$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: YZuQvc/d+aS8+I9xPvR2oHFjGq4LyWfOrMVBJ98/EN8= Subject key identifier: 45:26:20:95:D0:C9:2C:8A:AF:91:F6:A2:33:51:DE:34:97:5A:9F:5F Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 85 Signing time: Fri 17 Apr 2026 07:23:53 +0000 Manifest this update: Fri 17 Apr 2026 07:23:52 +0000 Manifest next update: Fri 24 Apr 2026 07:23:52 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: LVeqAZu/+GeBUWQjhKyo3CNE/thlmtgeE92iA+TM6y4=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Apr 17 07:23:52 2026 GMT Not After : Apr 24 07:23:52 2026 GMT Subject: CN=69e1e009-7ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:18:a5:19:f0:c4:30:19:83:df:c0:b0:c8: 79:bf:c7:f0:d6:79:91:f4:e8:e2:df:f3:b9:fa:45: 09:f9:d1:ac:9b:3c:4b:3c:98:52:c3:d9:1a:53:fe: 77:78:68:53:55:6d:d6:94:bd:87:3a:1c:90:9d:af: a6:04:c1:19:77:78:51:a0:4d:d2:5e:9f:e7:68:3c: a4:cf:ac:82:4a:f2:4d:59:7a:dc:82:07:0d:c8:ef: f5:26:e4:16:af:de:33:6e:d1:ef:5b:4e:0f:22:4a: 5b:01:f0:81:a6:8a:a2:d2:3e:e2:ba:48:d8:5b:bc: c7:a2:cf:28:81:fb:b7:aa:7b:d0:2d:fd:f9:f5:bd: 38:85:6e:d9:e9:51:73:6e:68:23:36:5d:30:3b:68: 98:02:de:a5:40:9d:d4:ac:10:96:54:26:90:c8:e2: 09:6c:ef:de:83:1a:79:3b:b8:45:c8:d2:64:b7:90: 3a:de:30:55:68:ca:62:88:1a:87:d9:ed:41:97:05: 63:b4:98:fd:9e:5f:22:fc:2b:78:f9:3d:ad:5f:f8: c0:97:ca:e4:88:4b:02:ec:c3:34:ef:74:b1:12:8d: 7d:42:fd:0e:09:7f:a6:c0:b9:52:10:53:22:01:55: 47:66:2b:59:0b:c2:f0:66:bb:ff:47:30:6a:df:03: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:26:20:95:D0:C9:2C:8A:AF:91:F6:A2:33:51:DE:34:97:5A:9F:5F X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:57:29:41:53:4c:55:02:e2:9b:b4:b7:0c:83:71:cb:de: 8e:80:62:9b:fa:e8:78:9c:b2:9b:ac:ff:e1:56:e0:9f:d5:93: 59:05:38:d9:07:da:0f:b4:92:77:fa:0c:fe:50:41:9d:d4:03: 75:55:23:c2:76:88:10:b6:42:47:9c:9c:60:49:68:19:0b:fe: 1f:8b:2c:68:87:33:c7:6c:9f:b2:d0:22:04:43:f7:df:52:2d: 22:01:01:0c:d3:77:60:47:30:0a:4d:58:25:07:4d:a8:2e:3b: 2b:77:57:27:4f:bb:0b:37:85:f3:e5:1c:1c:38:21:74:c3:63: 11:2a:8d:ac:31:11:6e:f1:50:8d:66:30:26:0a:c7:3e:68:56: 02:8e:80:1a:a5:91:8f:3e:4a:2f:b3:14:97:2a:cc:46:46:6c: f8:20:4b:80:40:6e:af:b5:02:16:de:b4:53:77:60:24:5b:0f: 1e:9f:06:a5:c0:5d:91:8e:2f:0f:c8:62:6a:72:5a:9f:ff:6d: 74:4b:6e:18:9b:69:2f:70:a6:15:8a:59:68:92:bb:9b:d0:e1: 92:ce:9c:32:1f:d7:5b:87:3f:e4:76:87:ae:eb:c6:d0:2e:97: 77:65:3e:c0:09:b7:c7:42:3e:d3:59:a4:14:79:9f:c8:8c:64: 9e:74:b7:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNTkxMTAvBgNVBAUTKDQ5N0JCNzI3MTgyNzlEQkNDOTg1REJBNkQzOUIzNjU2 N0Y0NEU3QUEwHhcNMjYwNDE3MDcyMzUyWhcNMjYwNDI0MDcyMzUyWjAYMRYwFAYD VQQDEw02OWUxZTAwOS03ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuycYpRnwxDAZg9/AsMh5v8fw1nmR9Oji3/O5+kUJ+dGsmzxLPJhSw9kaU/53 eGhTVW3WlL2HOhyQna+mBMEZd3hRoE3SXp/naDykz6yCSvJNWXrcggcNyO/1JuQW r94zbtHvW04PIkpbAfCBpoqi0j7iukjYW7zHos8ogfu3qnvQLf359b04hW7Z6VFz bmgjNl0wO2iYAt6lQJ3UrBCWVCaQyOIJbO/egxp5O7hFyNJkt5A63jBVaMpiiBqH 2e1BlwVjtJj9nl8i/Ct4+T2tX/jAl8rkiEsC7MM073SxEo19Qv0OCX+mwLlSEFMi AVVHZitZC8LwZrv/RzBq3wPZ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUmIJXQ ySyKr5H2ojNR3jSXWp9fMB8GA1UdIwQYMBaAFEl7tycYJ528yYXbptObNlZ/ROeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA1OS9CMkNFQTdGNjc5 RjYxMUYwOUNFOUMzMjhDNEY5QUUwMi9TWHUzSnhnbm5iekpoZHVtMDVzMlZuOUU1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA1OS9CMkNFQTdGNjc5RjYxMUYwOUNFOUMzMjhDNEY5QUUwMi9TWHUzSnhnbm5i ekpoZHVtMDVzMlZuOUU1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdy5XKUFTTFUC4pu0twyDccvejoBim/roeJyym6z/4Vbgn9WTWQU42QfaD7SS d/oM/lBBndQDdVUjwnaIELZCR5ycYEloGQv+H4ssaIczx2yfstAiBEP331ItIgEB DNN3YEcwCk1YJQdNqC47K3dXJ0+7CzeF8+UcHDghdMNjESqNrDERbvFQjWYwJgrH PmhWAo6AGqWRjz5KL7MUlyrMRkZs+CBLgEBur7UCFt60U3dgJFsPHp8GpcBdkY4v D8hianJan/9tdEtuGJtpL3CmFYpZaJK7m9Dhks6cMh/XW4c/5HaHruvG0C6Xd2U+ wAm3x0I+01mkFHmfyIxknnS3Uw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:05:14 2026 by rpki-client