$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: gLop5J3AVhdjHmYQ894AKJKoUGL8o0qjD/HfONMLeuM= Subject key identifier: 17:AF:65:6D:D0:52:C3:F8:F5:CA:85:DB:63:E5:5E:46:E1:C0:BF:98 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 0285 Signing time: Sun 05 Apr 2026 01:24:42 +0000 Manifest this update: Sun 05 Apr 2026 01:24:42 +0000 Manifest next update: Sun 12 Apr 2026 01:24:42 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: qNsi8MNs3BiBRhs5YBbvmHHL9Nwj/tzQHhoGJuuQUfk=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: tvqlcJCmAFNM8ul/lcMi6vNrt3BBFQygy7dURzB2DO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Apr 5 01:24:42 2026 GMT Not After : Apr 12 01:24:42 2026 GMT Subject: CN=69d1b9da-5963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:4a:f9:70:f7:82:93:bd:60:09:86:fe:d9: a5:6d:0e:88:71:2d:37:e2:76:e0:46:16:bb:9c:9e: 73:ee:23:52:8e:18:7b:57:8f:47:63:5e:67:5b:4a: 0c:a9:c9:cf:63:67:78:a3:ff:7e:30:1c:2c:93:a7: b1:13:73:ab:f7:2f:33:77:15:fa:f1:05:a1:8b:3b: c6:95:2c:1e:23:2a:c9:86:ae:e0:e7:05:d5:88:6c: bf:bf:80:67:83:cf:8d:2d:a5:9a:a2:56:46:cb:02: 0f:66:31:51:89:98:82:af:d0:c6:4b:02:f1:e8:e2: 94:9a:72:16:db:a1:8c:76:11:38:94:1d:b5:59:69: 61:de:3a:8c:88:79:c1:53:ca:6b:6b:77:c7:b7:c7: ee:98:96:6a:1e:e0:d1:28:d2:09:b0:f6:da:4b:ed: 51:e1:5c:c4:b9:4f:19:00:48:fb:32:8c:1a:3b:64: 1f:99:75:d9:00:85:c2:1f:3a:f4:c4:10:4e:c4:36: ee:01:3b:07:d5:51:31:1a:dc:da:f9:62:95:4c:b2: cc:3a:d5:5d:40:0f:d2:f4:bf:d8:3a:1a:76:00:52: 74:5e:27:91:79:3e:93:2a:c6:b5:f1:64:04:a3:71: 64:63:b9:d1:b9:e3:8b:cc:38:d7:9e:e0:b6:8f:df: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:65:6D:D0:52:C3:F8:F5:CA:85:DB:63:E5:5E:46:E1:C0:BF:98 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:25:35:d5:3e:f3:7f:f3:6d:87:a1:94:f3:3c:8b:08:ec: 87:8c:bb:cc:99:bf:17:a1:72:9b:7e:ab:c4:48:a2:5e:34:b4: 3b:ed:74:b4:3f:07:a7:18:82:b7:16:e1:95:9d:7c:a4:48:55: f1:9f:60:03:0b:ea:9f:a0:de:64:95:66:0d:51:a4:d4:ad:4d: 5f:61:3a:d3:7e:ef:c8:6d:45:b0:18:6a:18:14:30:f7:91:19: ab:13:04:2e:92:6a:34:6b:96:38:f6:c3:30:81:5d:91:c0:f4: d5:bb:14:9e:71:34:08:c7:eb:8b:28:2d:20:fa:8b:6d:69:27: 42:cd:30:17:f3:6c:fb:a5:87:ab:0c:33:5c:62:38:cd:23:53: 60:d5:3b:b9:b6:05:19:12:ec:cb:4c:19:12:63:fe:16:93:85: c9:c7:d2:34:f8:8e:24:48:b3:cf:9c:90:c6:26:b8:27:e3:b3: b2:1c:cf:eb:9f:cf:a9:09:a6:27:7b:e6:76:4d:64:41:3c:8e: 67:6d:e2:b2:5d:0d:ff:25:b0:a8:c2:f0:aa:43:40:48:20:f5: d1:8a:bf:8d:2e:50:86:12:ea:40:26:a7:6c:81:09:a4:08:08: 78:fb:15:2e:14:83:6d:86:4d:ef:d0:95:26:b1:7b:8b:a4:95: c4:d6:10:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjYwNDA1MDEyNDQyWhcNMjYwNDEyMDEyNDQyWjAYMRYwFAYD VQQDEw02OWQxYjlkYS01OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZFK+XD3gpO9YAmG/tmlbQ6IcS034nbgRha7nJ5z7iNSjhh7V49HY15nW0oM qcnPY2d4o/9+MBwsk6exE3Or9y8zdxX68QWhizvGlSweIyrJhq7g5wXViGy/v4Bn g8+NLaWaolZGywIPZjFRiZiCr9DGSwLx6OKUmnIW26GMdhE4lB21WWlh3jqMiHnB U8pra3fHt8fumJZqHuDRKNIJsPbaS+1R4VzEuU8ZAEj7MowaO2QfmXXZAIXCHzr0 xBBOxDbuATsH1VExGtza+WKVTLLMOtVdQA/S9L/YOhp2AFJ0XieReT6TKsa18WQE o3FkY7nRueOLzDjXnuC2j98v/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBevZW3Q UsP49cqF22PlXkbhwL+YMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhzslNdU+83/zbYehlPM8iwjsh4y7zJm/F6Fym36rxEiiXjS0O+10tD8HpxiC txbhlZ18pEhV8Z9gAwvqn6DeZJVmDVGk1K1NX2E6037vyG1FsBhqGBQw95EZqxME LpJqNGuWOPbDMIFdkcD01bsUnnE0CMfriygtIPqLbWknQs0wF/Ns+6WHqwwzXGI4 zSNTYNU7ubYFGRLsy0wZEmP+FpOFycfSNPiOJEizz5yQxia4J+OzshzP65/PqQmm J3vmdk1kQTyOZ23isl0N/yWwqMLwqkNASCD10Yq/jS5QhhLqQCanbIEJpAgIePsV LhSDbYZN79CVJrF7i6SVxNYQZg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:48 2026 by rpki-client