$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: Dz8w4+bHqhh4g20ilF3EaRuxdAakXz1tOX+2AzV0onY= Subject key identifier: 13:57:A9:95:D4:92:C9:03:EE:98:91:39:1A:B5:EE:DA:19:AA:E5:D9 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 012B Signing time: Sun 05 Apr 2026 05:14:55 +0000 Manifest this update: Sun 05 Apr 2026 05:14:55 +0000 Manifest next update: Sun 12 Apr 2026 05:14:55 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: f1KeymzsHJr2H8jRY3gO+KVMOy9c/rgnCqM3g4B8Pxg=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Apr 5 05:14:55 2026 GMT Not After : Apr 12 05:14:55 2026 GMT Subject: CN=69d1efcf-08ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:71:ed:72:e7:50:d4:c6:a4:17:68:f8:3b: ae:d1:a2:fb:b5:43:e1:68:41:fc:be:8f:ba:e6:7d: 7a:f5:fe:aa:5e:79:bb:da:0e:b3:94:5e:c1:56:d5: 24:bf:14:57:b9:71:8b:de:cf:41:50:81:3b:cf:28: db:68:eb:c8:c4:f5:d5:7f:9b:22:78:e3:15:70:81: 7d:6f:ec:5c:3b:7f:7e:58:2e:9a:f6:ed:6e:9c:50: 44:14:77:3c:4e:43:d8:97:8a:fb:f4:aa:9d:d8:16: f9:6a:3b:1d:0f:ce:ea:d3:a6:97:33:85:bc:e0:34: 81:a8:4d:b7:3b:12:08:31:35:61:4a:bb:16:2d:b5: 99:a6:54:aa:65:a9:c7:61:ca:c1:3d:54:11:3b:31: 1b:88:39:10:36:b7:05:d6:c7:e5:94:06:f8:53:33: ec:a4:1c:63:d6:74:a0:f6:ea:c3:d1:b1:e4:a0:5f: 82:de:f6:15:15:cd:2d:e9:71:5d:49:d7:4b:e9:5c: 71:ac:e1:a0:23:2d:6d:de:b4:f6:a4:b4:e0:ee:57: 7c:3d:f5:b5:ee:c9:21:d6:c2:85:f8:b5:73:4d:71: 52:d8:23:26:ba:aa:cf:ec:08:6b:aa:7d:54:63:e6: 2f:09:b8:5d:80:2d:6b:9d:84:b5:dd:88:3d:7b:18: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:A9:95:D4:92:C9:03:EE:98:91:39:1A:B5:EE:DA:19:AA:E5:D9 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:57:76:3b:f4:19:d3:2c:2b:7b:65:16:cc:ee:ae:13:12:3d: f7:a1:27:e7:68:b6:90:78:e1:0f:c3:f7:de:02:48:be:23:af: 9c:40:41:bc:96:a0:83:19:64:c3:84:28:71:91:41:ae:70:dc: d8:99:60:6b:2e:ae:42:54:e2:ce:09:21:fb:9b:44:24:ac:c8: b2:e1:24:f5:47:32:a0:b0:2c:c4:18:6c:93:23:85:7c:85:bd: 21:ae:85:f1:01:06:49:ac:c1:af:25:df:ea:8c:5f:5f:7c:ea: b2:88:5f:60:2f:f8:81:24:77:56:dd:27:fe:e7:9d:18:6f:ae: cd:55:16:f3:4e:f8:d6:33:ab:67:47:e8:0d:33:85:57:e5:82: 32:41:b7:d7:1e:1e:b0:76:95:75:a1:13:2f:d1:58:a4:ab:23: bb:27:7c:2e:0b:b6:10:29:3b:e0:4b:45:35:eb:c5:f2:e6:64: 4c:c9:70:77:92:2b:8d:8c:01:63:b9:3f:ee:f7:77:c2:02:d5: f6:0f:a6:94:c3:ad:af:1f:1e:c0:50:87:5a:21:c4:86:31:3c: 5e:1e:84:5e:17:da:79:87:e6:80:8e:d3:36:b0:0e:1b:2f:26: d4:1e:6c:3e:ec:0b:4c:e1:f0:a9:2f:37:f7:a7:16:ab:b3:cb: 1f:57:e3:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjYwNDA1MDUxNDU1WhcNMjYwNDEyMDUxNDU1WjAYMRYwFAYD VQQDEw02OWQxZWZjZi0wOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwORx7XLnUNTGpBdo+Duu0aL7tUPhaEH8vo+65n169f6qXnm72g6zlF7BVtUk vxRXuXGL3s9BUIE7zyjbaOvIxPXVf5sieOMVcIF9b+xcO39+WC6a9u1unFBEFHc8 TkPYl4r79Kqd2Bb5ajsdD87q06aXM4W84DSBqE23OxIIMTVhSrsWLbWZplSqZanH YcrBPVQROzEbiDkQNrcF1sfllAb4UzPspBxj1nSg9urD0bHkoF+C3vYVFc0t6XFd SddL6VxxrOGgIy1t3rT2pLTg7ld8PfW17skh1sKF+LVzTXFS2CMmuqrP7Ahrqn1U Y+YvCbhdgC1rnYS13Yg9exi7YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNXqZXU kskD7piRORq17toZquXZMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA1d2O/QZ0ywre2UWzO6uExI996En52i2kHjhD8P33gJIviOvnEBBvJaggxlk w4QocZFBrnDc2Jlgay6uQlTizgkh+5tEJKzIsuEk9UcyoLAsxBhskyOFfIW9Ia6F 8QEGSazBryXf6oxfX3zqsohfYC/4gSR3Vt0n/uedGG+uzVUW80741jOrZ0foDTOF V+WCMkG31x4esHaVdaETL9FYpKsjuyd8Lgu2ECk74EtFNevF8uZkTMlwd5IrjYwB Y7k/7vd3wgLV9g+mlMOtrx8ewFCHWiHEhjE8Xh6EXhfaeYfmgI7TNrAOGy8m1B5s PuwLTOHwqS8396cWq7PLH1fjcQ== -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:00 2026 by rpki-client