$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: viY97qU2FfGxVb5F/D6OHSG8OCl8kpEPDQYc0ROPOtQ= Subject key identifier: 90:68:3B:72:D9:27:8F:B6:F7:99:B8:C6:E6:8C:7D:37:1E:07:E5:C2 Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: 016A Signing time: Sun 05 Apr 2026 04:19:33 +0000 Manifest this update: Sun 05 Apr 2026 04:19:33 +0000 Manifest next update: Sun 12 Apr 2026 04:19:33 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: YKc+qxlM3ykAFceawf9P2dUCCQAuwtE1wP/57qSrQhI=) 2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=) 3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Apr 5 04:19:33 2026 GMT Not After : Apr 12 04:19:33 2026 GMT Subject: CN=69d1e2d5-0d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:a3:e4:26:f8:c6:fd:81:a6:eb:6f:68:a7: c5:55:59:b4:68:19:82:97:f7:c2:42:22:a6:3b:0b: ba:22:00:c8:df:30:6b:2a:bf:75:8b:b3:e0:2b:3b: e1:a7:94:da:ca:a4:72:3b:9a:a5:a4:cc:3b:ef:72: 82:e1:37:ce:20:90:31:f6:84:6f:e3:45:3b:e7:ca: 21:29:28:60:2d:5b:33:5e:07:c1:dc:ef:ae:75:f6: bd:95:24:dc:ed:b5:f5:1e:b2:ea:80:b5:16:18:b8: 63:2c:af:8a:16:11:d0:63:30:0c:fb:85:83:5e:4d: 26:c1:8f:ea:db:ce:8d:95:31:00:2d:cb:2b:b4:7b: 07:04:49:fe:01:0f:f3:c3:41:46:89:08:6c:e5:5b: 08:29:67:ec:03:bb:e4:bf:e0:d9:72:c9:c1:ea:1e: df:3d:7f:c2:30:ae:b7:66:30:b2:0c:cf:86:77:ed: f3:4b:f7:7c:9b:54:a0:6f:5a:aa:e7:f7:97:c4:2b: e0:a5:0a:89:ed:a0:a9:e1:8c:04:a3:24:ec:31:e2: ff:ed:30:3a:36:46:94:2e:46:96:38:3a:84:08:32: c0:12:34:ab:04:29:fe:f4:16:bd:57:9e:3d:2a:f7: 76:35:3b:52:8e:1e:c2:3e:78:d5:64:92:a4:f3:5d: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:68:3B:72:D9:27:8F:B6:F7:99:B8:C6:E6:8C:7D:37:1E:07:E5:C2 X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b7:5c:4b:f1:9a:49:e2:e0:31:58:41:19:c6:6c:d7:50:1e: 45:42:55:a6:5d:50:aa:1f:4e:22:d1:02:b7:8a:4e:5a:2b:73: 9a:8b:78:bb:4e:0f:10:08:01:7a:ef:82:ff:9c:9d:38:b0:d6: df:57:37:ff:ac:39:68:88:fe:d2:28:06:10:94:7e:56:c8:2a: 41:15:52:24:bc:3c:60:bf:de:27:65:be:26:e8:8b:a8:0e:15: 39:27:9f:26:c8:11:2e:98:68:a4:0e:fc:f8:e6:cd:32:b5:0e: 6c:c7:40:ca:fe:2b:eb:86:f4:4c:dc:2e:b3:f1:70:5f:4f:8f: 6b:6e:70:5c:85:b4:89:fc:3a:ab:3b:4b:4a:5f:ec:24:2f:40: 2e:f4:92:ee:67:7c:52:d1:57:4f:10:fe:a1:c5:51:a9:3a:72: 66:47:29:21:e6:2d:fd:fb:65:99:4b:80:8d:b5:ab:45:70:47: b0:cf:12:78:31:39:65:71:0b:05:6f:b5:56:12:29:27:02:16: 5e:2e:0d:85:1c:7e:52:23:a1:be:4c:b0:38:e4:07:cc:e8:57: 6e:d1:69:68:46:a6:35:4c:52:61:c1:54:77:c0:0d:ea:82:53: cc:4e:98:74:99:38:d7:7d:38:03:8c:6c:a2:61:ab:4c:3a:3a: 57:88:1c:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjYwNDA1MDQxOTMzWhcNMjYwNDEyMDQxOTMzWjAYMRYwFAYD VQQDEw02OWQxZTJkNS0wZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT6j5Cb4xv2BputvaKfFVVm0aBmCl/fCQiKmOwu6IgDI3zBrKr91i7PgKzvh p5TayqRyO5qlpMw773KC4TfOIJAx9oRv40U758ohKShgLVszXgfB3O+udfa9lSTc 7bX1HrLqgLUWGLhjLK+KFhHQYzAM+4WDXk0mwY/q286NlTEALcsrtHsHBEn+AQ/z w0FGiQhs5VsIKWfsA7vkv+DZcsnB6h7fPX/CMK63ZjCyDM+Gd+3zS/d8m1Sgb1qq 5/eXxCvgpQqJ7aCp4YwEoyTsMeL/7TA6NkaULkaWODqECDLAEjSrBCn+9Ba9V549 Kvd2NTtSjh7CPnjVZJKk8102twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBoO3LZ J4+295m4xuaMfTceB+XCMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLdcS/GaSeLgMVhBGcZs11AeRUJVpl1Qqh9OItECt4pOWitzmot4u04PEAgB eu+C/5ydOLDW31c3/6w5aIj+0igGEJR+VsgqQRVSJLw8YL/eJ2W+JuiLqA4VOSef JsgRLphopA78+ObNMrUObMdAyv4r64b0TNwus/FwX0+Pa25wXIW0ifw6qztLSl/s JC9ALvSS7md8UtFXTxD+ocVRqTpyZkcpIeYt/ftlmUuAjbWrRXBHsM8SeDE5ZXEL BW+1VhIpJwIWXi4NhRx+UiOhvkywOOQHzOhXbtFpaEamNUxSYcFUd8AN6oJTzE6Y dJk41304A4xsomGrTDo6V4gcUA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:42 2026 by rpki-client