$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: cqI/7ZAop3FdQoPiBtX1dcXb8ZSLmqVBIFVZKyJeb8g= Subject key identifier: 54:16:9F:31:2C:8B:9F:0E:9E:96:E6:FE:7D:45:D1:15:4D:FF:48:1C Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 09D3 Signing time: Thu 16 Apr 2026 19:48:09 +0000 Manifest this update: Thu 16 Apr 2026 19:48:08 +0000 Manifest next update: Thu 23 Apr 2026 19:48:08 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: 7SZX2thIWfZSKgpg+7d5DXZbkVca1D9NNsrLfsBSwKw=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XourWZvjWeRYuoG4eJzATWITu2fMjkfcMaCSGMduRx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Apr 16 19:48:08 2026 GMT Not After : Apr 23 19:48:08 2026 GMT Subject: CN=69e13cf8-9c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:6a:d6:34:3a:09:25:42:2c:35:b7:36:a9: ae:31:89:73:3f:18:71:5d:20:e9:31:74:49:30:3d: b2:08:79:e4:dd:06:81:39:b1:28:b8:3d:e8:fc:f1: 78:75:69:a1:2d:44:94:90:e3:cf:43:78:dd:02:0a: aa:b7:6a:d4:7d:f2:0d:dd:62:52:e9:78:61:dc:f4: 3a:37:df:cd:75:80:bb:a5:a7:5d:8b:51:57:b2:71: 0d:61:cd:bb:4a:0f:63:e1:11:28:04:99:49:bc:2f: 53:db:3b:9d:6a:27:ee:41:23:55:40:8a:bf:b8:11: ec:3a:24:66:eb:92:2c:8e:43:ea:6e:37:c0:59:84: 45:cf:cc:61:16:01:29:82:cd:06:ea:92:91:9c:d4: 13:75:d2:1f:f0:d1:1f:2f:0c:0a:8f:06:8b:90:0f: 12:ec:4e:51:df:72:c1:eb:cf:5c:5d:46:6f:39:e3: 34:2c:58:dd:88:5c:e8:a0:f9:81:d4:3d:3b:fc:e3: 1c:60:84:06:e2:07:3e:81:6f:a6:58:27:1f:0c:54: b8:90:cf:ce:6b:fc:21:f5:fa:57:84:10:14:d4:4e: f1:35:c3:d4:34:6c:92:cd:0f:ca:27:d4:4b:01:09: 93:57:85:d1:d7:04:0b:ab:3f:c9:22:06:53:80:3e: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:9F:31:2C:8B:9F:0E:9E:96:E6:FE:7D:45:D1:15:4D:FF:48:1C X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:4a:a2:b1:5d:17:19:9e:38:92:5b:96:07:18:d0:f7:b4: 15:d1:c6:6d:c3:49:e0:43:cc:c8:db:13:9f:9b:a2:60:e2:e2: f4:f0:71:38:eb:37:5c:2d:ec:52:a9:1d:24:f1:c8:6b:c1:f5: 53:98:9e:48:89:a6:ef:df:66:cf:5e:d1:c7:8b:a5:bb:fa:5d: dd:ee:58:1e:c0:0a:ed:72:99:57:97:9c:40:9a:5c:dd:5a:26: 1b:4b:5e:c4:83:ba:20:d7:8d:ce:54:da:f5:59:57:21:2c:95: bc:af:e6:f2:30:1d:0e:4c:05:4d:fd:49:ee:22:37:7e:77:21: 6f:7d:b1:1c:18:01:00:30:87:80:ea:38:95:dc:9b:5d:86:07: 10:17:3c:a5:24:64:10:29:60:a0:2a:e6:ea:5a:f4:e7:2c:3b: fc:45:d7:87:4a:f5:4d:3d:1c:14:78:1a:0d:f5:c0:d1:6d:bf: 3c:9b:f6:3c:bc:52:3e:d0:e8:ba:75:d4:05:89:d3:e8:71:d7: 67:b2:76:0d:ea:45:aa:57:9b:c8:a4:79:90:8a:b1:cb:49:ae: 59:74:0e:36:e5:4b:b1:15:ae:e9:47:e2:42:43:f4:fd:44:15: 60:08:d4:81:cb:06:11:0b:fc:ad:56:44:78:ee:5c:30:84:70: d4:e0:23:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwNDE2MTk0ODA4WhcNMjYwNDIzMTk0ODA4WjAYMRYwFAYD VQQDEw02OWUxM2NmOC05YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNVq1jQ6CSVCLDW3NqmuMYlzPxhxXSDpMXRJMD2yCHnk3QaBObEouD3o/PF4 dWmhLUSUkOPPQ3jdAgqqt2rUffIN3WJS6Xhh3PQ6N9/NdYC7paddi1FXsnENYc27 Sg9j4REoBJlJvC9T2zudaifuQSNVQIq/uBHsOiRm65IsjkPqbjfAWYRFz8xhFgEp gs0G6pKRnNQTddIf8NEfLwwKjwaLkA8S7E5R33LB689cXUZvOeM0LFjdiFzooPmB 1D07/OMcYIQG4gc+gW+mWCcfDFS4kM/Oa/wh9fpXhBAU1E7xNcPUNGySzQ/KJ9RL AQmTV4XR1wQLqz/JIgZTgD77oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQWnzEs i58Onpbm/n1F0RVN/0gcMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASZFKorFdFxmeOJJblgcY0Pe0FdHGbcNJ4EPMyNsTn5uiYOLi9PBxOOs3XC3s UqkdJPHIa8H1U5ieSImm799mz17Rx4ulu/pd3e5YHsAK7XKZV5ecQJpc3VomG0te xIO6INeNzlTa9VlXISyVvK/m8jAdDkwFTf1J7iI3fnchb32xHBgBADCHgOo4ldyb XYYHEBc8pSRkEClgoCrm6lr05yw7/EXXh0r1TT0cFHgaDfXA0W2/PJv2PLxSPtDo unXUBYnT6HHXZ7J2DepFqlebyKR5kIqxy0muWXQONuVLsRWu6UfiQkP0/UQVYAjU gcsGEQv8rVZEeO5cMIRw1OAjkg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:06 2026 by rpki-client