$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: H5boUs2zUrUSHoiwCMz0wGFhvATIB6zvuYbcAO2bddI= Subject key identifier: 86:95:B0:8F:F6:02:A1:4B:D2:A6:4D:0A:6A:C1:68:53:EA:3C:BE:74 Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 195E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 1945 Signing time: Sat 04 Apr 2026 16:20:41 +0000 Manifest this update: Sat 04 Apr 2026 16:20:40 +0000 Manifest next update: Sat 11 Apr 2026 16:20:40 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: QVk24GbITvNZGyDJ2RsvoCW1v1BR4Nj+xvpq0+lS8QM=) 2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6494 (0x195e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Apr 4 16:20:40 2026 GMT Not After : Apr 11 16:20:40 2026 GMT Subject: CN=69d13a59-91dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:fd:4e:18:a2:e2:c7:9b:f0:74:03:de:8e: a0:a4:79:39:b7:06:5e:4f:69:77:c4:29:f8:fe:4b: 2f:25:4f:fd:4f:0f:99:78:aa:d4:4d:85:02:9d:7e: a4:b6:7e:9e:9f:89:73:37:dd:ba:ea:e0:d8:aa:3f: dd:8c:c9:57:6e:29:b0:3b:ee:95:0f:06:8a:89:a0: 20:a2:a0:16:f3:b5:c3:92:09:a5:b0:69:5b:8a:2f: 64:09:6b:14:32:f7:8c:b6:60:b5:2f:5f:82:89:94: 02:b7:bf:17:cd:4d:c3:07:8f:cd:c3:c6:39:97:2e: 92:b8:d0:63:32:74:40:0e:53:7c:d3:0f:a3:40:30: e4:06:69:f2:31:02:11:ce:59:0a:c4:2b:44:2c:bb: 3b:13:91:82:e4:9d:ac:fb:b3:8b:1d:73:93:54:35: 2c:58:69:58:51:37:cf:8f:5f:17:5c:54:1a:b4:6b: ed:ac:c6:48:83:4d:70:ea:e7:0d:a0:69:30:d4:25: e8:cc:91:05:bc:38:03:cd:43:a3:e5:d5:9d:f7:43: f7:97:c6:9d:64:8d:94:b1:47:49:94:b0:51:67:23: 13:52:99:cb:ea:d8:57:7c:14:bf:61:e4:58:86:eb: d7:f9:7f:b8:39:29:31:04:c1:e6:b9:c5:46:e4:db: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:B0:8F:F6:02:A1:4B:D2:A6:4D:0A:6A:C1:68:53:EA:3C:BE:74 X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:fe:f2:61:18:52:98:be:47:55:10:a6:1c:70:06:88:97:bb: 94:25:02:de:55:a8:02:f1:56:74:f3:2e:ea:c3:ab:23:27:3b: 8a:b1:fd:54:7f:da:1c:81:53:2d:5c:df:97:32:a9:e8:4e:ea: 8c:49:98:c6:ea:3d:f3:19:82:6d:22:d2:74:f7:51:84:84:cd: 6f:28:ab:4d:f6:e8:1f:5e:68:7d:04:36:90:f4:8b:c3:dc:b3: 4f:78:1d:6f:84:cc:30:19:5f:af:4c:b0:46:a2:5b:f1:d0:86: f9:58:e6:11:d0:61:97:08:e4:97:cd:d8:29:f2:34:7c:2d:07: 8d:02:50:0b:ba:18:29:2c:9d:ce:bc:99:48:1d:46:e2:65:05: c1:4f:a1:e5:17:d0:8b:c7:89:8a:6e:3c:02:bb:d6:d8:3b:ed: 4e:8a:1e:1a:27:ae:48:f6:1b:9e:36:55:b3:d1:06:3b:ad:44: 96:5a:dc:d7:ca:cd:a4:6e:17:52:11:df:4a:36:06:9d:82:2a: 0c:9a:73:b4:69:cd:e4:03:7b:fe:b7:ed:7c:33:df:73:d6:85: 91:16:c4:e6:84:d9:0b:47:a6:81:67:9f:4f:54:84:d8:bc:dc: d6:41:c7:fe:4c:d5:b7:cf:8c:f6:7e:6d:5b:08:a7:78:f1:5b: 97:93:96:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjYwNDA0MTYyMDQwWhcNMjYwNDExMTYyMDQwWjAYMRYwFAYD VQQDEw02OWQxM2E1OS05MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg039Thii4seb8HQD3o6gpHk5twZeT2l3xCn4/ksvJU/9Tw+ZeKrUTYUCnX6k tn6en4lzN9266uDYqj/djMlXbimwO+6VDwaKiaAgoqAW87XDkgmlsGlbii9kCWsU MveMtmC1L1+CiZQCt78XzU3DB4/Nw8Y5ly6SuNBjMnRADlN80w+jQDDkBmnyMQIR zlkKxCtELLs7E5GC5J2s+7OLHXOTVDUsWGlYUTfPj18XXFQatGvtrMZIg01w6ucN oGkw1CXozJEFvDgDzUOj5dWd90P3l8adZI2UsUdJlLBRZyMTUpnL6thXfBS/YeRY huvX+X+4OSkxBMHmucVG5NvwNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaVsI/2 AqFL0qZNCmrBaFPqPL50MB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAef7yYRhSmL5HVRCmHHAGiJe7lCUC3lWoAvFWdPMu6sOrIyc7irH9VH/aHIFT LVzflzKp6E7qjEmYxuo98xmCbSLSdPdRhITNbyirTfboH15ofQQ2kPSLw9yzT3gd b4TMMBlfr0ywRqJb8dCG+VjmEdBhlwjkl83YKfI0fC0HjQJQC7oYKSydzryZSB1G 4mUFwU+h5RfQi8eJim48ArvW2DvtTooeGieuSPYbnjZVs9EGO61Ellrc18rNpG4X UhHfSjYGnYIqDJpztGnN5AN7/rftfDPfc9aFkRbE5oTZC0emgWefT1SE2Lzc1kHH /kzVt8+M9n5tWwinePFbl5OWXw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:53 2026 by rpki-client