$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: kinexe/eBNfodzLv9MOIOTz+pJ5BVeIxe2fEJfboD1E= Subject key identifier: EA:7F:34:0E:80:0A:9A:9D:78:1C:94:31:AD:F4:80:45:4C:B1:9B:8E Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 0894 Signing time: Thu 16 Apr 2026 20:32:11 +0000 Manifest this update: Thu 16 Apr 2026 20:32:10 +0000 Manifest next update: Thu 23 Apr 2026 20:32:10 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: C8TSxoUgJBKCLJh494fXknn8pquZbtf+v+t/SutXR+4=) 2: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: 2qHKJj29Stc4i29leTShILZcyf4Ep+Zzk1ZPI4rXDjo=) 3: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: BCGlhRLPOFUBZ5h3/NBuifkyt/vUvXmkmcPgcapZGk0=) 4: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: YfrxXGO42q+6/ia+oj0y9mxJpbnGoWuIY/TIKAzAdhM=) 5: 67FF0960076911EF8569F157C4F9AE02.roa (hash: OgjXzdyKLb9e3ER0qSH5PPgDrGrIXmxcmLjxocZP9q0=) 6: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: C/gCcxezA3MWUMIZZfARocJWxFwgULaiK11HqUVAJI8=) 7: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 1BxQB/90BOAp9PRDMceVIt4omBUpX65e17xrsW9Ey98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Apr 16 20:32:10 2026 GMT Not After : Apr 23 20:32:10 2026 GMT Subject: CN=69e1474a-c8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:4d:17:79:75:3a:6a:2e:2d:4a:46:1b:f6: d2:18:84:c6:10:f0:c7:4a:77:e0:a7:95:47:1b:4e: 8b:58:09:7e:bf:f0:c4:88:27:44:fb:91:4a:66:5a: 26:42:57:75:15:88:67:0a:08:35:8d:67:06:27:83: 77:2b:08:37:ee:72:4b:a9:b5:5b:07:42:e0:0a:34: ba:46:08:dc:35:f4:ee:28:47:e5:8d:60:f2:eb:0e: 8c:41:9c:5f:58:03:1f:c3:11:2e:49:e9:5f:3f:3e: 30:a4:c1:bd:33:4b:cf:85:15:08:6d:14:87:bf:c1: c7:8a:1d:8f:87:e0:44:ea:99:13:4b:1e:82:d4:70: e5:12:f7:21:9c:a9:e7:77:a2:b5:f7:e6:27:44:94: 0b:16:10:f4:d2:dc:6e:00:9e:fc:13:78:16:88:e7: c2:e3:3d:2d:8e:b2:56:b2:5a:75:15:fd:e6:2c:7c: 64:fc:d3:f2:14:61:2f:9b:2d:2b:ab:ae:6d:c9:c1: 90:92:43:05:7f:af:74:4a:de:ec:ca:a4:79:96:da: 67:ec:cd:f9:4a:02:4b:3a:e6:a1:81:09:d4:56:5b: 0c:9e:95:be:87:14:9a:71:2a:3a:5a:af:e6:d9:93: 10:1d:93:03:6d:ba:27:af:e4:a6:e2:26:5a:44:3c: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:34:0E:80:0A:9A:9D:78:1C:94:31:AD:F4:80:45:4C:B1:9B:8E X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:90:71:38:ba:ff:b6:81:b1:0f:28:7c:f3:ad:a0:24:98:7e: b5:90:2c:eb:a5:5b:3f:81:0a:7c:9a:64:86:3c:75:3d:ed:d3: 5d:cf:10:87:29:c8:da:49:af:bb:c7:f9:23:11:be:96:14:e8: d7:8e:cd:53:f4:bf:cb:c7:eb:80:6e:72:fb:d8:06:98:0b:b2: 38:20:2a:09:20:f7:cc:36:cd:fd:bc:f5:ed:e2:3b:89:6b:dc: 42:aa:96:d9:ea:38:36:a6:2c:15:b6:8c:83:1d:d8:97:43:6b: c4:de:f7:4e:91:b1:b5:dd:74:b5:d8:74:ea:eb:95:4d:a0:82: fb:c8:5d:ca:6a:46:a4:38:16:e6:74:32:f7:be:5c:3b:3b:39: 0c:aa:62:be:65:d3:ea:27:89:a7:59:68:d8:9c:b5:d8:ee:48: fa:b9:31:98:80:17:de:21:db:89:d7:e9:21:bf:79:88:2d:3a: 0f:90:c9:3d:87:20:dc:80:dc:e4:94:c7:08:fa:62:9f:ce:db: 75:f7:79:d1:6f:18:59:a1:55:87:73:70:e6:fa:67:04:5b:c2: 98:de:f9:8d:49:a3:f4:ed:a7:3c:cb:a5:60:bc:4b:0b:25:2f: e8:7c:79:38:69:32:37:dc:78:55:79:06:46:c3:e1:40:45:c1: e0:57:a6:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwNDE2MjAzMjEwWhcNMjYwNDIzMjAzMjEwWjAYMRYwFAYD VQQDEw02OWUxNDc0YS1jOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNlNF3l1OmouLUpGG/bSGITGEPDHSnfgp5VHG06LWAl+v/DEiCdE+5FKZlom Qld1FYhnCgg1jWcGJ4N3Kwg37nJLqbVbB0LgCjS6RgjcNfTuKEfljWDy6w6MQZxf WAMfwxEuSelfPz4wpMG9M0vPhRUIbRSHv8HHih2Ph+BE6pkTSx6C1HDlEvchnKnn d6K19+YnRJQLFhD00txuAJ78E3gWiOfC4z0tjrJWslp1Ff3mLHxk/NPyFGEvmy0r q65tycGQkkMFf690St7syqR5ltpn7M35SgJLOuahgQnUVlsMnpW+hxSacSo6Wq/m 2ZMQHZMDbbonr+Sm4iZaRDxB0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOp/NA6A CpqdeByUMa30gEVMsZuOMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpBxOLr/toGxDyh8862gJJh+tZAs66VbP4EKfJpkhjx1Pe3TXc8QhynI2kmv u8f5IxG+lhTo147NU/S/y8frgG5y+9gGmAuyOCAqCSD3zDbN/bz17eI7iWvcQqqW 2eo4NqYsFbaMgx3Yl0NrxN73TpGxtd10tdh06uuVTaCC+8hdympGpDgW5nQy975c Ozs5DKpivmXT6ieJp1lo2Jy12O5I+rkxmIAX3iHbidfpIb95iC06D5DJPYcg3IDc 5JTHCPpin87bdfd50W8YWaFVh3Nw5vpnBFvCmN75jUmj9O2nPMulYLxLCyUv6Hx5 OGkyN9x4VXkGRsPhQEXB4Femjg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:16 2026 by rpki-client