$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: Y42F+FoeOa8oXr/2zBfbycosD9ivsA/bnb3EpmsaBXg= Subject key identifier: 0A:EE:AA:AE:11:C8:97:DD:E6:C7:F8:47:66:E2:0F:D9:8D:7E:0B:46 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0BB6 Signing time: Mon 06 Apr 2026 18:49:18 +0000 Manifest this update: Mon 06 Apr 2026 18:49:17 +0000 Manifest next update: Mon 13 Apr 2026 18:49:17 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: plHDmfhbyrc4yRVBDCmTt2NuURjJK8zl93/fq8+qHX8=) 2: CF5422842CB111F19655F1BDC9833773.roa (hash: uAm4kQcOP/FeFgCKi2qsfDpAFwAb4BLTY/0Y/fA1qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 18:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Apr 6 18:49:17 2026 GMT Not After : Apr 13 18:49:17 2026 GMT Subject: CN=69d4002e-41ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:4f:ab:58:21:18:56:6b:c7:cd:c9:d3:46: e5:58:dd:46:31:5e:18:39:da:99:b9:69:6d:ba:52: e2:53:fd:6c:b3:9b:31:9b:7a:95:05:04:c5:b9:8e: e9:cf:fd:aa:c5:3a:b2:28:41:7b:f9:74:9b:24:1c: fb:ad:8d:ce:2a:13:6a:3a:ee:12:38:ca:8f:fd:78: cd:f9:2b:d6:36:ce:aa:c1:69:7b:ed:50:84:f5:8c: c0:75:fa:67:9b:45:bd:81:bc:44:7c:15:43:e1:6c: c9:36:18:3d:19:af:67:33:ca:ad:8e:b1:46:8e:82: 8b:2e:c0:36:6e:7c:a3:76:b6:d9:9c:64:f5:eb:33: 51:b2:8a:55:07:0c:33:90:89:0e:41:12:5e:1e:dd: 2a:5d:3d:90:f9:3a:74:57:4d:0f:53:03:c6:c0:44: 92:48:5e:be:bc:e7:6b:2b:50:3e:89:c3:c8:c2:18: 2a:f1:ec:0f:b6:ee:c7:30:6e:75:1c:d6:80:9a:32: 30:e4:6e:c5:d0:f3:39:15:ea:00:d2:0e:0f:e5:50: 04:76:26:f4:83:65:c1:9e:c7:8c:9b:15:ac:e9:05: 51:89:8f:ca:31:98:14:69:e0:50:18:a5:c4:58:b1: a5:17:f5:5b:e1:a5:51:79:3d:61:cc:d3:d1:a2:70: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EE:AA:AE:11:C8:97:DD:E6:C7:F8:47:66:E2:0F:D9:8D:7E:0B:46 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ac:9e:49:2b:46:b0:fa:67:d6:e5:f2:7d:a3:42:48:4f:a1: 35:a6:c4:02:71:d1:02:2c:60:97:7f:b6:8e:c1:4d:83:dc:c2: 92:17:08:9b:40:73:b8:b4:72:4c:01:1a:bf:64:d1:9a:e8:d2: 07:84:e8:d6:ff:ad:cc:32:02:76:03:4b:2e:85:91:60:bd:59: cc:ff:7a:93:1c:ed:15:8b:ff:60:52:6c:11:43:43:97:79:19: 03:91:ea:e4:3e:7a:18:0c:37:e5:c5:7d:93:66:8a:cb:63:c3: 9f:13:22:1d:9c:a6:e8:84:5d:45:af:32:ab:f6:37:6a:2f:ec: 19:66:9f:7c:9a:2e:b6:3e:b4:7c:6f:9b:66:2b:fd:06:22:49: 32:9a:6c:7a:9d:b3:c6:ae:dd:4c:43:16:af:4f:0b:81:fe:97: 5d:91:cd:f5:12:96:5f:c4:ea:ce:8e:c5:a5:83:b8:be:7a:5f: 84:51:ce:be:58:94:1d:3d:17:97:f6:91:4d:d6:6d:29:1d:df: bc:bd:6a:12:98:ef:6f:b7:42:83:75:3b:09:3a:a7:f0:16:9d: 26:b1:03:c1:00:45:58:e2:89:2e:2c:ea:65:42:d8:7e:4f:02: 05:ef:ab:8f:41:c9:1b:0b:04:e7:87:0e:f9:a0:aa:ef:90:71: a1:81:25:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjYwNDA2MTg0OTE3WhcNMjYwNDEzMTg0OTE3WjAYMRYwFAYD VQQDEw02OWQ0MDAyZS00MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLpPq1ghGFZrx83J00blWN1GMV4YOdqZuWltulLiU/1ss5sxm3qVBQTFuY7p z/2qxTqyKEF7+XSbJBz7rY3OKhNqOu4SOMqP/XjN+SvWNs6qwWl77VCE9YzAdfpn m0W9gbxEfBVD4WzJNhg9Ga9nM8qtjrFGjoKLLsA2bnyjdrbZnGT16zNRsopVBwwz kIkOQRJeHt0qXT2Q+Tp0V00PUwPGwESSSF6+vOdrK1A+icPIwhgq8ewPtu7HMG51 HNaAmjIw5G7F0PM5FeoA0g4P5VAEdib0g2XBnseMmxWs6QVRiY/KMZgUaeBQGKXE WLGlF/Vb4aVReT1hzNPRonDQMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAruqq4R yJfd5sf4R2biD9mNfgtGMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdayeSStGsPpn1uXyfaNCSE+hNabEAnHRAixgl3+2jsFNg9zCkhcIm0BzuLRy TAEav2TRmujSB4To1v+tzDICdgNLLoWRYL1ZzP96kxztFYv/YFJsEUNDl3kZA5Hq 5D56GAw35cV9k2aKy2PDnxMiHZym6IRdRa8yq/Y3ai/sGWaffJoutj60fG+bZiv9 BiJJMppsep2zxq7dTEMWr08Lgf6XXZHN9RKWX8Tqzo7FpYO4vnpfhFHOvliUHT0X l/aRTdZtKR3fvL1qEpjvb7dCg3U7CTqn8BadJrEDwQBFWOKJLizqZULYfk8CBe+r j0HJGwsE54cO+aCq75BxoYEl1g== -----END CERTIFICATE-----Generated at Wed Apr 8 17:00:26 2026 by rpki-client