$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json) Hash identifier: hM3VoO6xHEk7e7a90RmxEf490qU9q5zpDOQar1242aw= Subject key identifier: 9B:88:DB:38:75:49:A1:5B:47:09:63:F9:AC:2B:93:86:52:EC:59:ED Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft Manifest number: 70 Signing time: Sun 05 Apr 2026 07:13:10 +0000 Manifest this update: Sun 05 Apr 2026 07:13:09 +0000 Manifest next update: Sun 12 Apr 2026 07:13:09 +0000 Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: bNT+gOj49sw+roaQ9X7qEXhOCfgYrwwaLAmpn+oUqHw=) 2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Apr 5 07:13:09 2026 GMT Not After : Apr 12 07:13:09 2026 GMT Subject: CN=69d20b85-70ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:8e:02:41:59:37:e1:fd:9b:72:e2:2c:e1: 50:7c:33:9f:7e:25:5a:18:75:16:c7:50:39:dc:22: 69:ce:73:aa:63:75:8b:c1:db:89:88:bf:13:e8:99: ac:60:66:a3:b3:ab:5d:c8:e3:52:28:6f:65:43:23: fc:7b:e0:28:fd:b3:30:86:e3:6d:8b:02:ec:89:d0: ac:c8:3f:18:88:c4:ce:b9:f7:ce:eb:26:f9:71:a8: bb:63:80:0b:b3:1f:57:88:28:f3:1d:41:1d:d6:15: cf:f7:ed:69:c8:6e:96:c1:a3:2d:95:fc:03:b4:f1: e4:a1:13:cd:b2:b0:42:61:8d:a4:73:5f:57:16:07: 46:1c:11:3c:33:04:59:7c:9e:91:10:b1:c4:87:09: ad:0c:55:3f:82:77:cd:80:e9:e9:6c:3b:4a:e9:57: 5d:8c:f1:04:0e:38:b9:c7:1b:e7:40:bf:8e:5a:15: 9b:03:11:dd:4a:78:5b:19:3c:b5:b7:16:58:dd:37: 5c:7d:6d:62:7e:88:54:24:17:9e:7b:0a:44:fb:0c: 65:44:0f:69:9a:32:c4:7e:30:13:b3:ed:60:f8:ab: d0:27:a5:98:5f:8a:6c:3b:10:02:af:c5:bd:88:8f: a2:31:9c:9d:6a:90:a7:10:8d:12:d8:9a:97:e4:3b: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:DB:38:75:49:A1:5B:47:09:63:F9:AC:2B:93:86:52:EC:59:ED X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:78:76:00:5f:78:cf:74:7d:55:8f:16:b9:2e:59:31:fd:0c: 20:08:81:67:20:44:65:4a:99:61:b1:f7:0d:6b:a0:1f:5c:4d: 2c:f1:f4:b8:7d:af:9f:6c:a9:42:f9:d5:4c:e1:e7:c7:5b:5e: a5:cb:13:48:f7:46:b6:75:9b:13:ae:91:29:04:d9:d2:73:dd: 4d:45:98:53:89:2e:3b:7f:3a:e1:54:2d:34:30:0c:1f:08:76: 83:05:b3:35:ac:40:15:59:0b:53:e1:a5:89:1a:37:36:e1:ac: 0b:b3:96:42:82:2d:a3:09:41:2a:c8:29:1c:88:98:c4:29:12: f6:1e:84:22:6d:3a:7f:3a:3c:c6:d0:b0:86:0a:2f:82:41:6e: c3:3e:b5:25:b1:f7:42:8a:65:de:dc:3e:0c:8e:a0:dc:51:36: 0b:8b:08:b1:ea:b6:e3:44:dc:bd:e5:f7:90:c0:7d:0a:f0:1a: 96:6b:56:0a:34:80:2d:99:56:4e:9b:18:c6:db:04:55:96:c0: f8:51:e1:0b:ec:b1:93:d2:33:c0:59:63:2a:f9:4f:93:c5:53: 38:ed:fc:ad:ba:49:07:81:cb:35:2e:3a:ca:84:61:cd:79:7c: a5:a1:59:dd:2b:43:27:9f:01:43:e7:cd:b9:78:3c:8d:28:4e: 6c:cb:cc:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNjA0MDUwNzEzMDlaFw0yNjA0MTIwNzEzMDlaMBgxFjAUBgNV BAMTDTY5ZDIwYjg1LTcwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCScY4CQVk34f2bcuIs4VB8M59+JVoYdRbHUDncImnOc6pjdYvB24mIvxPomaxg ZqOzq13I41Iob2VDI/x74Cj9szCG422LAuyJ0KzIPxiIxM65987rJvlxqLtjgAuz H1eIKPMdQR3WFc/37WnIbpbBoy2V/AO08eShE82ysEJhjaRzX1cWB0YcETwzBFl8 npEQscSHCa0MVT+Cd82A6elsO0rpV12M8QQOOLnHG+dAv45aFZsDEd1KeFsZPLW3 FljdN1x9bWJ+iFQkF557CkT7DGVED2maMsR+MBOz7WD4q9AnpZhfimw7EAKvxb2I j6IxnJ1qkKcQjRLYmpfkOyldAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm4jbOHVJ oVtHCWP5rCuThlLsWe0wHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw QkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pG bnJNa0RETDdhMktuRUY3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANeHYAX3jPdH1Vjxa5Llkx/QwgCIFnIERlSplhsfcNa6AfXE0s8fS4fa+fbKlC +dVM4efHW16lyxNI90a2dZsTrpEpBNnSc91NRZhTiS47fzrhVC00MAwfCHaDBbM1 rEAVWQtT4aWJGjc24awLs5ZCgi2jCUEqyCkciJjEKRL2HoQibTp/OjzG0LCGCi+C QW7DPrUlsfdCimXe3D4MjqDcUTYLiwix6rbjRNy95feQwH0K8BqWa1YKNIAtmVZO mxjG2wRVlsD4UeEL7LGT0jPAWWMq+U+TxVM47fytukkHgcs1LjrKhGHNeXyloVnd K0MnnwFD5825eDyNKE5sy8zy -----END CERTIFICATE-----Generated at Mon Apr 6 10:10:15 2026 by rpki-client