$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: Zy4b1rOt2AUukbUW8QSxhYMn717pzGeVumuB7C5AmUc= Subject key identifier: F0:4E:37:33:29:14:56:28:51:A5:25:AC:D6:A8:E2:3D:01:D5:8F:43 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 014C Signing time: Fri 13 Mar 2026 04:10:53 +0000 Manifest this update: Fri 13 Mar 2026 04:10:52 +0000 Manifest next update: Fri 20 Mar 2026 04:10:52 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: JAd+Y0lj9FIYM6ojEwFygrQg9dpHK0EFlaAQ5aEHXNo=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Mar 13 04:10:52 2026 GMT Not After : Mar 20 04:10:52 2026 GMT Subject: CN=69b38e4d-60c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:b3:44:72:cc:22:87:01:b8:7f:58:4d:b6: b8:47:aa:83:ec:74:73:98:32:fc:ad:1b:16:54:c5: 3a:8e:5c:9a:18:9f:f3:58:20:7d:9d:31:ff:0f:cc: b0:fd:21:10:3a:df:3a:e2:dc:47:5d:85:2c:6b:e3: 97:8b:d9:26:cc:70:29:03:dc:2f:a7:69:fe:9d:28: c1:15:2c:e3:4e:7c:38:62:9a:c5:d7:7a:8d:cc:0b: de:8a:de:ce:69:b4:db:fc:72:2b:73:23:92:94:5a: 51:48:ee:ea:09:00:c6:56:7a:17:da:6c:da:0b:72: 93:02:43:e1:14:0c:89:95:1b:b3:0d:ea:7f:56:eb: f7:a7:0d:8e:96:78:29:69:d3:42:30:24:1c:df:19: b5:fb:7b:c2:5b:a7:40:56:69:41:dc:7d:db:b3:3e: 45:b9:3f:a1:cf:73:36:1f:3f:21:08:fc:ba:ab:23: 17:b3:7c:e2:16:77:3f:ea:48:8d:8f:dc:00:dc:b2: c0:40:74:3b:2e:8d:11:e0:37:28:65:41:6f:6c:bb: 89:5e:2e:68:e4:5d:3b:91:57:1e:07:a0:b7:58:a0: b4:00:46:fe:92:8b:b3:27:8f:d7:01:54:a6:bf:7e: 21:dc:5b:63:da:21:8b:d3:ae:5a:c5:e4:4f:98:8c: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:37:33:29:14:56:28:51:A5:25:AC:D6:A8:E2:3D:01:D5:8F:43 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a3:7c:c2:de:d5:54:5b:b8:4b:7f:20:45:83:d6:54:41:25: e1:f6:4e:d7:c5:0f:ea:04:38:8c:82:c8:fb:a0:eb:7a:eb:09: 39:c2:bc:c3:45:b2:46:25:be:a8:2f:22:b8:27:e0:b9:2e:ee: ec:f8:4e:a0:dd:39:8c:77:33:a9:0d:38:e4:7d:c5:c9:b0:b0: 12:de:1b:d6:3f:73:f7:75:23:47:39:37:11:24:36:77:b1:c6: 9e:d5:c6:87:59:e2:fc:fb:b5:e3:e0:54:de:8c:82:bd:c3:a9: 43:68:c2:7e:cb:3e:c8:2e:87:7e:80:e1:65:12:8b:ac:60:7f: 9c:70:92:80:d4:2d:67:d4:5e:22:2e:51:61:3a:64:6d:cb:2e: 56:02:16:66:67:e4:85:ec:36:3c:99:91:c4:bc:e8:f6:f5:69: 78:7d:0c:fd:d3:c8:7d:89:8b:62:45:77:61:ed:4b:ba:23:e7: 26:1a:a0:e6:4e:a0:76:34:82:7f:4a:2e:e1:ca:c1:5d:fa:c6: 08:e1:13:bb:26:dc:fc:e7:33:4c:55:86:36:b0:9a:ea:e0:5b: 0a:e2:fe:eb:52:92:3d:96:f8:e5:6b:df:3c:ae:64:58:dd:68: 31:1c:83:9b:a9:f0:d3:8a:cd:39:9e:5f:43:53:f1:dc:39:3c: 62:c3:1a:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwMzEzMDQxMDUyWhcNMjYwMzIwMDQxMDUyWjAYMRYwFAYD VQQDEw02OWIzOGU0ZC02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwazRHLMIocBuH9YTba4R6qD7HRzmDL8rRsWVMU6jlyaGJ/zWCB9nTH/D8yw /SEQOt864txHXYUsa+OXi9kmzHApA9wvp2n+nSjBFSzjTnw4YprF13qNzAveit7O abTb/HIrcyOSlFpRSO7qCQDGVnoX2mzaC3KTAkPhFAyJlRuzDep/Vuv3pw2Olngp adNCMCQc3xm1+3vCW6dAVmlB3H3bsz5FuT+hz3M2Hz8hCPy6qyMXs3ziFnc/6kiN j9wA3LLAQHQ7Lo0R4DcoZUFvbLuJXi5o5F07kVceB6C3WKC0AEb+kouzJ4/XAVSm v34h3Ftj2iGL065axeRPmIx2GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBONzMp FFYoUaUlrNao4j0B1Y9DMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoaN8wt7VVFu4S38gRYPWVEEl4fZO18UP6gQ4jILI+6DreusJOcK8w0WyRiW+ qC8iuCfguS7u7PhOoN05jHczqQ045H3FybCwEt4b1j9z93UjRzk3ESQ2d7HGntXG h1ni/Pu14+BU3oyCvcOpQ2jCfss+yC6HfoDhZRKLrGB/nHCSgNQtZ9ReIi5RYTpk bcsuVgIWZmfkhew2PJmRxLzo9vVpeH0M/dPIfYmLYkV3Ye1LuiPnJhqg5k6gdjSC f0ou4crBXfrGCOETuybc/OczTFWGNrCa6uBbCuL+61KSPZb45WvfPK5kWN1oMRyD m6nw04rNOZ5fQ1Px3Dk8YsMasQ== -----END CERTIFICATE-----Generated at Fri Mar 13 14:55:45 2026 by rpki-client