$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: hIw1r3I77r8yA8mMApbHlsXgBSmJltBPjgqCq/d5ZO8= Subject key identifier: 20:8A:00:86:49:3A:B9:47:7F:98:83:60:D2:09:86:3B:CE:40:57:72 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D15 Signing time: Sat 28 Mar 2026 18:12:08 +0000 Manifest this update: Sat 28 Mar 2026 18:12:08 +0000 Manifest next update: Sat 04 Apr 2026 18:12:08 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: jZ+KBU61oXkrTT8Q5E+40v2q7eaHxBTORK20f7GF4Ss=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: jaXolcx4AbEHbGm0tsO9DjPQ+oN9ZYfJ9/ifRsFMGYg=) 3: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: /Tvplkmm6qxVmlC51qbOfmRirpoi54XXMcLh/gPSqV0=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: N/PTmxsd2qWDIg6nnrJkOUd5Pv8F/h9BMSmjENT3ckM=) 5: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: gjazV/iVCkpQTSN3FdEKb8gzMy16E4WeeBKJNLMtc/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 18:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Mar 28 18:12:08 2026 GMT Not After : Apr 4 18:12:08 2026 GMT Subject: CN=69c819f8-6493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:41:e5:9d:99:f0:de:11:22:18:98:b8:a1: 12:48:1b:c7:aa:a1:b6:e1:e1:43:87:c0:1d:09:09: 87:2f:7d:69:5d:50:e8:94:ed:f0:f5:ae:dd:15:d9: 6e:e0:ba:76:67:59:d8:23:ef:20:ba:fb:fd:1e:c7: f6:1f:e2:49:03:89:cb:39:ae:df:83:eb:52:2e:95: d0:18:cf:b5:43:08:f4:ee:4d:5f:09:e3:23:88:79: f7:7a:d7:d0:99:db:dd:a2:ad:01:1c:ce:7d:3f:5d: da:85:bb:68:00:97:33:ce:14:16:71:e6:75:b1:69: 48:89:e4:11:66:8b:76:ed:7d:d0:20:da:d3:c6:12: 74:bd:4b:85:b1:b4:c8:ec:76:fc:43:a7:1a:11:fe: e0:ca:c9:66:25:b0:db:89:a0:4a:cc:1e:16:eb:5a: 5b:f4:ea:89:b2:01:11:62:35:f6:6e:c2:0e:f1:9b: c2:90:4d:0c:e4:b8:0f:e3:6d:1f:d6:7c:6f:77:15: 88:69:c4:70:cd:f2:ab:fc:b9:95:ea:7c:71:00:9a: fc:0f:0e:f8:5c:0e:2d:7d:f3:fb:ad:05:7e:2c:25: 40:65:54:3f:05:8d:54:e1:61:55:84:04:00:52:6e: 77:eb:4b:ae:6c:3b:97:8e:c9:60:ae:d2:6b:b0:0e: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:00:86:49:3A:B9:47:7F:98:83:60:D2:09:86:3B:CE:40:57:72 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1b:1c:05:53:26:7b:a4:fa:15:0a:38:d7:9a:a6:6d:49:c9: eb:2e:a3:e0:0b:ad:51:85:bc:a0:7b:48:2d:35:49:14:f9:85: 1b:20:26:29:33:2e:c0:12:2d:3c:35:5f:da:10:6e:28:8e:9c: ad:72:52:7a:b4:64:71:29:58:d5:47:9e:39:63:b6:47:cf:f8: 18:41:39:44:e9:9f:19:12:f0:b0:55:d1:c7:bf:4b:31:1e:91: ef:f0:31:b3:1b:96:a6:c4:b7:eb:b6:08:0f:f4:67:ce:87:b0: 81:30:1e:39:01:cf:5c:f2:e3:7c:31:58:50:ec:b9:12:ca:05: 5f:e5:f0:a0:30:e0:be:b1:46:93:cd:98:8d:98:18:b2:8e:8b: 38:b0:9f:80:c4:a0:cd:fb:19:c7:f1:76:0a:c2:33:59:3e:c9: 2c:ff:e9:1a:46:1e:cd:e3:1c:b3:6c:be:b6:a7:9a:58:b7:85: a4:83:ca:6b:07:5b:c5:dd:62:2c:4e:ef:fe:d9:eb:c6:7a:50: 31:af:84:59:9f:6a:c6:a2:23:38:0b:c1:20:a6:63:92:46:de: 94:42:be:31:d7:76:c6:09:3b:1a:00:e6:b6:f3:22:0e:b2:0b: f3:df:28:eb:bd:c9:4c:74:fd:0a:86:1b:73:50:24:35:15:8d: e0:07:dc:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwMzI4MTgxMjA4WhcNMjYwNDA0MTgxMjA4WjAYMRYwFAYD VQQDEw02OWM4MTlmOC02NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzNB5Z2Z8N4RIhiYuKESSBvHqqG24eFDh8AdCQmHL31pXVDolO3w9a7dFdlu 4Lp2Z1nYI+8guvv9Hsf2H+JJA4nLOa7fg+tSLpXQGM+1Qwj07k1fCeMjiHn3etfQ mdvdoq0BHM59P13ahbtoAJczzhQWceZ1sWlIieQRZot27X3QINrTxhJ0vUuFsbTI 7Hb8Q6caEf7gyslmJbDbiaBKzB4W61pb9OqJsgERYjX2bsIO8ZvCkE0M5LgP420f 1nxvdxWIacRwzfKr/LmV6nxxAJr8Dw74XA4tffP7rQV+LCVAZVQ/BY1U4WFVhAQA Um5360uubDuXjslgrtJrsA4a9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCKAIZJ OrlHf5iDYNIJhjvOQFdyMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxscBVMme6T6FQo415qmbUnJ6y6j4AutUYW8oHtILTVJFPmFGyAmKTMuwBIt PDVf2hBuKI6crXJSerRkcSlY1UeeOWO2R8/4GEE5ROmfGRLwsFXRx79LMR6R7/Ax sxuWpsS367YID/RnzoewgTAeOQHPXPLjfDFYUOy5EsoFX+XwoDDgvrFGk82YjZgY so6LOLCfgMSgzfsZx/F2CsIzWT7JLP/pGkYezeMcs2y+tqeaWLeFpIPKawdbxd1i LE7v/tnrxnpQMa+EWZ9qxqIjOAvBIKZjkkbelEK+Mdd2xgk7GgDmtvMiDrIL898o 673JTHT9CoYbc1AkNRWN4AfcFQ== -----END CERTIFICATE-----Generated at Sun Mar 29 17:16:59 2026 by rpki-client