$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: zXexylnikZhRbhi160wDXzT6eaIWJRNzTJ5wEY0xj9s= Subject key identifier: 1B:57:BD:6B:F2:7B:39:C4:FE:B4:BE:01:A4:E7:3A:E3:F8:59:A4:0E Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 01A6 Signing time: Sun 05 Apr 2026 03:38:25 +0000 Manifest this update: Sun 05 Apr 2026 03:38:25 +0000 Manifest next update: Sun 12 Apr 2026 03:38:25 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: rxt3SdHcE25xqm9aPHr0NCo575u2MTbnX52EI6/pMEQ=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Apr 5 03:38:25 2026 GMT Not After : Apr 12 03:38:25 2026 GMT Subject: CN=69d1d931-b79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:e5:aa:4a:d2:e5:3e:20:50:45:da:21:d4: 04:9f:29:e5:4d:e9:20:c5:6b:c9:9a:48:c2:ff:e2: e2:46:5c:64:2d:4d:76:99:40:16:e3:91:29:49:b6: 35:08:ee:d6:29:21:e8:26:c1:2c:22:71:5d:d2:c0: c1:80:e0:8f:90:a0:68:f8:e7:fd:7d:c9:cd:1f:4d: aa:18:d4:7d:0c:fa:0a:33:b4:97:f0:2a:50:a9:c8: 5e:be:db:e7:9b:d9:3e:6f:59:11:d6:c2:93:da:90: b0:55:3c:2e:a0:61:67:75:0b:32:33:c4:d1:e1:e3: 59:ed:3a:4c:0c:39:a2:97:62:f5:7a:cb:0c:95:da: 81:77:4c:23:6a:82:65:03:b5:5e:6a:31:08:a6:2f: dc:28:e7:f8:64:8b:f9:1d:cf:3b:48:0a:e3:ce:9f: 29:13:d3:72:ea:03:bc:6c:ea:1b:55:8b:cd:37:95: f8:65:32:cd:15:eb:19:bd:d0:b5:72:ec:c1:d8:f0: c7:74:3b:65:b2:32:d4:4d:c3:05:a1:e8:be:6f:13: f9:69:be:a8:2d:f8:ce:21:ad:57:fd:34:4c:fb:1d: d7:d3:00:20:fe:00:82:12:6c:8b:20:e7:37:ec:27: 67:15:53:dd:50:aa:4b:38:79:56:33:a9:6b:99:ea: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:BD:6B:F2:7B:39:C4:FE:B4:BE:01:A4:E7:3A:E3:F8:59:A4:0E X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a2:e1:5f:27:38:9f:53:a4:f3:a6:35:09:1f:ac:28:c2:52: d0:59:74:6a:78:51:74:ee:2d:a3:11:c0:36:9d:ac:05:df:e4: 0b:71:a5:b2:ba:9a:e1:6b:fc:b5:02:1a:0f:82:fc:64:34:c4: 95:02:d0:92:80:bd:26:bd:0a:1a:66:ca:29:62:1d:e6:ff:3d: 3b:7a:7d:41:e5:58:42:93:a1:31:35:1a:ec:ae:86:cc:c3:6e: 2a:74:12:c2:09:80:64:9d:f1:d4:d1:47:e8:3c:34:b3:df:d7: 37:de:5b:00:5a:08:c0:88:a6:44:ee:69:8c:de:fd:5b:2f:51: 8f:c1:72:fc:eb:3a:25:66:8c:fe:2d:82:6e:88:70:ad:7c:88: 5c:a2:b9:93:4b:3e:38:bb:c1:8e:7f:1e:9c:de:a6:f3:de:08: f2:45:fe:8a:0a:39:c0:fa:69:62:d5:eb:4d:a5:30:d8:04:b0: 9e:b5:b4:e9:c7:0e:be:11:d5:4b:24:70:a2:96:6a:e2:9c:1f: ef:39:27:cf:36:64:05:1d:de:c0:88:9c:93:b0:4b:8e:87:0f: 5d:27:3e:13:19:2c:b7:93:9d:71:13:e3:66:97:c1:99:39:9b: aa:5e:36:9e:4e:92:f0:91:05:9d:fc:20:e8:18:c0:1b:98:57: d0:65:b0:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjYwNDA1MDMzODI1WhcNMjYwNDEyMDMzODI1WjAYMRYwFAYD VQQDEw02OWQxZDkzMS1iNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4TlqkrS5T4gUEXaIdQEnynlTekgxWvJmkjC/+LiRlxkLU12mUAW45EpSbY1 CO7WKSHoJsEsInFd0sDBgOCPkKBo+Of9fcnNH02qGNR9DPoKM7SX8CpQqchevtvn m9k+b1kR1sKT2pCwVTwuoGFndQsyM8TR4eNZ7TpMDDmil2L1essMldqBd0wjaoJl A7VeajEIpi/cKOf4ZIv5Hc87SArjzp8pE9Ny6gO8bOobVYvNN5X4ZTLNFesZvdC1 cuzB2PDHdDtlsjLUTcMFoei+bxP5ab6oLfjOIa1X/TRM+x3X0wAg/gCCEmyLIOc3 7CdnFVPdUKpLOHlWM6lrmerghwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtXvWvy eznE/rS+AaTnOuP4WaQOMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ6LhXyc4n1Ok86Y1CR+sKMJS0Fl0anhRdO4toxHANp2sBd/kC3Glsrqa4Wv8 tQIaD4L8ZDTElQLQkoC9Jr0KGmbKKWId5v89O3p9QeVYQpOhMTUa7K6GzMNuKnQS wgmAZJ3x1NFH6Dw0s9/XN95bAFoIwIimRO5pjN79Wy9Rj8Fy/Os6JWaM/i2Cbohw rXyIXKK5k0s+OLvBjn8enN6m894I8kX+igo5wPppYtXrTaUw2ASwnrW06ccOvhHV SyRwopZq4pwf7zknzzZkBR3ewIick7BLjocPXSc+Exkst5OdcRPjZpfBmTmbql42 nk6S8JEFnfwg6BjAG5hX0GWwxQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:33 2026 by rpki-client