$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: /rk4uO/NPLaZ1k2J3MMp9Gy1p1PMXA0pzcSdRFHGBrc= Subject key identifier: 7D:00:D1:20:19:20:74:27:F5:53:95:2B:D8:88:15:B9:84:7C:97:4F Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A8F Signing time: Sat 04 Apr 2026 19:22:11 +0000 Manifest this update: Sat 04 Apr 2026 19:22:10 +0000 Manifest next update: Sat 11 Apr 2026 19:22:10 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: mo/WH+4bh9+AZW1AHqIQI9z+iIUMccOZcXOGzwgarAE=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 6zwL+CyahpyzOQDZ6R2F0afujTGC0qWAsIklrEXhVhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Apr 4 19:22:10 2026 GMT Not After : Apr 11 19:22:10 2026 GMT Subject: CN=69d164e3-c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:ce:18:f5:4f:93:0e:55:f2:9f:97:b2:e9: c8:61:bc:af:b2:06:6a:4e:b0:d5:db:8d:3f:c0:2b: 3a:74:84:12:98:3c:50:27:c8:94:3d:1f:cf:8e:8b: c2:49:79:17:6d:4f:a4:6b:cc:00:81:58:4a:d4:b8: 85:5f:18:63:d1:29:a5:aa:09:ca:8c:7d:61:c1:86: 89:8a:ae:6c:66:43:45:a6:5d:56:f5:bb:f9:bc:53: 60:07:ee:a4:1a:3c:bc:97:44:fa:78:18:02:32:b3: d7:d9:a4:d9:83:be:9d:da:35:f8:6f:c8:34:71:43: 46:37:98:aa:56:39:a7:46:b1:dc:f6:81:fa:eb:68: c6:39:48:40:2d:61:47:ea:2e:0a:d4:54:a7:97:29: 05:ca:7e:ad:4d:b6:c6:5f:52:bb:5d:16:35:f3:49: c2:df:5a:52:46:3e:58:7b:bc:aa:d0:ac:eb:ea:91: 6b:ae:96:42:06:50:1f:46:4c:8e:30:96:b1:2e:29: 9b:3e:05:3e:9e:dd:9f:a9:24:c6:a4:84:de:a8:14: ae:9f:c0:5b:1c:b1:40:88:61:ea:23:27:86:cf:96: ad:f0:be:fa:e9:dc:ff:ac:e4:89:0a:19:6c:2b:65: ca:7e:3a:f8:c9:06:dd:9d:7d:99:41:17:25:19:03: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:D1:20:19:20:74:27:F5:53:95:2B:D8:88:15:B9:84:7C:97:4F X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ee:1a:1e:1c:fd:13:88:e5:ea:8a:0f:be:a1:c5:e8:fb:de: a9:32:dd:52:71:97:78:9e:30:43:0d:8a:8a:bb:05:14:91:7e: 20:69:a1:df:7e:62:69:af:13:b1:e8:f5:91:b6:3b:c0:e3:3b: 25:78:f6:b6:f0:b8:2f:49:66:97:d5:8d:56:d5:90:72:76:ee: 69:8a:88:e6:28:21:e1:28:51:42:57:1f:3c:b5:c2:2a:ab:48: 4f:37:ee:ea:4f:88:d0:4a:a8:58:eb:8f:30:b6:fd:2f:3f:5f: 02:5c:2c:49:db:bd:92:ec:e9:f2:c5:b1:ef:da:72:73:25:c1: 85:c1:ce:3a:5a:ed:94:03:6b:b9:40:f9:a0:17:b2:5d:e8:36: e4:bd:39:21:ca:5f:ea:13:7c:83:4b:2d:a4:ee:3a:02:ac:1f: 93:c1:71:f8:8e:80:36:84:ca:0f:f6:4b:37:a7:dd:40:b5:c8: f6:b9:96:c7:18:0b:9e:a1:7c:20:9c:8f:d0:70:d8:0d:41:4b: 62:6a:91:8e:59:b5:99:f9:7e:4f:60:e3:43:c6:e5:5d:23:e4: 61:c9:d8:0d:54:1b:0d:70:62:7a:05:fc:ec:06:38:75:ce:1a: 97:ba:1d:28:93:6a:16:c8:96:bd:e0:67:9e:47:97:ce:e8:86: 06:0e:0d:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjYwNDA0MTkyMjEwWhcNMjYwNDExMTkyMjEwWjAYMRYwFAYD VQQDEw02OWQxNjRlMy1jM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT3OGPVPkw5V8p+XsunIYbyvsgZqTrDV240/wCs6dIQSmDxQJ8iUPR/PjovC SXkXbU+ka8wAgVhK1LiFXxhj0SmlqgnKjH1hwYaJiq5sZkNFpl1W9bv5vFNgB+6k Gjy8l0T6eBgCMrPX2aTZg76d2jX4b8g0cUNGN5iqVjmnRrHc9oH662jGOUhALWFH 6i4K1FSnlykFyn6tTbbGX1K7XRY180nC31pSRj5Ye7yq0Kzr6pFrrpZCBlAfRkyO MJaxLimbPgU+nt2fqSTGpITeqBSun8BbHLFAiGHqIyeGz5at8L766dz/rOSJChls K2XKfjr4yQbdnX2ZQRclGQMFowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0A0SAZ IHQn9VOVK9iIFbmEfJdPMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQO4aHhz9E4jl6ooPvqHF6PveqTLdUnGXeJ4wQw2KirsFFJF+IGmh335iaa8T sej1kbY7wOM7JXj2tvC4L0lml9WNVtWQcnbuaYqI5igh4ShRQlcfPLXCKqtITzfu 6k+I0EqoWOuPMLb9Lz9fAlwsSdu9kuzp8sWx79pycyXBhcHOOlrtlANruUD5oBey Xeg25L05Icpf6hN8g0stpO46Aqwfk8Fx+I6ANoTKD/ZLN6fdQLXI9rmWxxgLnqF8 IJyP0HDYDUFLYmqRjlm1mfl+T2DjQ8blXSPkYcnYDVQbDXBiegX87AY4dc4al7od KJNqFsiWveBnnkeXzuiGBg4NJA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:10 2026 by rpki-client