$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: Rt4v6L558RtJY0zH5j2O9FifmYdby9/2MhURlJJK54A= Subject key identifier: 52:51:AC:36:68:B4:9E:5D:44:83:41:8C:B3:E4:16:9B:9A:72:13:2C Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 080F Signing time: Mon 02 Mar 2026 01:04:02 +0000 Manifest this update: Mon 02 Mar 2026 01:04:00 +0000 Manifest next update: Mon 09 Mar 2026 01:04:00 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: /j1Ri5VKJshrN/cZO/klVQH9VHxM/4wB7xuAUhh0EB0=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: nYn9/0bys+IR+qGNmk02yzjh5gK9SsZ2WJi4ObbzJLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Mar 2 01:04:00 2026 GMT Not After : Mar 9 01:04:00 2026 GMT Subject: CN=69a4e202-f569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:0f:7b:a2:d8:fa:83:ed:43:46:1f:2f:27: ed:41:32:d6:2a:d0:f3:7a:5c:66:8a:ba:65:71:67: aa:9e:5e:d7:f8:51:61:2e:2e:d5:fb:73:4f:a7:09: aa:f2:72:c7:7e:30:6c:9d:59:2b:0c:50:bb:2e:cc: da:e8:87:5a:c7:61:70:b4:41:11:c2:f8:95:cc:58: 20:c9:47:3f:c9:84:bf:10:68:98:af:da:71:b7:52: 08:ab:d8:4c:49:d9:df:a4:a1:3e:df:e0:b3:02:ac: 95:82:d3:ef:e8:81:59:e2:c2:b9:b7:35:3e:21:33: f5:eb:81:ed:f2:2e:d7:de:61:a8:22:8e:f7:75:d3: bf:47:cc:05:74:6b:01:27:29:a7:7d:68:78:2a:9d: 4f:00:d3:d9:c6:87:88:d1:d0:78:b3:4d:57:75:8e: 91:a4:bd:7e:de:d1:4c:a7:e2:e5:6d:c3:31:8d:e0: 58:ba:f5:a3:97:af:11:66:59:71:4f:06:aa:5d:57: 30:96:f8:e0:82:ff:1e:01:37:83:58:4c:f2:35:04: c2:87:01:ba:71:03:e5:06:4e:03:4c:cc:dc:cb:3f: 9f:68:63:ae:48:97:4b:dd:28:b2:92:fa:ff:94:bf: 33:89:a8:44:5b:b4:85:11:d4:c1:e8:2d:a0:68:a1: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:AC:36:68:B4:9E:5D:44:83:41:8C:B3:E4:16:9B:9A:72:13:2C X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:12:84:d6:84:f4:43:f9:1e:2a:c0:17:ca:03:59:43:86:bc: 68:02:d5:ce:23:e2:8f:8d:e8:8a:d2:29:40:a4:a3:08:88:77: 36:c5:25:53:d9:9b:2f:c6:f6:d3:b9:77:69:2f:79:2e:7e:54: e6:17:0c:11:50:11:b5:ae:e3:6f:9a:86:34:74:89:e4:01:57: 8d:4b:8a:ce:d5:7c:6e:d1:b5:0c:f1:42:d2:49:ba:fa:0c:61: 44:a8:81:50:73:b5:9a:1f:a9:49:b8:c9:ca:a6:11:86:26:63: 0f:5c:90:c5:4e:4b:1a:c4:7a:19:86:55:87:03:81:bd:e4:df: 34:7f:12:17:68:98:42:4b:9b:ee:ef:09:18:0e:bf:af:5c:92: cb:42:fb:64:00:d7:26:fa:09:53:a4:a5:cf:a9:0e:26:8d:1a: 8b:23:9c:fb:42:1f:3c:52:16:0f:32:49:52:31:16:10:f6:0f: f9:21:ca:2f:a1:1e:92:a0:bc:90:2c:10:9d:3b:0e:06:db:78: 5a:e2:13:9b:e3:dc:6f:b3:6d:6a:4e:22:2a:1c:f7:28:6f:d6: 83:14:5c:d2:72:60:47:75:57:41:96:0e:e7:a3:54:25:a1:1c: 11:6a:63:06:2d:ed:80:36:91:cd:67:50:01:cb:20:bf:47:e1: c9:d1:3c:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjYwMzAyMDEwNDAwWhcNMjYwMzA5MDEwNDAwWjAYMRYwFAYD VQQDEw02OWE0ZTIwMi1mNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3YPe6LY+oPtQ0YfLyftQTLWKtDzelxmirplcWeqnl7X+FFhLi7V+3NPpwmq 8nLHfjBsnVkrDFC7Lsza6Idax2FwtEERwviVzFggyUc/yYS/EGiYr9pxt1IIq9hM SdnfpKE+3+CzAqyVgtPv6IFZ4sK5tzU+ITP164Ht8i7X3mGoIo73ddO/R8wFdGsB JymnfWh4Kp1PANPZxoeI0dB4s01XdY6RpL1+3tFMp+LlbcMxjeBYuvWjl68RZllx TwaqXVcwlvjggv8eATeDWEzyNQTChwG6cQPlBk4DTMzcyz+faGOuSJdL3Siykvr/ lL8ziahEW7SFEdTB6C2gaKHZQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJRrDZo tJ5dRINBjLPkFpuachMsMB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmhKE1oT0Q/keKsAXygNZQ4a8aALVziPij43oitIpQKSjCIh3NsUlU9mbL8b2 07l3aS95Ln5U5hcMEVARta7jb5qGNHSJ5AFXjUuKztV8btG1DPFC0km6+gxhRKiB UHO1mh+pSbjJyqYRhiZjD1yQxU5LGsR6GYZVhwOBveTfNH8SF2iYQkub7u8JGA6/ r1ySy0L7ZADXJvoJU6Slz6kOJo0aiyOc+0IfPFIWDzJJUjEWEPYP+SHKL6EekqC8 kCwQnTsOBtt4WuITm+Pcb7Ntak4iKhz3KG/WgxRc0nJgR3VXQZYO56NUJaEcEWpj Bi3tgDaRzWdQAcsgv0fhydE80w== -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:49 2026 by rpki-client