$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json) Hash identifier: BNXI94A4LKS4fxSKPGsSyuQ0pnONSpRTcGxjLbnhqD8= Subject key identifier: 73:5C:65:48:A6:74:FF:6E:C2:10:88:8E:11:1E:16:6C:A9:F8:AC:AB Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1 Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft Manifest number: 23 Signing time: Tue 21 Apr 2026 06:18:10 +0000 Manifest this update: Tue 21 Apr 2026 06:18:10 +0000 Manifest next update: Tue 28 Apr 2026 06:18:10 +0000 Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: +tLMh4oxZg62Lru+jjcpkhRLyojUrO5wR2rT++UX0/0=) 2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1 Validity Not Before: Apr 21 06:18:10 2026 GMT Not After : Apr 28 06:18:10 2026 GMT Subject: CN=69e716a2-6208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:35:56:ec:ee:2f:0a:00:cb:f8:eb:47:45: bf:27:fa:f0:3f:0b:aa:66:4a:39:2e:3c:41:6e:87: 55:4c:28:9a:c7:07:2d:17:af:2f:77:e8:d9:a0:b2: 15:e7:77:fc:75:32:e0:3c:ea:b3:12:61:00:2c:b5: 5b:f6:46:40:65:49:16:0f:90:39:58:d0:02:66:03: d6:aa:71:99:be:92:9a:6b:2d:95:e8:7f:2a:9d:20: 1a:c1:0e:c2:7d:e2:17:01:48:9b:d6:86:b8:b9:b5: 4e:4a:ee:f5:7e:71:7c:db:c3:5c:e8:e8:20:48:fb: 1b:29:bc:0b:11:fb:34:21:9a:10:bc:b5:f5:32:6b: d8:b3:08:85:4e:40:f9:d2:a8:8a:42:8d:1a:19:af: 45:5f:78:b0:30:c7:8d:4d:d4:55:2a:d3:d0:b1:2f: 6d:a4:0c:db:a4:7f:a0:2b:9f:a9:ae:8b:27:e0:75: a6:ec:8a:7b:2e:d7:c5:68:ba:be:f8:01:1a:9e:63: 6c:7b:07:22:68:18:0b:e8:8b:fb:f8:a5:1d:6b:8e: 26:99:8c:25:7b:7e:2b:7e:e8:72:f3:59:7c:c1:d3: 6e:02:57:0c:b2:d0:de:3d:39:24:85:40:20:eb:8b: 5d:51:b0:a8:f5:92:3c:59:3b:ac:b3:9d:8d:74:6d: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5C:65:48:A6:74:FF:6E:C2:10:88:8E:11:1E:16:6C:A9:F8:AC:AB X509v3 Authority Key Identifier: keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ef:c0:23:c5:84:31:a8:86:0b:19:19:eb:a7:f7:9e:16:7d: ad:25:04:5f:ef:71:ad:f7:12:e9:50:d4:9c:6a:33:5e:7d:06: ef:eb:87:05:bd:56:6a:08:02:5e:a8:97:f1:77:4c:68:7e:6d: 8b:e7:6c:3e:4e:38:80:66:d9:c1:09:1d:cf:1d:8f:90:67:b6: f0:d9:7b:11:ec:9c:21:6d:1c:dc:a8:b0:a0:c4:ab:fb:2a:f9: 29:df:06:42:fc:44:20:ee:6b:b4:60:92:ed:a5:a0:00:e8:9e: 35:7a:3d:3b:41:e5:f2:86:57:1b:56:b6:1c:da:af:73:84:a5: b1:d7:4f:6e:73:0b:0b:bd:56:a2:f0:6a:7b:97:a9:49:f8:86: 18:c3:b1:d9:81:1a:f6:3c:2a:20:00:49:97:3a:07:e5:49:26: e4:d5:2f:80:1c:67:82:28:90:76:77:5e:c5:92:33:81:d9:9d: de:3a:49:c8:e4:8c:79:ad:84:4b:3e:59:34:45:d1:3b:02:08: c8:95:ef:a1:d9:54:5e:17:ba:03:d7:5b:69:e9:c6:2a:20:24: df:76:d6:73:93:92:cf:02:87:3e:ce:e3:a9:8b:5e:d2:41:b8: bc:64:63:2f:99:5b:c4:05:7d:1d:5e:17:1c:bc:96:fe:f2:4f: 57:80:b4:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoMDZGQ0NGQjU2MkRCMjJDNzlERjA4NjMyMjQxQkYxRkFF NjdBRTdDMTAeFw0yNjA0MjEwNjE4MTBaFw0yNjA0MjgwNjE4MTBaMBgxFjAUBgNV BAMTDTY5ZTcxNmEyLTYyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPFjVW7O4vCgDL+OtHRb8n+vA/C6pmSjkuPEFuh1VMKJrHBy0Xry936NmgshXn d/x1MuA86rMSYQAstVv2RkBlSRYPkDlY0AJmA9aqcZm+kpprLZXofyqdIBrBDsJ9 4hcBSJvWhri5tU5K7vV+cXzbw1zo6CBI+xspvAsR+zQhmhC8tfUya9izCIVOQPnS qIpCjRoZr0VfeLAwx41N1FUq09CxL22kDNukf6Arn6muiyfgdabsinsu18Vour74 ARqeY2x7ByJoGAvoi/v4pR1rjiaZjCV7fit+6HLzWXzB024CVwyy0N49OSSFQCDr i11RsKj1kjxZO6yznY10bbarAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc1xlSKZ0 /27CEIiOER4WbKn4rKswHwYDVR0jBBgwFoAUBvzPtWLbIsed8IYyJBvx+uZ658Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyLzIyREJGRUZBMTJB MzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNlZDhJWXlKQnZ4LXVaNjU4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQnZ6UHRXTGJJc2VkOElZeUpCdngtdVo2NThFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyLzIyREJGRUZBMTJBMzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNl ZDhJWXlKQnZ4LXVaNjU4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAL78AjxYQxqIYLGRnrp/eeFn2tJQRf73Gt9xLpUNScajNefQbv64cFvVZqCAJe qJfxd0xofm2L52w+TjiAZtnBCR3PHY+QZ7bw2XsR7JwhbRzcqLCgxKv7Kvkp3wZC /EQg7mu0YJLtpaAA6J41ej07QeXyhlcbVrYc2q9zhKWx109ucwsLvVai8Gp7l6lJ +IYYw7HZgRr2PCogAEmXOgflSSbk1S+AHGeCKJB2d17FkjOB2Z3eOknI5Ix5rYRL Plk0RdE7AgjIle+h2VReF7oD11tp6cYqICTfdtZzk5LPAoc+zuOpi17SQbi8ZGMv mVvEBX0dXhccvJb+8k9XgLQG -----END CERTIFICATE-----Generated at Tue Apr 21 21:34:25 2026 by rpki-client