$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: O3LTUyCwEjFXOG5aj9Ta2WI0et4QTY4MKjXEiw//fLo= Subject key identifier: E2:81:51:C2:84:FF:F7:E3:68:9D:9E:F9:29:F5:65:EB:DF:E0:9F:2B Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1D4A Signing time: Sat 04 Apr 2026 16:06:16 +0000 Manifest this update: Sat 04 Apr 2026 16:06:15 +0000 Manifest next update: Sat 11 Apr 2026 16:06:15 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: 5TfYPzBEIPG0haPwOZ2fHG6g2hxJKYxLgJHEBe810G8=) 2: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: APtY/87HFPVkFCNmPABVaetDfxhkY/ZtcBEA9fzgnYg=) 3: 08F61730538311F0860B155FC4F9AE02.roa (hash: kk2jLSlA4FrkU7gdAHQq3agexNxMubpJWMW/MfDoZiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Apr 4 16:06:15 2026 GMT Not After : Apr 11 16:06:15 2026 GMT Subject: CN=69d136f7-8c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:cc:e9:82:b2:3f:77:8a:4d:4f:ae:9a:8d: 37:13:66:16:e5:ac:24:04:7d:d7:f7:bd:de:60:46: 34:92:8a:fe:36:5e:b9:19:0b:e6:6c:e1:70:a8:ba: b4:c4:73:1a:1e:ae:a6:2e:1b:f1:0a:c0:43:1e:cc: 8c:34:b9:2e:b2:e1:f5:18:0a:7d:73:e1:19:0f:cb: 6c:e9:75:c3:50:25:54:3f:3c:96:a0:3a:dd:b3:64: 71:e7:35:07:6a:4d:39:04:dc:49:4d:44:d3:ac:0e: 44:f8:29:1e:4a:45:2a:72:d8:66:2f:61:a3:8b:0a: e6:f2:8d:99:e0:10:3d:73:4d:0b:f8:fd:fa:1f:35: b6:a5:bc:08:23:5a:c1:f1:a8:de:dc:42:af:67:51: 1e:62:8e:36:d4:a3:d2:d1:00:04:d8:a1:e3:d2:ad: c2:d9:4b:5e:30:0d:50:aa:24:7c:b9:82:98:96:49: e2:b5:a2:29:d0:8a:ab:cd:30:f5:3f:8d:d9:3a:ef: 88:58:85:b1:ce:d7:c9:e4:ef:15:9e:5c:4f:83:eb: bf:9e:6a:55:e3:d1:de:ce:12:ca:7e:c5:77:ff:ab: 9c:fd:46:15:28:4d:05:a4:dd:b1:50:b6:6c:69:ff: d5:29:60:db:38:b4:22:1f:6a:71:83:24:dc:dd:d8: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:51:C2:84:FF:F7:E3:68:9D:9E:F9:29:F5:65:EB:DF:E0:9F:2B X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:19:67:c2:de:cb:59:05:5c:bc:64:11:66:25:ae:da:3d:1c: 9a:23:97:5b:c0:5d:74:aa:50:31:a5:5d:68:75:54:31:e3:0a: 59:bf:ff:a6:bb:04:93:7f:e3:3f:61:61:5e:be:34:89:12:24: 34:58:e7:94:cf:5e:1d:5c:5f:8f:f2:68:1d:b9:14:47:2e:63: 11:77:87:f7:9a:99:4f:d3:40:f8:a1:4d:b9:44:a8:be:2a:f3: e2:12:91:f8:b6:55:15:d7:b6:4f:97:e2:e1:09:17:8f:57:9d: 1f:e0:b2:6d:4f:8a:7a:da:89:45:3a:8a:91:d0:e4:5d:bb:bf: a6:58:7c:43:7c:c2:cc:75:10:6c:79:8b:d9:d7:80:be:af:f4: e1:8d:fc:88:7d:47:1a:b5:2e:ad:5a:af:2b:76:6f:7f:e4:0d: 87:14:eb:3a:be:8f:d6:7c:97:7e:53:a8:27:83:19:77:5e:91: 1d:b3:34:4d:72:9e:8e:2d:34:d8:9e:15:31:2f:fc:da:1a:a0: c5:31:e7:e4:d2:4a:d1:0f:46:77:7c:5f:b6:ba:40:9d:18:3f: 37:c8:f1:b5:9b:92:9e:8f:71:2f:03:29:62:13:14:25:96:e1: 37:50:1f:8c:ee:70:5a:30:36:99:0d:40:f8:58:7a:1c:0b:29: 22:42:90:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4MDVGMTJDMzc0 N0YzNEFGODMwHhcNMjYwNDA0MTYwNjE1WhcNMjYwNDExMTYwNjE1WjAYMRYwFAYD VQQDEw02OWQxMzZmNy04YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4TM6YKyP3eKTU+umo03E2YW5awkBH3X973eYEY0kor+Nl65GQvmbOFwqLq0 xHMaHq6mLhvxCsBDHsyMNLkusuH1GAp9c+EZD8ts6XXDUCVUPzyWoDrds2Rx5zUH ak05BNxJTUTTrA5E+CkeSkUqcthmL2Gjiwrm8o2Z4BA9c00L+P36HzW2pbwII1rB 8aje3EKvZ1EeYo421KPS0QAE2KHj0q3C2UteMA1QqiR8uYKYlknitaIp0IqrzTD1 P43ZOu+IWIWxztfJ5O8VnlxPg+u/nmpV49HezhLKfsV3/6uc/UYVKE0FpN2xULZs af/VKWDbOLQiH2pxgyTc3dh01wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKBUcKE //fjaJ2e+Sn1Zevf4J8rMB8GA1UdIwQYMBaAFGxtR7ERTy1YGoISgF8Sw3R/NK+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExWZ2FnaEtBWHhMRGRIODBy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExW Z2FnaEtBWHhMRGRIODByNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAphlnwt7LWQVcvGQRZiWu2j0cmiOXW8BddKpQMaVdaHVUMeMKWb//prsEk3/j P2FhXr40iRIkNFjnlM9eHVxfj/JoHbkURy5jEXeH95qZT9NA+KFNuUSovirz4hKR +LZVFde2T5fi4QkXj1edH+CybU+KetqJRTqKkdDkXbu/plh8Q3zCzHUQbHmL2deA vq/04Y38iH1HGrUurVqvK3Zvf+QNhxTrOr6P1nyXflOoJ4MZd16RHbM0TXKeji00 2J4VMS/82hqgxTHn5NJK0Q9Gd3xftrpAnRg/N8jxtZuSno9xLwMpYhMUJZbhN1Af jO5wWjA2mQ1A+Fh6HAspIkKQKA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:12:11 2026 by rpki-client