$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json) Hash identifier: mH1bOrPPFqHAsEtPaYFGfyyOoXLHjw61YW5BE30mxIs= Subject key identifier: B2:5B:5E:5C:8E:62:48:17:CF:E8:71:A9:63:AE:93:80:AC:B3:84:59 Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft Manifest number: 0125 Signing time: Wed 29 Apr 2026 06:19:41 +0000 Manifest this update: Wed 29 Apr 2026 06:19:41 +0000 Manifest next update: Wed 06 May 2026 06:19:41 +0000 Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: /wKhRC1t9n7o5w2go+6Z9cj3pGfYCgf6/kDEiacmiT0=) 2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 06:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Validity Not Before: Apr 29 06:19:41 2026 GMT Not After : May 6 06:19:41 2026 GMT Subject: CN=69f1a2fd-bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:09:1e:2d:20:b4:6d:22:ba:e0:8d:10:11: 0a:9d:e7:49:7f:62:72:26:7a:56:43:f4:c5:a1:18: 29:18:fd:19:e8:ad:f9:13:92:23:01:63:3f:b0:33: 93:c7:e8:b8:d0:21:fb:ba:71:55:f1:9c:0a:30:cb: bb:a5:32:76:21:16:1d:f0:ff:e7:16:70:c9:fc:b6: 96:37:60:3d:b3:2b:2c:6f:94:64:13:97:7f:bf:9c: 8a:c4:27:5b:26:61:2c:0a:9a:18:a6:93:89:01:d7: 4f:db:8a:2d:5b:ad:6a:fa:5f:9a:22:76:ef:9a:53: 73:65:54:44:e5:63:25:cc:32:94:b1:1e:cd:2e:e3: 05:dc:02:31:19:61:85:43:a6:51:fb:e1:41:2f:f9: e4:ed:cc:1e:d9:d2:30:22:56:15:7c:32:e5:74:c6: 91:e7:61:7e:58:09:6a:52:5b:07:a6:b7:3c:01:e8: a5:71:cd:16:19:78:d5:d4:8b:f3:2f:3d:98:35:c8: eb:f6:81:52:3b:09:01:b6:c1:7d:61:24:2b:41:14: 15:1f:a3:e6:75:e1:2d:60:d1:24:ab:cc:37:b3:d3: e9:68:47:7d:4b:09:40:75:68:6a:a8:ab:77:2d:6f: 7d:b1:50:f8:f4:e5:ef:7a:0a:50:1a:30:96:19:61: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:5E:5C:8E:62:48:17:CF:E8:71:A9:63:AE:93:80:AC:B3:84:59 X509v3 Authority Key Identifier: keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:17:df:90:89:dc:ec:b6:1a:24:80:e0:88:08:8c:d8:71:cc: 9c:99:e4:df:3b:a8:0b:35:9d:94:d5:42:7e:e5:92:83:94:20: e0:86:49:3d:0b:aa:77:5a:b4:c9:ac:a1:a6:47:e1:84:11:53: 9b:a3:73:a9:62:df:4b:ef:a7:88:36:1c:01:76:0a:26:bd:0f: f0:eb:ef:74:ad:78:52:ea:da:89:84:98:56:84:3d:65:b1:a9: a8:a5:14:48:5a:23:bd:9d:f7:93:1a:d4:df:da:77:9d:bf:68: 3f:42:63:84:52:16:f2:10:64:95:d2:6b:1b:53:3c:b0:ff:95: 4c:0a:0d:a9:b0:15:01:16:78:ab:ca:30:63:0c:46:e7:ec:ab: 60:18:5d:b4:7d:43:90:6f:c1:b9:59:31:e5:9c:cd:9e:fa:8b: fa:17:65:be:c8:1f:c2:34:e6:2e:56:cc:39:4b:be:d1:17:69: e8:1b:78:4b:2e:bb:4c:6d:9a:0f:c1:d6:9f:12:bf:7a:07:bc: 47:f3:ca:0a:2b:c2:d5:57:c8:56:0b:64:6f:0d:8c:22:94:31: 4f:fe:bc:38:9e:64:4f:92:80:f2:e2:42:67:9e:4a:46:92:b4: b7:1c:9b:ab:04:9c:de:70:e7:69:f0:03:a7:40:e9:b0:62:14: 11:71:83:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDZDMTk0Njk3ODE2RjlCMTMwQkE1M0NGNEJFRTY3NjAx NTk0RThDQjEwHhcNMjYwNDI5MDYxOTQxWhcNMjYwNTA2MDYxOTQxWjAYMRYwFAYD VQQDEw02OWYxYTJmZC1iZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgQJHi0gtG0iuuCNEBEKnedJf2JyJnpWQ/TFoRgpGP0Z6K35E5IjAWM/sDOT x+i40CH7unFV8ZwKMMu7pTJ2IRYd8P/nFnDJ/LaWN2A9syssb5RkE5d/v5yKxCdb JmEsCpoYppOJAddP24otW61q+l+aInbvmlNzZVRE5WMlzDKUsR7NLuMF3AIxGWGF Q6ZR++FBL/nk7cwe2dIwIlYVfDLldMaR52F+WAlqUlsHprc8Aeilcc0WGXjV1Ivz Lz2YNcjr9oFSOwkBtsF9YSQrQRQVH6PmdeEtYNEkq8w3s9PpaEd9SwlAdWhqqKt3 LW99sVD49OXvegpQGjCWGWELawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJbXlyO YkgXz+hxqWOuk4Css4RZMB8GA1UdIwQYMBaAFGwZRpeBb5sTC6U89L7mdgFZToyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wOUMwRDM2NjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14TUxwVHowdnVaMkFWbE9q TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wOUMwRDM2NjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14 TUxwVHowdnVaMkFWbE9qTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixffkInc7LYaJIDgiAiM2HHMnJnk3zuoCzWdlNVCfuWSg5Qg4IZJPQuqd1q0 yayhpkfhhBFTm6NzqWLfS++niDYcAXYKJr0P8OvvdK14UuraiYSYVoQ9ZbGpqKUU SFojvZ33kxrU39p3nb9oP0JjhFIW8hBkldJrG1M8sP+VTAoNqbAVARZ4q8owYwxG 5+yrYBhdtH1DkG/BuVkx5ZzNnvqL+hdlvsgfwjTmLlbMOUu+0Rdp6Bt4Sy67TG2a D8HWnxK/ege8R/PKCivC1VfIVgtkbw2MIpQxT/68OJ5kT5KA8uJCZ55KRpK0txyb qwSc3nDnafADp0DpsGIUEXGDPg== -----END CERTIFICATE-----Generated at Thu Apr 30 16:19:33 2026 by rpki-client