$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: 78lbYzqGlCFzGmqHP0l9eXbv295MDBuOeHqjSFb3WT0= Subject key identifier: 2E:D3:56:5B:64:89:CA:AE:DA:12:63:AA:B2:E0:57:2F:B4:17:BF:A3 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 08A2 Signing time: Sat 04 Apr 2026 20:19:06 +0000 Manifest this update: Sat 04 Apr 2026 20:19:05 +0000 Manifest next update: Sat 11 Apr 2026 20:19:05 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: tcZxP2NoPYVtx/Y/LarN7DzKRhnR6DXo0yuZA8p4SAs=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: DuimfMM6Nd+7rzuoSGk/U4fJnXKvq7EhcZ9WZtUqy1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Apr 4 20:19:05 2026 GMT Not After : Apr 11 20:19:05 2026 GMT Subject: CN=69d1723a-bd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:05:83:39:62:ef:a3:84:7f:ef:80:50:ac:c3: 16:e0:ee:4e:ac:cf:c6:45:42:fd:b5:30:c1:e7:d8: ad:b0:fb:00:78:1a:cc:66:35:65:a7:70:e6:e4:f6: b1:20:05:46:0a:a7:cf:8a:00:9e:71:f3:7d:6c:56: c7:6c:8c:f3:30:5f:ff:3a:be:b2:25:4f:3b:5e:49: 0b:9b:e7:28:48:6d:11:44:49:c9:28:1f:3f:6b:09: d9:9b:d4:07:c4:5d:06:e0:3d:05:f6:c7:ca:0b:c7: a8:aa:aa:6c:0a:5b:43:dc:cb:19:f8:48:09:1c:df: b7:36:f0:2a:76:68:94:f1:89:46:51:8c:1d:15:0b: e4:bf:ec:18:d1:ab:a0:b0:43:8a:67:44:1c:d3:89: af:28:d6:7a:67:b9:29:88:11:9e:1c:82:ec:7a:9d: 6a:94:3f:ff:ca:b1:19:44:9b:8b:60:a0:a1:67:a3: 70:e0:79:a9:89:1b:2f:83:6e:c9:f2:af:37:ae:27: 2c:cd:2a:99:6e:a8:d3:5d:d2:d1:a8:8e:0f:32:4f: 35:af:eb:8f:bc:4b:5b:ed:fb:f9:57:e7:71:3e:39: e2:18:73:e1:64:68:62:62:52:f2:d7:56:38:b7:ea: d0:91:b3:76:09:b2:98:f5:52:9d:c7:44:5b:50:1e: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:56:5B:64:89:CA:AE:DA:12:63:AA:B2:E0:57:2F:B4:17:BF:A3 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:95:e3:fb:46:ca:9f:51:3b:12:6f:50:22:1f:9a:cb:68:4a: 55:0f:84:78:23:94:3f:32:38:fb:f5:0c:53:08:9e:33:7b:75: 64:f0:40:0a:84:31:86:c7:bc:70:66:4e:23:15:99:54:4a:49: 53:6c:ac:d5:bf:f7:43:51:9f:47:88:ab:2a:8c:4c:a0:3f:6e: eb:09:c4:4e:cc:3e:b7:c1:ed:af:91:69:4f:f6:ce:78:31:6d: 97:2c:43:ef:a5:4d:53:4c:f7:56:ea:93:e7:06:2b:6f:70:eb: 27:05:a3:ce:b0:eb:1e:28:37:13:ff:70:ac:81:b0:a1:f9:0f: 63:ad:2b:9d:f9:0f:53:0e:37:4a:72:e2:e6:14:e6:f9:69:98: a2:dd:d1:6f:9a:2d:7a:d4:b9:20:3c:fc:e9:45:aa:7b:d3:e8: 79:bf:2a:f1:b5:40:85:2d:09:68:11:8a:74:15:6d:0b:48:56: 51:06:0e:84:86:23:91:c0:aa:96:4d:01:bb:11:fa:d8:6e:09: ad:0c:d9:cb:cf:ea:f4:95:b7:52:af:59:31:90:23:f4:82:37: 3c:ad:59:e7:f4:ca:59:f4:16:ee:9d:08:d3:3d:73:c6:93:53: 5a:59:1e:58:5f:36:29:bd:f1:00:ca:6d:e9:ad:32:1e:e4:04: 7b:b4:7a:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjYwNDA0MjAxOTA1WhcNMjYwNDExMjAxOTA1WjAYMRYwFAYD VQQDEw02OWQxNzIzYS1iZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gWDOWLvo4R/74BQrMMW4O5OrM/GRUL9tTDB59itsPsAeBrMZjVlp3Dm5Pax IAVGCqfPigCecfN9bFbHbIzzMF//Or6yJU87XkkLm+coSG0RREnJKB8/awnZm9QH xF0G4D0F9sfKC8eoqqpsCltD3MsZ+EgJHN+3NvAqdmiU8YlGUYwdFQvkv+wY0aug sEOKZ0Qc04mvKNZ6Z7kpiBGeHILsep1qlD//yrEZRJuLYKChZ6Nw4HmpiRsvg27J 8q83ricszSqZbqjTXdLRqI4PMk81r+uPvEtb7fv5V+dxPjniGHPhZGhiYlLy11Y4 t+rQkbN2CbKY9VKdx0RbUB4FEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7TVltk icqu2hJjqrLgVy+0F7+jMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAApXj+0bKn1E7Em9QIh+ay2hKVQ+EeCOUPzI4+/UMUwieM3t1ZPBACoQxhse8 cGZOIxWZVEpJU2ys1b/3Q1GfR4irKoxMoD9u6wnETsw+t8Htr5FpT/bOeDFtlyxD 76VNU0z3VuqT5wYrb3DrJwWjzrDrHig3E/9wrIGwofkPY60rnfkPUw43SnLi5hTm +WmYot3Rb5otetS5IDz86UWqe9Poeb8q8bVAhS0JaBGKdBVtC0hWUQYOhIYjkcCq lk0BuxH62G4JrQzZy8/q9JW3Uq9ZMZAj9II3PK1Z5/TKWfQW7p0I0z1zxpNTWlke WF82Kb3xAMpt6a0yHuQEe7R64g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:45 2026 by rpki-client