$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: hEs1CHIhO+DYQFAl2ldE2lPt7s0c70T9he1IYAvRQA0= Subject key identifier: 34:7C:0B:84:72:5A:BC:A7:B1:FE:EC:E0:7F:34:F5:1F:7B:3B:76:D4 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 0534 Signing time: Sat 28 Mar 2026 23:29:43 +0000 Manifest this update: Sat 28 Mar 2026 23:29:43 +0000 Manifest next update: Sat 04 Apr 2026 23:29:43 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: Ebtuj0xNCZEhJnD65jx2LqfH/i1RKrl1e9qGcDNcSr0=) 2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=) 4: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 23:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Mar 28 23:29:43 2026 GMT Not After : Apr 4 23:29:43 2026 GMT Subject: CN=69c86467-07db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:6c:0b:06:bf:5c:75:94:91:a3:9c:1c:f1: 21:b5:6e:9b:37:90:7c:0d:5f:4e:3d:8e:67:a4:39: 12:2d:ec:17:e1:eb:fd:51:61:0f:16:8d:ec:43:ea: 57:a1:b9:f2:ec:64:c7:6e:11:93:f0:e5:4d:1d:6a: 69:94:ab:4d:66:16:8d:7c:7a:09:c0:e1:c5:ea:6d: 97:38:23:0e:f8:a5:71:b0:c2:9f:f7:b3:dd:f2:e2: 21:fe:85:53:98:e2:86:96:fe:dc:55:3f:75:2f:27: 2b:63:c4:2f:8e:30:ee:ff:91:25:96:76:43:e3:78: 0d:42:d9:a6:1d:1b:75:aa:f3:ed:2b:28:e2:0b:a9: ea:e4:19:f0:a5:de:24:28:f5:42:87:e1:04:75:c7: 97:eb:04:74:ca:41:c7:60:86:55:5f:37:28:14:cf: cd:95:0f:4a:a1:4a:08:25:74:ae:c4:cc:10:eb:25: 94:5b:28:b6:32:2c:63:51:06:ad:f1:48:6c:93:f9: ae:25:3e:49:ae:33:da:ee:51:d1:47:4c:60:34:b3: 7c:42:82:45:17:c6:30:ed:82:ba:ca:1c:e6:64:b8: 26:6f:77:41:60:50:f0:ee:2e:09:a8:7f:73:76:18: 7b:7e:6e:0f:ee:a1:7b:b5:f8:b6:57:2e:e6:fb:8f: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:0B:84:72:5A:BC:A7:B1:FE:EC:E0:7F:34:F5:1F:7B:3B:76:D4 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:72:a3:93:86:52:aa:31:32:7d:8a:6b:84:75:70:de:78:41: 5b:87:58:61:db:11:5a:ca:cf:f8:f5:65:88:ca:b6:ee:6e:bb: 7c:1f:7f:53:be:b2:04:1b:19:0a:d6:f9:ca:32:37:08:a4:5b: b0:cf:76:f6:df:f8:e2:09:13:5a:13:31:36:82:be:2f:53:75: 62:3f:3e:05:53:09:e2:bd:b5:92:1f:8b:08:e2:03:1b:74:c3: 2e:6a:00:2a:20:48:40:f5:22:0c:f5:a5:34:52:e5:ee:b3:50: 56:28:b9:a8:a8:ea:81:05:08:96:90:ec:6b:08:5d:77:6d:d9: 34:52:c8:da:c9:1d:43:3a:e9:51:23:bf:99:23:64:43:c9:cb: 37:20:65:58:54:1c:1c:88:f1:d9:e5:91:d1:67:a9:6f:77:e0: c6:5d:f4:80:6f:63:36:f8:a4:65:56:13:d3:0e:12:c5:e1:ed: 2e:20:f3:f5:26:ce:1d:e2:bd:16:eb:01:38:7a:35:89:67:c2: 2f:5b:b3:8f:5b:0c:6a:b8:f3:34:72:fe:74:5b:0f:0b:6f:9d: af:6a:a4:93:5d:94:16:36:2a:9f:95:89:9c:e3:78:de:0c:63: c8:33:27:f3:27:41:db:17:39:cc:61:37:2e:ef:de:d6:56:73: 2a:a0:ff:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjYwMzI4MjMyOTQzWhcNMjYwNDA0MjMyOTQzWjAYMRYwFAYD VQQDEw02OWM4NjQ2Ny0wN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzORsCwa/XHWUkaOcHPEhtW6bN5B8DV9OPY5npDkSLewX4ev9UWEPFo3sQ+pX obny7GTHbhGT8OVNHWpplKtNZhaNfHoJwOHF6m2XOCMO+KVxsMKf97Pd8uIh/oVT mOKGlv7cVT91LycrY8QvjjDu/5EllnZD43gNQtmmHRt1qvPtKyjiC6nq5Bnwpd4k KPVCh+EEdceX6wR0ykHHYIZVXzcoFM/NlQ9KoUoIJXSuxMwQ6yWUWyi2MixjUQat 8Uhsk/muJT5JrjPa7lHRR0xgNLN8QoJFF8Yw7YK6yhzmZLgmb3dBYFDw7i4JqH9z dhh7fm4P7qF7tfi2Vy7m+49vqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDR8C4Ry Wrynsf7s4H809R97O3bUMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjXKjk4ZSqjEyfYprhHVw3nhBW4dYYdsRWsrP+PVliMq27m67fB9/U76yBBsZ Ctb5yjI3CKRbsM929t/44gkTWhMxNoK+L1N1Yj8+BVMJ4r21kh+LCOIDG3TDLmoA KiBIQPUiDPWlNFLl7rNQVii5qKjqgQUIlpDsawhdd23ZNFLI2skdQzrpUSO/mSNk Q8nLNyBlWFQcHIjx2eWR0Wepb3fgxl30gG9jNvikZVYT0w4SxeHtLiDz9SbOHeK9 FusBOHo1iWfCL1uzj1sMarjzNHL+dFsPC2+dr2qkk12UFjYqn5WJnON43gxjyDMn 8ydB2xc5zGE3Lu/e1lZzKqD/nw== -----END CERTIFICATE-----Generated at Mon Mar 30 17:26:30 2026 by rpki-client