$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft File: SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json) Hash identifier: eYBjK+FIt/8oSnwm38eLboT9jSNeg/jySDgjgo4tgvU= Subject key identifier: 7E:4E:7E:85:47:31:66:9B:01:E2:59:59:F1:2F:80:5F:96:F4:8D:D2 Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B Certificate issuer: /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft Manifest number: 40 Signing time: Sun 01 Mar 2026 09:50:20 +0000 Manifest this update: Sun 01 Mar 2026 09:50:20 +0000 Manifest next update: Sun 08 Mar 2026 09:50:20 +0000 Files and hashes: 1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: ajNxBpETeqWhYcthoTIHbofasWXx6gOuj99ZHiUjG6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B Validity Not Before: Mar 1 09:50:20 2026 GMT Not After : Mar 8 09:50:20 2026 GMT Subject: CN=69a40bdc-4a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:eb:8f:83:36:19:bb:c5:1d:6c:b7:f7:83: 86:32:41:15:df:c9:59:c2:46:e7:81:21:b1:5f:84: 73:cf:f8:95:ff:f0:4d:ed:e7:4a:ec:d6:7b:9e:c0: e3:b4:10:54:be:f2:2b:f8:ac:64:32:0a:5e:53:85: b9:89:c6:a1:cb:04:3d:ce:e3:1e:92:f9:05:dd:6d: a0:98:e6:51:e2:30:33:3b:89:fc:23:1c:33:6a:75: 86:d7:5b:29:8f:8d:b9:59:43:13:2e:52:de:d0:29: ea:96:c4:d0:6c:29:30:07:be:fe:61:05:57:f9:12: a4:43:4e:d9:0e:ed:b0:77:1e:1b:6a:b5:b5:9c:4b: 7d:36:eb:78:1a:f1:4e:e0:55:d9:8e:29:42:57:97: dc:aa:9c:a8:34:1c:6b:e3:c0:b6:92:4f:91:55:ea: b1:8d:1a:8f:b7:16:98:57:59:a8:64:96:6c:d6:51: c1:a3:83:f5:26:31:ed:9d:c3:df:63:b7:d9:4a:87: 76:fc:02:28:28:e4:0b:a5:58:27:b1:30:b4:69:e8: 54:54:1e:5b:c1:6d:eb:db:2b:19:98:5d:54:41:96: 9f:c9:9b:21:f2:fd:36:70:84:c1:ad:dd:3e:d0:24: 0a:26:75:ad:f1:31:ca:8f:ed:d5:de:b5:90:11:75: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:7E:85:47:31:66:9B:01:E2:59:59:F1:2F:80:5F:96:F4:8D:D2 X509v3 Authority Key Identifier: keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:3f:37:1b:4d:35:0b:8d:62:f6:75:ef:2a:c5:7f:5a:1a: 0b:09:a1:0f:a5:40:5b:1b:e8:6f:25:ee:14:8b:e9:02:4d:94: 92:30:90:2b:0f:af:3e:3a:2a:67:95:3d:e2:42:11:81:ce:47: 37:da:08:d2:a3:2a:18:ed:92:a5:d4:f4:00:80:e7:59:96:00: 83:c1:22:88:d4:77:bd:3d:50:94:a3:51:91:fa:44:b5:17:73: 3a:43:ee:5b:29:b7:ff:4e:9b:21:82:92:0b:0a:cd:d1:66:12: 80:a0:13:22:7d:98:c4:d9:f8:bf:20:4b:35:89:89:87:0d:aa: cf:76:f9:93:c5:b5:fd:84:08:6f:d2:5c:e7:d9:89:af:c3:98: e6:dd:2e:d0:7a:a7:20:a7:9c:9c:1d:41:d9:86:ba:f6:dc:d5: 5c:c3:e5:4a:23:6d:7f:c9:28:b8:d0:05:48:a8:0d:08:bc:b0: 97:d0:10:c0:ae:8f:b4:b7:e2:9d:f3:56:54:be:5b:20:0f:cc: 8c:8c:1c:52:3b:c6:13:c2:ee:61:07:46:77:65:70:71:93:09: 59:1b:38:27:bc:8d:50:6c:93:1a:ea:1a:52:72:e5:fe:73:4b: d0:bf:b3:00:e3:df:28:a8:54:65:02:1d:4d:dd:7f:0e:87:d6: 0c:86:0b:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNDg2OEVFNEU5RkMwMTE0N0EwM0MyNjlBQjUyMTBBOEZF NzI3QTc4QjAeFw0yNjAzMDEwOTUwMjBaFw0yNjAzMDgwOTUwMjBaMBgxFjAUBgNV BAMTDTY5YTQwYmRjLTRhNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpI+uPgzYZu8UdbLf3g4YyQRXfyVnCRueBIbFfhHPP+JX/8E3t50rs1nuewOO0 EFS+8iv4rGQyCl5ThbmJxqHLBD3O4x6S+QXdbaCY5lHiMDM7ifwjHDNqdYbXWymP jblZQxMuUt7QKeqWxNBsKTAHvv5hBVf5EqRDTtkO7bB3HhtqtbWcS30263ga8U7g VdmOKUJXl9yqnKg0HGvjwLaST5FV6rGNGo+3FphXWahklmzWUcGjg/UmMe2dw99j t9lKh3b8Aigo5AulWCexMLRp6FRUHlvBbevbKxmYXVRBlp/JmyHy/TZwhMGt3T7Q JAomda3xMcqP7dXetZARdQlfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfk5+hUcx ZpsB4llZ8S+AX5b0jdIwHwYDVR0jBBgwFoAUSGjuTp/AEUegPCaatSEKj+cnp4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzQ3QkZENERDQjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVlZ1BDYWF0U0VLai1jbnA0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0dqdVRwX0FFVWVnUENhYXRTRUtqLWNucDRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzQ3QkZENERDQjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVl Z1BDYWF0U0VLai1jbnA0cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdHT83G001C41i9nXvKsV/WhoLCaEPpUBbG+hvJe4Ui+kCTZSSMJArD68+Oipn lT3iQhGBzkc32gjSoyoY7ZKl1PQAgOdZlgCDwSKI1He9PVCUo1GR+kS1F3M6Q+5b Kbf/TpshgpILCs3RZhKAoBMifZjE2fi/IEs1iYmHDarPdvmTxbX9hAhv0lzn2Ymv w5jm3S7Qeqcgp5ycHUHZhrr23NVcw+VKI21/ySi40AVIqA0IvLCX0BDAro+0t+Kd 81ZUvlsgD8yMjBxSO8YTwu5hB0Z3ZXBxkwlZGzgnvI1QbJMa6hpScuX+c0vQv7MA 498oqFRlAh1N3X8Oh9YMhgsm -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:18 2026 by rpki-client