$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: eIFYmOoTDgXjE7aAsBRG3Ym3hraprLRpBlY4WGFfesQ= Subject key identifier: 79:86:86:E4:C2:B4:4F:B5:8F:60:24:8B:AC:6E:F5:73:0B:B4:33:8A Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 047C Signing time: Sun 01 Mar 2026 23:59:30 +0000 Manifest this update: Sun 01 Mar 2026 23:59:28 +0000 Manifest next update: Sun 08 Mar 2026 23:59:28 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: V++DLXTdiDu1dS1UH6TobRNs8doMoqcAL+AGgx7j0wk=) 2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: /E8Bz1o/Li1NSO67L1IUds5Qh4yC3jFbenGEE36wB+g=) 3: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: O0V0vlEtgJw0+v4YneII/jwXUKrih5E+dHib5a1J4w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Mar 1 23:59:28 2026 GMT Not After : Mar 8 23:59:28 2026 GMT Subject: CN=69a4d2e1-2f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:6d:ea:06:70:bf:3e:db:ed:09:df:d5:9e: 80:15:78:fc:63:f0:5a:63:c3:c4:5d:b2:0a:be:0e: b4:e5:43:a5:8e:f0:50:f0:45:92:d9:b9:f8:a0:1b: 60:17:ab:e9:09:c6:f9:52:3d:17:58:33:64:4c:ac: e9:61:bb:ef:58:77:1e:b7:29:6c:c7:6d:30:73:2c: 8e:aa:1c:b9:0b:66:84:73:02:74:1c:4f:ea:2c:6f: 45:87:45:7d:43:31:5f:16:ff:41:cd:ad:eb:57:2d: 91:18:51:4e:82:6f:12:42:47:99:a1:9e:e5:00:34: 1c:26:80:3a:2b:35:d6:b6:bc:d3:e8:af:c1:cc:76: c8:59:44:ae:2c:7a:c8:4c:51:2a:ca:e2:c2:9b:33: 0c:65:f1:9f:ee:da:04:dd:73:f2:de:cf:ee:88:e3: a4:b1:4b:fc:81:69:37:12:d0:cc:4f:57:aa:2d:a6: 7b:a9:c2:1b:21:0b:16:84:82:28:fc:57:16:e6:ed: 13:8d:9a:5c:0e:f7:b2:e7:b2:c6:2b:fa:e7:db:cf: 4b:a7:84:a7:de:cf:84:a7:ed:26:fa:1a:3b:af:e5: d2:3d:80:9f:b0:eb:3e:a3:97:6a:3c:26:42:e1:1a: 7d:2c:2c:1d:c6:5a:22:14:0f:7d:60:37:44:c4:18: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:86:86:E4:C2:B4:4F:B5:8F:60:24:8B:AC:6E:F5:73:0B:B4:33:8A X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e3:27:b4:26:3e:05:be:7d:d4:bc:58:37:f8:ff:8e:c0:1f: 60:30:d8:1f:f2:75:64:46:fb:53:de:ff:54:2c:c3:66:0a:e5: fe:ad:35:0a:61:88:16:42:56:f6:53:1c:56:a3:cd:f3:4f:04: c9:01:6b:30:97:ad:5c:5a:45:07:39:fb:51:3b:f8:d4:5f:db: 95:44:5e:6c:ab:b5:3c:ed:82:06:d6:76:59:7f:77:99:34:30: ce:ff:b2:ab:8c:b4:a9:6f:f3:85:9a:9f:9f:63:3a:87:82:0d: 56:c2:a8:c8:f1:ea:2e:25:09:e6:b1:33:f2:2e:8f:4d:d7:ff: 27:17:54:29:9d:ac:0f:5f:e6:36:ed:34:d2:cd:7d:8d:fb:9f: 6a:fb:b7:56:38:6f:7d:74:eb:78:d0:2e:d8:c2:25:1c:4e:9c: 0b:21:27:60:ba:5b:13:fc:0e:c0:1c:98:cd:90:47:91:62:00: 27:bf:25:d2:3f:93:59:fb:e4:1a:eb:4d:2a:55:77:31:53:1f: fe:0e:f9:dd:80:18:41:9e:f3:b6:fc:a5:a4:e8:c8:cd:5e:9f: cd:b6:8a:63:0f:26:fc:3a:60:82:f6:a5:c5:b6:a2:d9:82:26: 52:14:ab:4f:a0:d7:9f:e2:74:f2:e0:94:2a:56:f4:e1:e1:ac: 95:29:ab:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwMzAxMjM1OTI4WhcNMjYwMzA4MjM1OTI4WjAYMRYwFAYD VQQDEw02OWE0ZDJlMS0yZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvett6gZwvz7b7Qnf1Z6AFXj8Y/BaY8PEXbIKvg605UOljvBQ8EWS2bn4oBtg F6vpCcb5Uj0XWDNkTKzpYbvvWHcetylsx20wcyyOqhy5C2aEcwJ0HE/qLG9Fh0V9 QzFfFv9Bza3rVy2RGFFOgm8SQkeZoZ7lADQcJoA6KzXWtrzT6K/BzHbIWUSuLHrI TFEqyuLCmzMMZfGf7toE3XPy3s/uiOOksUv8gWk3EtDMT1eqLaZ7qcIbIQsWhIIo /FcW5u0TjZpcDvey57LGK/rn289Lp4Sn3s+Ep+0m+ho7r+XSPYCfsOs+o5dqPCZC 4Rp9LCwdxloiFA99YDdExBhujQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmGhuTC tE+1j2Aki6xu9XMLtDOKMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABOMntCY+Bb591LxYN/j/jsAfYDDYH/J1ZEb7U97/VCzDZgrl/q01CmGIFkJW 9lMcVqPN808EyQFrMJetXFpFBzn7UTv41F/blURebKu1PO2CBtZ2WX93mTQwzv+y q4y0qW/zhZqfn2M6h4INVsKoyPHqLiUJ5rEz8i6PTdf/JxdUKZ2sD1/mNu000s19 jfufavu3VjhvfXTreNAu2MIlHE6cCyEnYLpbE/wOwByYzZBHkWIAJ78l0j+TWfvk GutNKlV3MVMf/g753YAYQZ7ztvylpOjIzV6fzbaKYw8m/Dpggvalxbai2YImUhSr T6DXn+J08uCUKlb04eGslSmrqg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:22 2026 by rpki-client