$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: +GBiIBv7Mo/hGH+aFPLWVMB2mc70TG+khb6IwfVpunI= Subject key identifier: 5A:5E:1E:18:34:70:B9:04:E1:AA:3D:F9:C3:8F:B7:95:C0:7E:D8:29 Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 0829 Signing time: Thu 16 Apr 2026 21:26:43 +0000 Manifest this update: Thu 16 Apr 2026 21:26:42 +0000 Manifest next update: Thu 23 Apr 2026 21:26:42 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: HU6na+RLWztS6h3PqjVY25LKDF5ft3uiCR9XBpEifkY=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Apr 16 21:26:42 2026 GMT Not After : Apr 23 21:26:42 2026 GMT Subject: CN=69e15413-ec35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:c6:a4:41:4a:96:21:40:c7:57:76:7e:4e: 0d:cb:a8:da:3f:5b:01:b6:ca:3a:95:d4:1c:c1:af: 26:61:cf:58:67:33:34:e1:86:bd:35:20:6d:c0:fc: 42:4c:19:c3:07:40:29:07:f9:25:97:2b:b1:eb:b7: 8f:d1:8c:9e:2c:d4:b2:00:ab:20:28:06:a1:e7:69: 79:7e:bf:97:48:81:c5:9a:7e:52:0e:a9:26:85:70: ab:6b:f8:e7:27:62:92:d9:ed:90:09:7f:72:e1:e0: f1:52:17:98:4d:d4:04:fe:c1:4d:17:b6:3a:96:f8: a9:aa:85:a7:df:7c:c7:c6:da:1b:70:41:fb:09:cb: 06:13:c2:e0:c2:67:c2:43:7b:e1:06:5d:4b:2e:2f: f9:33:d2:3d:eb:93:d5:8a:40:7a:70:13:0b:b4:1e: ae:5e:7c:8e:84:10:81:bb:80:57:6d:02:fb:16:10: c4:4a:54:a8:16:19:c2:b3:fd:17:fa:31:70:0a:0e: f0:5e:a4:b6:58:80:d0:97:f2:dc:a5:6b:96:76:5a: ff:30:45:fa:cd:35:7e:f5:11:b6:cb:4f:32:da:a0: db:49:ba:a9:00:3a:05:c9:1e:95:55:bc:98:54:d9: 2c:da:d2:a3:bd:ac:1b:40:a5:6b:79:2d:8c:e2:8f: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:1E:18:34:70:B9:04:E1:AA:3D:F9:C3:8F:B7:95:C0:7E:D8:29 X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:d3:45:83:38:57:d3:c9:e9:c4:bf:c1:a4:b5:78:29:bf: 8e:f3:70:a9:49:ec:5c:b6:a2:26:d0:be:8a:ae:d0:89:5a:1d: 13:eb:1d:51:5e:5d:f0:38:af:b8:de:c8:c3:cd:de:72:11:24: c1:e2:b0:b5:67:be:ba:f8:cf:92:c9:ac:f2:19:1c:c8:fe:43: 91:12:6f:73:66:27:63:8e:dd:7e:54:14:7e:79:c8:d0:a0:80: a9:4f:20:58:bc:8b:eb:c9:b8:5d:e8:23:4d:74:1c:5e:b7:f3: cc:aa:2b:f7:47:dd:97:06:1d:0e:a3:b8:4a:6b:76:1e:d2:31: 61:c3:99:53:35:23:44:b0:13:1a:f3:0b:30:47:a6:9b:00:d8: f1:b3:50:d0:eb:11:29:82:f6:e0:ce:4d:ca:1c:00:ce:7f:3c: 7f:f7:63:f7:ba:2a:3f:c5:83:47:5d:f1:b0:99:5e:28:77:39: 12:ad:72:bb:1b:7c:12:1f:d9:00:eb:eb:03:7f:fa:08:73:3c: 4b:09:4f:a9:11:50:b6:05:dd:e1:6a:ab:c2:42:72:6d:a6:20: 19:d7:db:7e:1e:62:d5:b3:0e:2a:f6:5f:c9:ae:d2:a7:46:b1: 51:09:9e:86:98:59:61:43:cf:e5:5f:1d:4d:27:1a:c3:ad:26: 9d:94:4c:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjYwNDE2MjEyNjQyWhcNMjYwNDIzMjEyNjQyWjAYMRYwFAYD VQQDEw02OWUxNTQxMy1lYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3o7GpEFKliFAx1d2fk4Ny6jaP1sBtso6ldQcwa8mYc9YZzM04Ya9NSBtwPxC TBnDB0ApB/kllyux67eP0YyeLNSyAKsgKAah52l5fr+XSIHFmn5SDqkmhXCra/jn J2KS2e2QCX9y4eDxUheYTdQE/sFNF7Y6lvipqoWn33zHxtobcEH7CcsGE8LgwmfC Q3vhBl1LLi/5M9I965PVikB6cBMLtB6uXnyOhBCBu4BXbQL7FhDESlSoFhnCs/0X +jFwCg7wXqS2WIDQl/LcpWuWdlr/MEX6zTV+9RG2y08y2qDbSbqpADoFyR6VVbyY VNks2tKjvawbQKVreS2M4o/1UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpeHhg0 cLkE4ao9+cOPt5XAftgpMB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiIzTRYM4V9PJ6cS/waS1eCm/jvNwqUnsXLaiJtC+iq7QiVodE+sdUV5d8Div uN7Iw83echEkweKwtWe+uvjPksms8hkcyP5DkRJvc2YnY47dflQUfnnI0KCAqU8g WLyL68m4XegjTXQcXrfzzKor90fdlwYdDqO4Smt2HtIxYcOZUzUjRLATGvMLMEem mwDY8bNQ0OsRKYL24M5NyhwAzn88f/dj97oqP8WDR13xsJleKHc5Eq1yuxt8Eh/Z AOvrA3/6CHM8SwlPqRFQtgXd4WqrwkJybaYgGdfbfh5i1bMOKvZfya7Sp0axUQme hphZYUPP5V8dTScaw60mnZRMgQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:46 2026 by rpki-client