$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: 4iSIZa22LCuFsG453EZiYFLGQoMyJpBWTsVPzXukGwM= Subject key identifier: CC:C1:30:03:B2:01:53:95:8B:C4:0A:72:C6:8F:4F:1A:45:66:C8:C9 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: 0122 Signing time: Fri 17 Apr 2026 05:24:31 +0000 Manifest this update: Fri 17 Apr 2026 05:24:30 +0000 Manifest next update: Fri 24 Apr 2026 05:24:30 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: hnr9BnB4+sVsTvIlIRxR1Av+gpdMHDzP6xiLVLK5JWg=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Apr 17 05:24:30 2026 GMT Not After : Apr 24 05:24:30 2026 GMT Subject: CN=69e1c40f-2eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:9c:e5:03:3c:b2:35:fb:d5:04:78:07:6e: df:78:e0:bd:f6:aa:23:0f:f9:72:06:4c:ea:56:3c: fa:5f:fd:92:a7:39:43:12:7b:20:09:9e:d2:68:65: 76:a4:6b:d6:4b:11:92:81:17:78:84:39:a1:e2:2a: 5e:c0:b4:c3:a5:33:b4:f7:d6:4e:1f:c3:b0:08:bc: e7:19:a4:8b:63:99:ba:11:56:df:84:9e:1d:d8:ca: d2:cc:b3:00:ba:3e:92:c1:16:c2:5f:c9:a4:d3:51: 7f:65:c7:8b:4b:bc:bc:9d:d3:d8:84:cd:04:38:db: 88:36:f8:ea:68:ed:3d:b9:7f:df:f3:6c:e2:5f:16: 1a:49:c6:31:82:42:18:83:de:4c:60:09:8b:e8:0b: 21:04:62:34:2d:50:ab:2a:2b:df:70:f5:01:9c:11: b5:b7:c3:81:6b:8e:ab:31:08:49:0e:32:28:75:eb: af:84:f1:8a:e4:2c:5f:e5:bc:68:2b:f8:fc:7b:dd: 07:6b:7b:32:85:3d:b8:68:f6:25:5a:68:0c:27:bf: 3e:a6:27:f3:36:e2:f7:9f:2a:44:86:33:9b:e3:d0: e9:a0:d8:70:5e:51:26:69:6e:51:ce:10:e1:5b:d1: 0c:a2:49:e2:0b:bf:72:3d:2a:94:f1:1a:41:52:a5: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C1:30:03:B2:01:53:95:8B:C4:0A:72:C6:8F:4F:1A:45:66:C8:C9 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:09:5c:9e:4a:e5:bd:bb:bf:5f:0c:b0:57:41:1d:16:50:a0: 8f:35:87:4d:7d:ed:fc:d0:e9:7a:c3:ba:9d:29:3d:c3:4d:7d: b3:d8:ee:5a:ab:37:31:e7:03:75:28:e8:f8:d3:08:2d:d3:a1: 91:9a:7c:90:4a:8e:5b:f7:69:54:ef:c5:b8:4e:f1:d5:8a:75: 0a:f5:6f:9a:69:86:3c:3f:2e:00:fb:c3:6f:bd:a3:b4:ae:18: e2:eb:2d:7e:5f:7b:8c:e9:5b:95:d9:3f:74:7e:df:d5:04:12: 39:da:74:74:6f:dc:b1:38:72:6c:21:9a:38:b3:9a:c1:9b:8d: 0d:8d:04:9c:f5:37:50:34:9a:7c:43:d4:28:f8:28:64:e1:26: 50:51:17:e1:12:4a:9f:d8:f4:dd:c1:aa:d3:ba:70:53:32:6c: 01:b6:85:c9:f5:82:23:2d:69:b8:5d:e2:3c:2d:18:f3:83:9f: 05:57:dd:c6:86:c8:2d:20:9c:6f:64:68:b4:c4:a8:df:d4:af: e5:8b:31:fb:57:f2:b4:3d:14:cc:a1:8e:90:1e:52:d9:cf:45: 8a:ac:fe:5f:5b:07:d0:1f:0e:2c:eb:ae:e9:49:f3:e6:de:ea: 03:42:ae:25:c7:4f:88:30:7d:29:fd:54:6b:82:2a:bb:4c:25: c1:c8:eb:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjYwNDE3MDUyNDMwWhcNMjYwNDI0MDUyNDMwWjAYMRYwFAYD VQQDEw02OWUxYzQwZi0yZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvECc5QM8sjX71QR4B27feOC99qojD/lyBkzqVjz6X/2SpzlDEnsgCZ7SaGV2 pGvWSxGSgRd4hDmh4ipewLTDpTO099ZOH8OwCLznGaSLY5m6EVbfhJ4d2MrSzLMA uj6SwRbCX8mk01F/ZceLS7y8ndPYhM0EONuINvjqaO09uX/f82ziXxYaScYxgkIY g95MYAmL6AshBGI0LVCrKivfcPUBnBG1t8OBa46rMQhJDjIodeuvhPGK5Cxf5bxo K/j8e90Ha3syhT24aPYlWmgMJ78+pifzNuL3nypEhjOb49DpoNhwXlEmaW5RzhDh W9EMokniC79yPSqU8RpBUqUEJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzBMAOy AVOVi8QKcsaPTxpFZsjJMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGwlcnkrlvbu/XwywV0EdFlCgjzWHTX3t/NDpesO6nSk9w019s9juWqs3MecD dSjo+NMILdOhkZp8kEqOW/dpVO/FuE7x1Yp1CvVvmmmGPD8uAPvDb72jtK4Y4ust fl97jOlbldk/dH7f1QQSOdp0dG/csThybCGaOLOawZuNDY0EnPU3UDSafEPUKPgo ZOEmUFEX4RJKn9j03cGq07pwUzJsAbaFyfWCIy1puF3iPC0Y84OfBVfdxobILSCc b2RotMSo39Sv5Ysx+1fytD0UzKGOkB5S2c9Fiqz+X1sH0B8OLOuu6Unz5t7qA0Ku JcdPiDB9Kf1Ua4Iqu0wlwcjrKw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:58 2026 by rpki-client