76:30:4C:5B:9F:B8:82:AA:AD:EF:D2:49:93:9D:24:37:B6 X509v3 Authority Key Identifier: keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:86:e3:8c:3e:b4:af:52:b2:8e:41:85:74:63:4c:a7:62:27: 7e:84:13:f7:73:b1:d3:6a:0c:03:6c:66:cf:de:07:f1:f8:cc: b9:a0:f4:4a:e5:98:ac:c1:2d:5b:01:80:8f:2b:96:8c:a9:73: 5e:32:e8:c0:26:32:85:86:1b:e8:1b:93:73:16:ba:76:a8:07: a5:af:69:79:ba:2d:6f:e4:4f:2b:61:ca:b1:be:bb:96:38:b3: 77:a5:9f:9c:e3:59:a9:e2:31:fb:73:d0:dd:1f:60:d5:75:2f: 98:ad:5b:b5:ee:b6:07:d1:a6:da:8a:c5:b9:90:10:67:15:60: d6:b6:f4:71:8a:cc:15:9d:51:f3:3e:3c:a6:07:fe:b1:b4:fb: e3:23:b5:d3:47:40:ad:e1:7a:af:a6:06:fa:61:83:ca:ea:cb: ac:9c:0f:3c:74:ac:28:32:1e:cc:fa:be:e0:91:fb:36:e4:98: 2c:a6:e0:92:d3:61:30:cc:fd:9d:3c:d8:dd:7b:1a:db:80:da: 3a:bc:14:38:bc:93:82:e4:9c:aa:52:91:9c:14:66:58:41:81: a1:e0:3e:5c:a8:00:e8:78:ea:2b:65:d6:76:98:e9:c2:c6:a3: 35:2b:47:21:94:48:f2:0f:3e:14:c6:ac:24:81:c0:e1:1d:91: 41:f8:86:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUyMEYxMTAvBgNVBAUTKEIxQkQ0REIwMjFGNTRDNzI2M0YzQzM1MzVGODgzNjg0 OUJBMkU2MEUwHhcNMjYwNDA1MDUzMTU3WhcNMjYwNDEyMDUzMTU3WjAYMRYwFAYD VQQDEw02OWQxZjNjZS1kZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VnAnVlZguTGxBDHV67w5pH0KDYTysGpM2Bx+MNjl8keroOQHFNmlhx9qL7N SkxuiJuV3CvYLHkxNFnaUNZoZ+UsIxBuKj2NpCvVCTmBQVLVKVwkRFGGFgMFt1de A9wE/JMGJjEvv9OWlpdqaj4JDvJRnfjIEhEXPiJQwTI++R3+FA2qwAg+YurW8J0g 2j4f+sd1RrpCXuv2tKLtNliRjVqcg62vbzUM71MRsGjCUDwbASwyXSrKNNMjFgxL vnBtV9ew+8l94tCmG+2AD8cZ0447g6dHsdeMEblkF6EUdZVnjVhyhZRAPgooATi8 1wihcnRBZUA0jmUb6suiVq/dkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLLZgHYw TFufuIKqre/SSZOdJDe2MB8GA1UdIwQYMBaAFLG9TbAh9UxyY/PDU1+INoSbouYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTIwRi80MUNDQkM2RUE4 MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRISmo4OE5UWDRnMmhKdWk1 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTIwRi80MUNDQkM2RUE4MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRI Smo4OE5UWDRnMmhKdWk1ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx4bjjD60r1KyjkGFdGNMp2InfoQT93Ox02oMA2xmz94H8fjMuaD0SuWYrMEt WwGAjyuWjKlzXjLowCYyhYYb6BuTcxa6dqgHpa9pebotb+RPK2HKsb67ljizd6Wf nONZqeIx+3PQ3R9g1XUvmK1bte62B9Gm2orFuZAQZxVg1rb0cYrMFZ1R8z48pgf+ sbT74yO100dAreF6r6YG+mGDyurLrJwPPHSsKDIezPq+4JH7NuSYLKbgktNhMMz9 nTzY3Xsa24DaOrwUOLyTguScqlKRnBRmWEGBoeA+XKgA6HjqK2XWdpjpwsajNStH IZRI8g8+FMasJIHA4R2RQfiG8A== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:10 2026 by rpki-client