$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: V9opjAPDXaOHBKjJFRFgrObolss+CluCvA6iiPWwvew= Subject key identifier: C7:73:15:13:0F:86:F1:06:96:5B:06:D6:D4:88:4C:CC:CD:34:30:53 Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 6D Signing time: Mon 02 Mar 2026 13:18:24 +0000 Manifest this update: Mon 02 Mar 2026 13:18:24 +0000 Manifest next update: Mon 09 Mar 2026 13:18:24 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: PICOusEaHQh/zd8HzihLbTTzkQmdmx8PTgQh/X86kbU=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Mar 2 13:18:24 2026 GMT Not After : Mar 9 13:18:24 2026 GMT Subject: CN=69a58e20-80dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:fc:2c:fa:38:43:31:ef:e2:5a:5b:4d:2c: 03:10:fd:5e:0f:5a:14:7b:fb:8a:db:a1:b5:ed:73: a7:f1:27:a0:4e:73:11:6e:59:7b:e6:af:16:d9:4e: 89:f6:1d:c1:c5:da:ed:73:d2:2e:1c:43:7c:09:0f: bd:c1:0f:72:1f:e1:8f:9f:70:06:27:3b:78:c8:01: ae:c7:d8:91:5c:2d:b3:38:7c:d2:37:3e:83:ec:13: 69:df:e7:e4:b6:6f:0b:e0:6d:be:c2:5d:41:58:e1: 85:45:f2:ff:e3:26:af:12:71:26:ad:c2:8a:95:a9: ab:6b:12:f3:d2:d7:b3:b3:1b:e7:6e:05:ce:58:59: 7f:2e:84:43:3d:9c:86:b0:a2:8b:3f:91:9b:f9:7b: 30:62:d6:f8:41:b3:6b:bf:4a:ad:0b:64:ba:23:e3: 1e:25:91:41:8f:cb:8c:e4:33:a5:20:58:fd:29:a8: 52:c6:d5:29:bd:b5:e5:8f:0f:3b:0d:f5:83:71:08: 38:80:3c:df:d5:75:35:d2:1e:01:5b:46:5c:e9:37: d3:00:77:9a:a2:3e:3e:c6:d5:61:b3:4e:ff:e8:11: 2f:6b:33:b6:d5:84:e5:d3:68:85:76:d2:6b:bb:1d: 62:13:a8:4e:0e:3b:1a:5a:de:33:08:12:1e:05:fe: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:73:15:13:0F:86:F1:06:96:5B:06:D6:D4:88:4C:CC:CD:34:30:53 X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:9e:4f:22:69:a7:13:4a:88:f6:4d:ca:b9:65:15:6c:93: 8a:b1:87:77:cb:85:d9:71:ca:75:9d:8e:ba:f8:33:a0:62:42: 0d:d3:a1:a2:4d:86:ef:ec:c1:be:15:03:31:f4:5b:49:68:c3: 46:ed:6c:3d:d3:1b:09:3a:1a:d5:06:e1:2d:a9:f4:41:0a:28: 17:fd:fb:48:24:6f:7c:cc:d0:59:89:43:cb:a2:52:19:95:ca: 15:ed:4a:86:92:6c:28:bf:f5:e6:11:89:b5:6b:e7:74:9b:f0: fe:55:e2:7e:63:3d:f0:3c:e9:89:9e:08:64:fe:02:4e:cf:0f: 00:d5:b4:d2:26:1b:6f:b5:e7:4d:34:7e:ac:42:6f:28:64:48: a0:25:b7:ce:31:d8:e1:b4:13:a2:1e:cc:06:81:18:07:6c:d6: dd:de:b6:10:ff:4a:5a:33:b2:15:e3:7e:7b:ce:a9:6c:0b:9d: 82:e4:33:5b:99:28:77:11:7b:5b:a7:4b:b9:16:ee:d3:e6:bc: 7d:68:83:65:19:9a:64:5a:5c:b0:bb:ca:15:94:ce:aa:c5:0a: a9:71:4b:fc:ff:72:ea:e4:ed:e9:cc:2d:d8:1d:7c:16:a5:01: a8:38:c6:14:11:9a:70:e1:a3:42:e9:05:06:68:f4:59:9c:e8: 28:eb:d5:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNjAzMDIxMzE4MjRaFw0yNjAzMDkxMzE4MjRaMBgxFjAUBgNV BAMTDTY5YTU4ZTIwLTgwZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZFPws+jhDMe/iWltNLAMQ/V4PWhR7+4rbobXtc6fxJ6BOcxFuWXvmrxbZTon2 HcHF2u1z0i4cQ3wJD73BD3If4Y+fcAYnO3jIAa7H2JFcLbM4fNI3PoPsE2nf5+S2 bwvgbb7CXUFY4YVF8v/jJq8ScSatwoqVqatrEvPS17OzG+duBc5YWX8uhEM9nIaw oos/kZv5ezBi1vhBs2u/Sq0LZLoj4x4lkUGPy4zkM6UgWP0pqFLG1Sm9teWPDzsN 9YNxCDiAPN/VdTXSHgFbRlzpN9MAd5qiPj7G1WGzTv/oES9rM7bVhOXTaIV20mu7 HWITqE4OOxpa3jMIEh4F/hxpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx3MVEw+G 8QaWWwbW1IhMzM00MFMwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUtZ5PImmnE0qI9k3KuWUVbJOKsYd3y4XZccp1nY66+DOgYkIN06GiTYbv7MG+ FQMx9FtJaMNG7Ww90xsJOhrVBuEtqfRBCigX/ftIJG98zNBZiUPLolIZlcoV7UqG kmwov/XmEYm1a+d0m/D+VeJ+Yz3wPOmJnghk/gJOzw8A1bTSJhtvtedNNH6sQm8o ZEigJbfOMdjhtBOiHswGgRgHbNbd3rYQ/0paM7IV4357zqlsC52C5DNbmSh3EXtb p0u5Fu7T5rx9aINlGZpkWlywu8oVlM6qxQqpcUv8/3Lq5O3pzC3YHXwWpQGoOMYU EZpw4aNC6QUGaPRZnOgo69VD -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:19 2026 by rpki-client