$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: NZNmiHxY03MI7tmDXaMgg/mwawDsVqsp3BaFPwTrfD8= Subject key identifier: E3:21:62:95:FC:71:45:B9:15:F5:21:9C:B3:D0:17:C6:A3:A7:56:F5 Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: D6 Signing time: Sun 05 Apr 2026 06:40:44 +0000 Manifest this update: Sun 05 Apr 2026 06:40:43 +0000 Manifest next update: Sun 12 Apr 2026 06:40:43 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: pZgAWNY1H+fV9OPabmicl2RuFLpplLIqItLIhtPf/wI=) 2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: AS33QEsrO+w5pzGcSkE9nvQ2nEiXdY1kLZjsdA1rM78=) 3: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: 4GQaAPFet59BvpZ472l2KnHRT8Gyym+SHLBTiOsNMf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Apr 5 06:40:43 2026 GMT Not After : Apr 12 06:40:43 2026 GMT Subject: CN=69d203ec-fff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:b5:56:e3:98:68:c0:d7:e5:70:9f:5e:f8: 2c:ad:01:aa:71:d7:c9:17:91:de:70:82:51:74:df: 35:58:d4:fe:72:ef:65:92:e6:c4:a0:4f:69:30:a7: 06:03:8e:b4:39:e1:98:62:c1:50:d8:8d:0e:6b:0d: 44:85:90:72:8f:c0:55:13:d0:d0:eb:2b:38:41:c4: 93:6f:a2:bb:ed:2b:d5:1a:06:95:57:c1:89:85:bb: aa:69:94:e2:1a:cd:99:a1:91:78:4c:48:c1:48:1c: 66:08:fc:6e:28:9c:a2:25:57:73:71:af:2c:19:ae: 6e:d0:b3:d6:b7:55:9a:fd:3d:27:95:c5:d1:52:a3: c2:b6:21:cf:d5:1a:b5:97:07:03:29:1c:9e:d4:2f: 0c:e0:71:81:a1:71:ed:c3:95:6f:95:47:e1:65:b1: 43:76:4d:87:5f:00:e2:88:17:48:dc:c6:72:7f:ad: 32:c0:e5:39:c0:17:04:33:8b:3a:ed:13:37:19:3e: e2:33:bc:c5:36:16:0f:06:c4:41:f9:59:02:99:40: 93:1b:fb:23:7f:80:f6:08:3b:47:3c:7f:df:95:df: 43:e3:9f:eb:41:4b:d3:d9:18:5d:06:dd:ff:ab:89: 7f:f9:b2:da:00:9e:ee:20:14:86:62:45:f6:7e:35: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:21:62:95:FC:71:45:B9:15:F5:21:9C:B3:D0:17:C6:A3:A7:56:F5 X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0b:25:12:69:ed:f6:51:0e:72:d7:73:5f:98:fe:21:1a:1d: 36:af:9e:54:d1:2e:88:da:ea:2c:02:d5:f5:ce:3c:8f:5b:e6: 1f:f0:2f:bf:3b:95:21:2a:66:1b:a2:be:aa:27:df:04:7c:48: df:21:a8:d2:71:e6:d6:cb:5b:91:26:04:6c:b1:cd:2c:24:ff: 02:e6:2e:2f:96:61:b0:13:66:1f:dc:79:43:b6:e9:4c:01:2e: 8c:ff:c8:e0:d9:e5:2c:2d:33:ed:42:2e:cf:b6:b5:3f:6c:c4: 1f:3f:2e:4a:ff:aa:a3:94:ba:be:91:83:de:82:2f:98:1b:53: e5:04:42:c3:28:6a:63:f9:23:98:fa:27:af:1c:d4:40:82:0e: 43:26:c1:9c:41:c6:89:b3:c2:f5:bb:b1:2c:bd:c6:39:64:dd: dd:6c:ab:12:07:d6:d9:fd:4b:b3:df:b8:f5:b4:ba:ff:72:75: 44:a8:be:77:d3:02:3e:8e:8a:6c:db:9d:4e:2f:c1:07:b8:e8: 8b:2b:47:50:04:2e:95:6d:37:15:4d:e1:7a:c6:b2:a1:d7:90: 0e:46:8a:4d:4b:66:07:cb:e6:e1:48:62:b5:41:af:ab:b2:9c: 8f:67:a1:08:52:d7:23:67:06:3c:ad:90:02:33:95:d0:a4:84: 9a:ab:41:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyRkExMTAvBgNVBAUTKDA1N0I1Mzc3NDAzODI2NzhBMDc4RjVCRjI4NEM3MjY3 OTRCOUQxMzQwHhcNMjYwNDA1MDY0MDQzWhcNMjYwNDEyMDY0MDQzWjAYMRYwFAYD VQQDEw02OWQyMDNlYy1mZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQS1VuOYaMDX5XCfXvgsrQGqcdfJF5HecIJRdN81WNT+cu9lkubEoE9pMKcG A460OeGYYsFQ2I0Oaw1EhZByj8BVE9DQ6ys4QcSTb6K77SvVGgaVV8GJhbuqaZTi Gs2ZoZF4TEjBSBxmCPxuKJyiJVdzca8sGa5u0LPWt1Wa/T0nlcXRUqPCtiHP1Rq1 lwcDKRye1C8M4HGBoXHtw5VvlUfhZbFDdk2HXwDiiBdI3MZyf60ywOU5wBcEM4s6 7RM3GT7iM7zFNhYPBsRB+VkCmUCTG/sjf4D2CDtHPH/fld9D45/rQUvT2RhdBt3/ q4l/+bLaAJ7uIBSGYkX2fjW0rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMhYpX8 cUW5FfUhnLPQF8ajp1b1MB8GA1UdIwQYMBaAFAV7U3dAOCZ4oHj1vyhMcmeUudE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTJGQS9GQTQ2RTBEMkVF MDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpuaWdlUFdfS0V4eVo1UzUw VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTJGQS9GQTQ2RTBEMkVFMDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpu aWdlUFdfS0V4eVo1UzUwVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQslEmnt9lEOctdzX5j+IRodNq+eVNEuiNrqLALV9c48j1vmH/AvvzuVISpm G6K+qiffBHxI3yGo0nHm1stbkSYEbLHNLCT/AuYuL5ZhsBNmH9x5Q7bpTAEujP/I 4NnlLC0z7UIuz7a1P2zEHz8uSv+qo5S6vpGD3oIvmBtT5QRCwyhqY/kjmPonrxzU QIIOQybBnEHGibPC9buxLL3GOWTd3WyrEgfW2f1Ls9+49bS6/3J1RKi+d9MCPo6K bNudTi/BB7joiytHUAQulW03FU3hesayodeQDkaKTUtmB8vm4UhitUGvq7Kcj2eh CFLXI2cGPK2QAjOV0KSEmqtBYQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:14 2026 by rpki-client