$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: sy4Z3T/1JSsbsbFTq5+yo6zvC6FJvO4aCqSPp1DaxHk= Subject key identifier: E0:C3:48:FE:8B:BF:4D:87:25:FA:81:FE:6F:CA:15:34:43:48:DA:24 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: D4 Signing time: Sun 05 Apr 2026 06:06:54 +0000 Manifest this update: Sun 05 Apr 2026 06:06:54 +0000 Manifest next update: Sun 12 Apr 2026 06:06:54 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: T4XisvhufmWyr4jwwptjrn5e7a49eni6OHgvk4+BLbc=) 2: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: zH79Pg4ZQIEeTl4Pd39EmE15gNeuVouP/IuZpHLtxZU=) 3: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Apr 5 06:06:54 2026 GMT Not After : Apr 12 06:06:54 2026 GMT Subject: CN=69d1fbfe-0042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:87:ea:41:ff:d0:63:7c:e9:e7:7c:ae:4a: 3d:c0:11:d4:b6:e4:3e:b1:58:6c:5a:40:e8:a6:50: 9a:55:7d:fd:97:4e:28:22:78:f6:66:1a:6e:0b:3b: 01:f8:87:d6:9b:c1:1c:81:36:bf:d3:47:dc:89:77: ea:4d:ff:ff:20:a3:10:cb:0a:68:ed:89:63:7f:00: da:6b:3a:2a:4a:6d:6a:1f:97:f1:89:68:ce:e9:1e: c9:be:fc:78:cf:58:87:5c:6a:9b:5d:b9:ba:fd:37: 78:30:94:37:21:92:98:ae:71:ee:f1:3a:96:4e:74: 17:ce:a1:0e:8d:42:d4:f9:1a:94:6d:27:39:0a:d6: 22:e2:fb:3e:ea:58:60:69:b8:77:85:8d:27:de:ce: 8a:43:de:85:35:26:9c:74:e1:05:64:c8:26:90:59: dc:39:56:44:65:d9:25:d6:d5:09:62:29:79:cc:e9: 84:b5:0c:57:14:c6:00:f2:f7:b4:27:77:a3:6b:e1: 0c:da:e4:81:f3:ef:ab:c0:03:78:77:1f:71:b5:3b: 34:db:a5:7f:f6:54:5c:42:ae:db:16:07:7d:93:ad: 4f:24:19:af:2c:76:34:d9:51:f5:4a:98:71:e2:a7: e2:de:c4:e9:eb:a3:3a:ff:6f:ba:28:d5:2d:29:a7: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C3:48:FE:8B:BF:4D:87:25:FA:81:FE:6F:CA:15:34:43:48:DA:24 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e6:53:75:29:44:9a:e4:b4:3a:d6:d4:eb:c7:4f:cb:40:40: 81:70:48:b9:1c:9d:bc:ec:f1:b1:19:20:cf:66:78:c3:78:23: b3:61:4c:c3:57:b3:44:3a:3f:97:ba:9e:43:e5:1d:41:da:33: 31:9d:49:0d:bd:60:ab:d0:3d:85:9c:80:a7:69:45:e6:4a:15: af:b5:37:fe:de:74:e8:70:23:03:21:20:cf:cf:2e:53:da:e9: 81:f2:e3:ea:92:cd:d7:ea:d9:ee:f6:cc:2b:11:5a:cf:d7:c9: f8:0e:9d:68:36:4c:a2:61:29:08:2e:b1:b3:a4:ab:64:85:0e: 38:bb:d0:48:2a:fa:d6:28:95:53:fa:f4:f4:3f:81:89:f2:60: ce:4e:0f:6b:12:89:4f:00:67:1e:24:72:7b:00:54:f9:c7:6f: 6a:16:02:1d:cd:7d:7d:41:9b:03:aa:4e:91:12:c3:e0:60:78: c4:b8:0a:7b:f2:d1:1b:f0:2b:b2:fa:8d:87:85:c0:f5:53:d9: 6e:4f:9a:c7:c9:64:fd:68:c2:a6:bf:2f:3c:70:bf:6d:6c:44: 2a:5b:97:72:ba:76:e7:8e:0d:da:5e:f6:77:30:7c:d3:35:34: 07:d4:46:d6:9d:a4:71:35:c5:03:f8:98:ef:58:db:1f:89:fa: b6:03:ac:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjYwNDA1MDYwNjU0WhcNMjYwNDEyMDYwNjU0WjAYMRYwFAYD VQQDEw02OWQxZmJmZS0wMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNOH6kH/0GN86ed8rko9wBHUtuQ+sVhsWkDoplCaVX39l04oInj2ZhpuCzsB +IfWm8EcgTa/00fciXfqTf//IKMQywpo7YljfwDaazoqSm1qH5fxiWjO6R7Jvvx4 z1iHXGqbXbm6/Td4MJQ3IZKYrnHu8TqWTnQXzqEOjULU+RqUbSc5CtYi4vs+6lhg abh3hY0n3s6KQ96FNSacdOEFZMgmkFncOVZEZdkl1tUJYil5zOmEtQxXFMYA8ve0 J3eja+EM2uSB8++rwAN4dx9xtTs026V/9lRcQq7bFgd9k61PJBmvLHY02VH1Sphx 4qfi3sTp66M6/2+6KNUtKacV9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODDSP6L v02HJfqB/m/KFTRDSNokMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgeZTdSlEmuS0OtbU68dPy0BAgXBIuRydvOzxsRkgz2Z4w3gjs2FMw1ezRDo/ l7qeQ+UdQdozMZ1JDb1gq9A9hZyAp2lF5koVr7U3/t506HAjAyEgz88uU9rpgfLj 6pLN1+rZ7vbMKxFaz9fJ+A6daDZMomEpCC6xs6SrZIUOOLvQSCr61iiVU/r09D+B ifJgzk4PaxKJTwBnHiRyewBU+cdvahYCHc19fUGbA6pOkRLD4GB4xLgKe/LRG/Ar svqNh4XA9VPZbk+ax8lk/WjCpr8vPHC/bWxEKluXcrp2544N2l72dzB80zU0B9RG 1p2kcTXFA/iY71jbH4n6tgOs+g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:02 2026 by rpki-client