$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: vZGOxsLMLiEL/zJtotw3fIx2xp8bHmtSNZHj+wSZChE= Subject key identifier: E2:D2:75:64:6C:47:2C:B2:2F:3F:09:F0:D2:51:9A:F5:AF:B9:DD:2B Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 4D Signing time: Sun 01 Mar 2026 09:40:11 +0000 Manifest this update: Sun 01 Mar 2026 09:40:10 +0000 Manifest next update: Sun 08 Mar 2026 09:40:10 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: DsFhPZEXl7MmOZad+zLY8ouBXKXoYUg8sUwV1Rw4pZs=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: Vs4txb4DJFXLwizfk18zd1bm+3el525ckpu5LIU2/Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Mar 1 09:40:10 2026 GMT Not After : Mar 8 09:40:10 2026 GMT Subject: CN=69a4097b-bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:6e:cf:b6:df:d8:8e:f0:1a:b6:9f:d2:90: f6:6f:38:65:19:1b:94:e5:ab:36:91:74:57:bc:de: 6e:e6:3d:0f:f3:04:4f:ca:ed:43:12:bc:ad:28:f0: a9:84:b6:5a:a1:ac:96:8a:4b:f7:a9:0d:1b:3e:19: 3c:c2:f8:e7:1f:3d:ae:03:38:2c:2e:0e:0b:94:7a: ff:1d:a8:65:90:1b:a6:34:16:c6:5a:c1:0e:2c:db: d7:b7:d5:58:2a:ab:56:b2:67:f6:93:34:df:bb:d3: 95:4c:df:9a:3a:ec:10:4a:4b:e7:23:92:55:85:93: ae:4b:6b:8c:0e:90:38:5d:86:fd:52:2c:0f:1a:1b: 2d:ff:33:94:0b:e1:01:55:43:6f:3d:2a:8d:04:f0: 58:8a:a2:80:01:22:c4:7a:bb:4d:cf:72:98:7c:0c: e9:be:8c:70:f4:8f:57:dc:46:a6:52:37:c7:4a:89: 56:50:b8:11:48:f7:f6:37:b0:e4:2c:df:34:5c:5c: 7e:be:da:d8:30:fb:25:5a:08:5e:e1:e7:c8:fe:b0: a2:fd:81:8b:51:02:18:f7:7d:58:e8:a4:15:b1:d9: 53:f3:6e:d0:37:7a:99:e7:d5:12:5a:f8:6c:04:e6: 32:f3:e8:5a:00:dc:0b:b7:6c:c6:8c:22:dc:a6:7e: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D2:75:64:6C:47:2C:B2:2F:3F:09:F0:D2:51:9A:F5:AF:B9:DD:2B X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:71:2b:4e:02:0c:8b:68:96:c6:e2:44:26:42:f9:f6:f8:ec: 38:54:55:97:8a:c4:4b:1c:f5:b8:e2:71:cc:2b:ba:d2:53:28: d3:9c:02:0e:15:9d:c6:01:a4:40:65:ac:85:93:16:e2:8d:3f: e0:42:10:db:37:5a:82:b6:62:02:e1:25:cf:b9:7e:87:5b:70: 7f:ee:77:17:c7:8b:65:20:b8:af:ef:21:5e:78:eb:74:1e:da: fd:20:4b:1d:0b:ff:3c:dc:b0:a0:f1:9f:33:58:a7:48:b2:3c: e0:68:b2:e7:12:09:a7:6c:6c:24:6f:8d:17:fd:53:d8:2a:9f: 4e:2a:25:cd:0e:1d:d0:47:9d:4d:4d:a7:e5:b2:69:1a:e2:29: 3c:0f:51:e4:f5:d2:2d:a8:36:6c:c7:54:5e:e7:55:8c:30:3a: 07:7f:a3:03:30:21:5b:d1:be:f1:15:0e:b8:5f:84:aa:de:da: 6d:91:3d:52:bf:42:ec:ed:8a:11:76:9f:38:f1:a5:5f:ff:4c: 0e:96:87:4d:7a:ec:fb:20:d4:d4:5b:b6:ab:65:02:4c:99:a0: 45:36:5b:cd:f6:c4:bd:2c:d5:52:35:62:a5:07:4c:9c:b6:02: ca:73:dd:03:72:b7:64:26:e5:59:54:12:01:7f:77:5e:1d:32: c0:3d:d6:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNjAzMDEwOTQwMTBaFw0yNjAzMDgwOTQwMTBaMBgxFjAUBgNV BAMTDTY5YTQwOTdiLWJkM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc6W7Ptt/YjvAatp/SkPZvOGUZG5TlqzaRdFe83m7mPQ/zBE/K7UMSvK0o8KmE tlqhrJaKS/epDRs+GTzC+OcfPa4DOCwuDguUev8dqGWQG6Y0FsZawQ4s29e31Vgq q1ayZ/aTNN+705VM35o67BBKS+cjklWFk65La4wOkDhdhv1SLA8aGy3/M5QL4QFV Q289Ko0E8FiKooABIsR6u03Pcph8DOm+jHD0j1fcRqZSN8dKiVZQuBFI9/Y3sOQs 3zRcXH6+2tgw+yVaCF7h58j+sKL9gYtRAhj3fVjopBWx2VPzbtA3epnn1RJa+GwE 5jLz6FoA3Au3bMaMItymfqR5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4tJ1ZGxH LLIvPwnw0lGa9a+53SswHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCcStOAgyLaJbG4kQmQvn2+Ow4VFWXisRLHPW44nHMK7rSUyjTnAIOFZ3GAaRA ZayFkxbijT/gQhDbN1qCtmIC4SXPuX6HW3B/7ncXx4tlILiv7yFeeOt0Htr9IEsd C/883LCg8Z8zWKdIsjzgaLLnEgmnbGwkb40X/VPYKp9OKiXNDh3QR51NTaflsmka 4ik8D1Hk9dItqDZsx1Re51WMMDoHf6MDMCFb0b7xFQ64X4Sq3tptkT1Sv0Ls7YoR dp848aVf/0wOlodNeuz7INTUW7arZQJMmaBFNlvN9sS9LNVSNWKlB0yctgLKc90D crdkJuVZVBIBf3deHTLAPdY9 -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:30 2026 by rpki-client