$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: lRUOozjd5DSAuw0xjDiO++QJtVB73iFLjATtS53Ttpo= Subject key identifier: CF:AE:C9:F8:0A:44:EB:46:0B:5B:52:D9:FB:96:92:D0:7C:D2:5C:0E Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 02CE Signing time: Tue 03 Mar 2026 01:26:09 +0000 Manifest this update: Tue 03 Mar 2026 01:26:08 +0000 Manifest next update: Tue 10 Mar 2026 01:26:08 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: WSOWPER0DWYdTaHGe+sV+05JrE+KongqIutBQx1zr5Q=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: /GgOSNIsN8dBbb8Vje/7amrLJkz9iVVzHHHxG8WPW68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 01:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Mar 3 01:26:08 2026 GMT Not After : Mar 10 01:26:08 2026 GMT Subject: CN=69a638b1-d488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:3d:c0:b7:47:87:4f:15:76:52:25:75:d8: 34:15:f0:9a:e9:01:da:53:dc:46:51:1f:40:8d:96: 4b:3d:2e:9c:9c:ab:78:d8:53:70:1b:71:e0:33:1b: 5c:43:01:ed:db:e2:61:88:21:73:47:40:42:17:cf: 3c:fc:fd:82:6d:e2:17:6e:df:11:2b:73:db:99:bb: bb:ef:a4:3c:19:88:7f:d8:ea:8b:54:19:9b:5b:ee: e3:a2:04:e7:a1:e3:f5:de:85:5e:89:9e:23:c8:07: a9:b1:63:3b:47:e3:10:69:8f:92:0b:e6:76:df:66: 2a:d6:38:82:ec:40:50:8d:47:8e:bf:35:4c:21:0e: a0:37:13:37:bd:75:81:11:8b:cd:5d:4e:65:a6:6e: af:80:bf:48:1e:bc:86:24:6b:17:a0:d1:74:91:99: 8b:8b:01:5c:22:4b:72:a3:ca:ab:7e:29:1e:33:30: 91:ee:e7:00:a1:b9:65:c3:8b:67:fa:21:f0:2b:01: 07:64:40:08:d8:7d:19:67:a9:3a:a9:8d:b0:f2:76: af:37:41:7b:39:d5:9f:a5:67:16:84:79:df:76:e9: 05:86:bd:9d:98:ea:b9:66:95:0b:60:ad:f4:a5:97: 16:14:81:56:0c:7d:4c:23:2d:3f:ac:d8:39:40:ae: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AE:C9:F8:0A:44:EB:46:0B:5B:52:D9:FB:96:92:D0:7C:D2:5C:0E X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:ac:bb:06:73:cc:36:1a:8c:86:8b:23:6c:58:c5:ec:5d: 1d:16:e5:26:b5:1d:f0:23:48:21:94:29:55:45:c3:ce:3d:4f: ff:3d:11:ad:97:39:03:3f:44:85:df:bc:47:71:e9:8f:67:8c: 68:dd:8f:ec:ed:9d:26:08:c5:38:5c:be:e7:15:09:85:1d:93: ef:8a:2f:26:c8:28:06:23:d3:3e:84:0c:cf:b2:89:38:37:95: 72:69:80:e4:e9:31:2d:52:fb:8c:2e:40:f7:95:79:21:14:5f: bd:a2:90:c9:13:6d:d8:96:e9:38:ab:f5:40:31:89:36:ac:92: 55:50:1d:4e:0d:74:7a:3d:73:bf:93:7d:26:2c:85:63:64:7e: a5:c1:51:3e:ee:31:9b:35:cc:b1:f7:69:3f:3c:59:55:52:5e: ac:5b:0c:00:9d:73:54:31:61:38:22:6d:ea:95:0c:77:5d:56: 4c:09:06:0b:35:02:7c:4b:7a:a0:90:a0:5d:21:80:7b:0b:1c: 02:c0:39:62:14:ed:d2:a8:62:9b:1a:aa:e0:43:fb:2c:df:6b: 23:d8:88:4d:2e:3d:21:40:6b:3a:c2:96:d8:c6:a2:a3:b6:47: d4:63:ce:68:d9:9d:40:db:a4:6a:34:19:57:33:be:56:45:33: a7:d8:c1:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjYwMzAzMDEyNjA4WhcNMjYwMzEwMDEyNjA4WjAYMRYwFAYD VQQDEw02OWE2MzhiMS1kNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApks9wLdHh08VdlIlddg0FfCa6QHaU9xGUR9AjZZLPS6cnKt42FNwG3HgMxtc QwHt2+JhiCFzR0BCF888/P2CbeIXbt8RK3Pbmbu776Q8GYh/2OqLVBmbW+7jogTn oeP13oVeiZ4jyAepsWM7R+MQaY+SC+Z232Yq1jiC7EBQjUeOvzVMIQ6gNxM3vXWB EYvNXU5lpm6vgL9IHryGJGsXoNF0kZmLiwFcIktyo8qrfikeMzCR7ucAobllw4tn +iHwKwEHZEAI2H0ZZ6k6qY2w8navN0F7OdWfpWcWhHnfdukFhr2dmOq5ZpULYK30 pZcWFIFWDH1MIy0/rNg5QK71XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+uyfgK ROtGC1tS2fuWktB80lwOMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSqsuwZzzDYajIaLI2xYxexdHRblJrUd8CNIIZQpVUXDzj1P/z0RrZc5Az9E hd+8R3Hpj2eMaN2P7O2dJgjFOFy+5xUJhR2T74ovJsgoBiPTPoQMz7KJODeVcmmA 5OkxLVL7jC5A95V5IRRfvaKQyRNt2JbpOKv1QDGJNqySVVAdTg10ej1zv5N9JiyF Y2R+pcFRPu4xmzXMsfdpPzxZVVJerFsMAJ1zVDFhOCJt6pUMd11WTAkGCzUCfEt6 oJCgXSGAewscAsA5YhTt0qhimxqq4EP7LN9rI9iITS49IUBrOsKW2Maio7ZH1GPO aNmdQNukajQZVzO+VkUzp9jBQQ== -----END CERTIFICATE-----Generated at Wed Mar 4 08:41:28 2026 by rpki-client