$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: +dKEHE1bLLqGfhNRy6xl7YUZl7AuD3cCpjoNNVOB7qs= Subject key identifier: 8A:2D:7C:27:B4:BE:7B:A1:7F:29:C1:08:36:14:E9:70:53:16:B3:F7 Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0DFB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0DCD Signing time: Fri 20 Mar 2026 17:41:55 +0000 Manifest this update: Fri 20 Mar 2026 17:41:54 +0000 Manifest next update: Fri 27 Mar 2026 17:41:54 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: fORVjr4tIbnUBDiiGk+lvI1D5oasGSFMTZo7fZGICJY=) 2: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=) 3: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=) 4: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=) 5: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3579 (0xdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Mar 20 17:41:54 2026 GMT Not After : Mar 27 17:41:54 2026 GMT Subject: CN=69bd86e3-cb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:92:36:4c:71:28:b7:af:e3:6c:0e:99:2e: 7e:e6:e4:3f:fc:ea:3e:17:7e:d6:3c:9f:1f:d8:c4: 20:6a:69:b8:18:6e:c9:9b:7c:86:71:54:37:05:ef: 59:ef:ba:99:3a:c3:49:7f:f4:05:6a:84:59:ee:1e: 31:03:5c:a1:c9:66:dd:fa:4c:36:76:ae:5f:d7:2f: 13:ba:8a:27:34:21:aa:9c:67:26:d2:a9:c4:09:0e: b8:56:26:47:ff:e0:d9:fd:7a:4d:90:68:6e:3a:ca: 1d:7c:a4:2a:30:09:f7:bd:01:e8:dd:09:65:ac:c3: 41:78:d3:d7:11:33:9d:c4:bd:40:17:83:cf:af:7a: 7c:a9:7b:00:e2:c6:90:8c:c4:10:2e:50:22:d7:d6: 8a:c4:e9:93:15:3e:03:00:a8:92:2f:03:c5:b0:fd: 93:01:ea:c3:f1:52:76:69:11:cd:2e:d7:2c:bb:48: 09:fb:73:78:68:36:44:02:87:ae:b8:6c:86:69:5e: 8a:99:c9:1c:c9:e2:3a:67:75:57:75:f1:9a:01:91: fd:af:b1:0b:c6:d1:03:5b:a0:8a:21:b2:4b:d6:f3: c8:93:51:eb:99:8d:09:4e:3f:08:56:c0:df:22:5e: 59:87:1c:80:c9:17:6e:63:48:e1:a2:29:b5:04:ba: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:7C:27:B4:BE:7B:A1:7F:29:C1:08:36:14:E9:70:53:16:B3:F7 X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:05:db:4e:29:21:8e:2c:b9:5d:32:76:5e:46:43:2b:89:94: 6a:14:8e:7d:b1:b3:12:7a:2f:57:b9:0d:67:0e:27:4a:90:69: 57:95:b6:4d:73:b9:7f:e8:fc:40:ee:af:69:c8:f9:ad:7e:52: 97:48:70:cc:44:04:84:fd:43:85:de:17:aa:24:06:96:59:8b: 72:ec:6b:4f:d8:93:e3:10:7f:0c:3c:fd:af:5f:d8:87:4d:60: e1:67:57:72:6b:35:b3:cb:59:44:ac:64:83:cc:b8:77:46:c6: 02:95:b4:ab:51:d1:f7:98:14:fc:5d:72:b4:9a:a0:93:1d:27: db:1c:bf:5e:bb:e7:63:ab:86:4c:fa:d2:85:44:d9:a4:e0:88: bb:13:82:ff:65:4e:9f:fb:14:af:ef:25:0f:85:e8:cd:af:5f: 06:0b:73:c6:45:64:b8:07:40:21:a2:ff:ae:d0:7e:48:bf:68: 6d:18:d9:07:a3:2f:13:53:ff:40:8c:43:19:9c:8a:61:c6:12: 2d:60:4a:65:53:16:57:a4:10:38:44:86:d0:b3:c7:38:0e:f6: f6:39:35:f9:63:8a:56:1d:a7:39:51:05:bd:7f:3e:27:4e:93: 13:95:3d:50:50:9a:ae:96:39:e4:4a:70:43:c6:b2:d6:13:b0: d9:72:80:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjYwMzIwMTc0MTU0WhcNMjYwMzI3MTc0MTU0WjAYMRYwFAYD VQQDEw02OWJkODZlMy1jYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdqSNkxxKLev42wOmS5+5uQ//Oo+F37WPJ8f2MQgamm4GG7Jm3yGcVQ3Be9Z 77qZOsNJf/QFaoRZ7h4xA1yhyWbd+kw2dq5f1y8TuoonNCGqnGcm0qnECQ64ViZH /+DZ/XpNkGhuOsodfKQqMAn3vQHo3QllrMNBeNPXETOdxL1AF4PPr3p8qXsA4saQ jMQQLlAi19aKxOmTFT4DAKiSLwPFsP2TAerD8VJ2aRHNLtcsu0gJ+3N4aDZEAoeu uGyGaV6KmckcyeI6Z3VXdfGaAZH9r7ELxtEDW6CKIbJL1vPIk1HrmY0JTj8IVsDf Il5ZhxyAyRduY0jhoim1BLo8mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIotfCe0 vnuhfynBCDYU6XBTFrP3MB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArgXbTikhjiy5XTJ2XkZDK4mUahSOfbGzEnovV7kNZw4nSpBpV5W2TXO5f+j8 QO6vacj5rX5Sl0hwzEQEhP1Dhd4XqiQGllmLcuxrT9iT4xB/DDz9r1/Yh01g4WdX cms1s8tZRKxkg8y4d0bGApW0q1HR95gU/F1ytJqgkx0n2xy/XrvnY6uGTPrShUTZ pOCIuxOC/2VOn/sUr+8lD4Xoza9fBgtzxkVkuAdAIaL/rtB+SL9obRjZB6MvE1P/ QIxDGZyKYcYSLWBKZVMWV6QQOESG0LPHOA729jk1+WOKVh2nOVEFvX8+J06TE5U9 UFCarpY55EpwQ8ay1hOw2XKAlw== -----END CERTIFICATE-----Generated at Sat Mar 21 13:20:29 2026 by rpki-client