$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: vprEhmyxud5I53xthX5uqtpDIv2mODEmElbcEIHoB4Q= Subject key identifier: 93:BE:30:99:FA:C3:3E:F3:AC:19:9F:63:ED:67:8D:CE:A6:91:6B:1F Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 0497 Signing time: Thu 16 Apr 2026 23:54:12 +0000 Manifest this update: Thu 16 Apr 2026 23:54:11 +0000 Manifest next update: Thu 23 Apr 2026 23:54:11 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: UeKP9+dQMw3FVSY1d8VIj3X/WONKM0/oI1w61xEQrcM=) 2: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: VijEsrJdEmrK96IfGvqYWwiY/EG5RbV1c0CToMH2Ecw=) 3: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: pwbub50OdisHRHuS+ukx/m10TX4s6/bfnVtkvdfMQoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Apr 16 23:54:11 2026 GMT Not After : Apr 23 23:54:11 2026 GMT Subject: CN=69e176a4-02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:ab:0d:c2:35:85:ad:9a:d2:38:71:f0:84: fc:c8:76:50:19:1c:42:94:4c:94:95:44:bc:62:e6: 56:32:a6:7d:49:1e:39:4c:6d:b8:ef:39:b3:58:13: af:b2:f1:16:e9:0f:fe:98:59:93:d9:2d:b1:74:2e: 83:41:51:67:6a:b2:6b:4a:74:39:44:a3:9b:1e:68: e1:71:bc:13:d7:77:62:25:8a:5e:c4:12:ce:5e:3b: a1:33:ef:50:20:93:ff:23:71:8b:34:10:03:d6:85: 36:04:f7:a5:2d:0e:93:00:91:31:eb:0e:65:14:67: 58:d1:ec:53:0c:00:b8:fc:d2:a3:9c:dd:52:c6:f9: e5:4b:9c:e8:87:b4:3e:ad:0a:ea:8a:b7:8e:83:cd: e2:ee:5a:5f:8d:e9:bf:cd:80:11:c2:5e:88:75:06: d7:87:51:2d:55:eb:1e:f0:ea:b5:7b:a6:93:92:1a: 59:51:68:07:0b:46:56:4d:b5:69:3e:a0:11:46:e0: 0c:d0:30:41:40:cf:0e:49:4b:46:ff:1c:00:73:ef: 4c:8a:97:da:e9:1c:68:8f:14:45:57:72:0b:24:b6: 89:0a:24:09:6c:60:63:b4:ff:2c:49:aa:72:04:f2: 85:1f:2c:87:a1:30:11:25:4f:76:f5:ca:c8:0e:65: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:30:99:FA:C3:3E:F3:AC:19:9F:63:ED:67:8D:CE:A6:91:6B:1F X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:04:ee:91:4a:e0:45:a7:cb:20:ff:1f:5a:6f:6c:c4:f1:0a: a1:e6:70:56:c5:20:5a:da:98:45:ea:b1:2c:0a:e9:40:f8:88: 42:ba:00:0d:24:6a:86:78:7f:00:67:31:f3:01:94:51:e6:93: e7:51:05:f4:e1:82:ac:a0:db:8f:19:30:8d:87:4c:3a:3e:5f: 08:ce:50:c4:f4:6f:00:2c:c9:68:fe:f4:35:81:23:ce:fb:bd: 1f:78:82:6f:f9:22:3e:c5:b2:ac:f8:ff:5b:5c:24:45:3f:62: 75:fb:a4:2e:43:bc:6e:78:6e:8a:d9:e0:e8:e2:8d:9b:55:2c: fa:9d:6b:50:b3:3f:da:91:5d:7c:93:c7:be:9b:81:79:5e:82: 68:25:b1:c2:41:76:e2:e0:1f:e6:74:fe:52:a6:d3:43:b6:06: 3f:42:84:89:47:b1:e2:76:2f:8b:0e:54:5f:4f:ff:a3:90:5f: 30:4e:54:6b:68:22:bf:c8:57:29:3a:15:9b:bb:85:bc:53:8d: 79:40:95:f9:d2:01:9a:4a:26:1d:36:a8:02:a4:4e:05:b6:3b: c6:5f:4d:37:aa:66:ea:4c:7e:ab:bb:67:14:13:ff:a9:de:d7: 1c:3f:d3:b4:74:e4:71:a9:98:03:7e:6a:b9:76:5f:f9:e3:5d: 47:8b:37:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjYwNDE2MjM1NDExWhcNMjYwNDIzMjM1NDExWjAYMRYwFAYD VQQDEw02OWUxNzZhNC0wMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QerDcI1ha2a0jhx8IT8yHZQGRxClEyUlUS8YuZWMqZ9SR45TG247zmzWBOv svEW6Q/+mFmT2S2xdC6DQVFnarJrSnQ5RKObHmjhcbwT13diJYpexBLOXjuhM+9Q IJP/I3GLNBAD1oU2BPelLQ6TAJEx6w5lFGdY0exTDAC4/NKjnN1SxvnlS5zoh7Q+ rQrqireOg83i7lpfjem/zYARwl6IdQbXh1EtVese8Oq1e6aTkhpZUWgHC0ZWTbVp PqARRuAM0DBBQM8OSUtG/xwAc+9Mipfa6RxojxRFV3ILJLaJCiQJbGBjtP8sSapy BPKFHyyHoTARJU929crIDmWlnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO+MJn6 wz7zrBmfY+1njc6mkWsfMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADwTukUrgRafLIP8fWm9sxPEKoeZwVsUgWtqYReqxLArpQPiIQroADSRqhnh/ AGcx8wGUUeaT51EF9OGCrKDbjxkwjYdMOj5fCM5QxPRvACzJaP70NYEjzvu9H3iC b/kiPsWyrPj/W1wkRT9idfukLkO8bnhuitng6OKNm1Us+p1rULM/2pFdfJPHvpuB eV6CaCWxwkF24uAf5nT+UqbTQ7YGP0KEiUex4nYviw5UX0//o5BfME5Ua2giv8hX KToVm7uFvFONeUCV+dIBmkomHTaoAqROBbY7xl9NN6pm6kx+q7tnFBP/qd7XHD/T tHTkcamYA35quXZf+eNdR4s3bg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:23 2026 by rpki-client