$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: bvdi39gGKMMTE/G2tRHp9SzYZXBm3BlT8o8dSdMLiBY= Subject key identifier: D2:02:F4:B9:B1:9F:3F:41:8B:B8:3C:19:51:EA:25:66:79:44:7C:BD Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 0596 Signing time: Sat 04 Apr 2026 23:00:35 +0000 Manifest this update: Sat 04 Apr 2026 23:00:34 +0000 Manifest next update: Sat 11 Apr 2026 23:00:34 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: Qh4CUz4z3R0bmHnCcGO4XPMIJWEBqjSFQ+dzX61hQ6A=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Apr 4 23:00:34 2026 GMT Not After : Apr 11 23:00:34 2026 GMT Subject: CN=69d19813-9cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:07:3d:73:3d:fc:87:4f:e0:64:6c:57:e3: db:67:2b:0f:fb:c5:82:12:6a:b4:7e:5b:72:54:eb: 99:9c:1e:ae:be:b8:e9:1b:96:c8:4a:a8:ab:b8:19: 41:1b:31:19:8e:30:de:7a:c8:3a:22:e2:9c:ec:e3: f5:03:ea:f8:7f:68:d2:a4:e1:1e:29:dd:78:28:86: 50:8c:7c:80:e9:3a:0f:40:b3:49:2c:0f:21:0f:b4: 73:ee:2a:09:20:31:20:8a:8c:64:c9:cf:58:59:de: 22:ad:05:e0:83:17:7f:8c:7a:b0:c2:fd:84:c5:d0: 52:0f:c2:b4:25:20:e1:a9:f7:52:e6:47:ee:63:09: 5d:d9:75:4e:e2:4a:42:d7:d2:08:dd:93:8e:a1:55: db:53:25:82:c2:39:49:bd:71:2d:a6:fb:8c:7c:ed: 42:ef:f0:cf:c7:47:c7:92:2c:62:9c:41:8b:77:e6: c7:3d:9a:24:dd:e4:1d:3d:43:0d:8c:de:c9:31:d9: e1:a4:ee:7c:de:00:67:14:6d:45:65:d6:e9:9a:6c: 4b:16:f2:cb:e3:ac:97:2f:8f:9d:fc:46:e5:00:d4: 45:90:bc:f3:97:4a:42:4c:f3:21:15:7e:aa:81:a8: 35:b5:c2:e5:31:ea:1e:1a:de:bd:e3:2c:d3:f9:ae: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:02:F4:B9:B1:9F:3F:41:8B:B8:3C:19:51:EA:25:66:79:44:7C:BD X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:67:b8:c7:60:63:8e:0b:9c:28:18:40:e3:af:db:48:cf:04: 4a:6c:80:2f:8f:02:0b:6e:3c:16:d7:cf:c8:37:de:5f:94:88: 33:d9:45:9f:f9:a2:0a:d8:39:bf:7a:1f:84:d7:85:45:5e:a7: a9:50:ad:ca:56:37:a9:9f:a0:3b:59:a8:63:2d:ef:b3:1a:5d: 63:69:a0:5c:7f:73:9b:7b:c7:d8:7f:9a:b3:72:a2:38:14:48: 7f:31:d5:62:53:3e:06:4d:86:fc:e7:4c:77:d6:d4:fe:67:cb: b1:55:0e:ad:f5:56:29:25:1d:42:c6:24:26:92:31:3d:9b:35: 84:fd:26:8e:7c:cd:ac:24:1c:7d:60:db:06:ea:d4:2f:e4:11: 80:e0:e2:2d:77:45:b8:6c:2b:a8:24:54:a2:e9:1d:ab:19:4f: 80:12:1a:e9:0d:da:ed:fb:07:8c:b5:7a:b4:1f:df:57:66:96: 3a:73:c0:08:59:ae:48:9e:d6:ae:70:5a:fc:6a:55:41:23:d8: ec:15:1d:c8:05:91:86:b4:ff:c0:67:e7:11:f8:fb:0b:9b:45: 43:f1:16:24:0d:b6:88:e1:8f:55:88:57:31:93:bb:cd:26:cb: 00:0e:d8:04:c2:1c:30:a4:ef:c5:bc:5d:a6:9c:ba:e6:8b:8b: 73:6b:f6:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjYwNDA0MjMwMDM0WhcNMjYwNDExMjMwMDM0WjAYMRYwFAYD VQQDEw02OWQxOTgxMy05Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgkHPXM9/IdP4GRsV+PbZysP+8WCEmq0fltyVOuZnB6uvrjpG5bISqiruBlB GzEZjjDeesg6IuKc7OP1A+r4f2jSpOEeKd14KIZQjHyA6ToPQLNJLA8hD7Rz7ioJ IDEgioxkyc9YWd4irQXggxd/jHqwwv2ExdBSD8K0JSDhqfdS5kfuYwld2XVO4kpC 19II3ZOOoVXbUyWCwjlJvXEtpvuMfO1C7/DPx0fHkixinEGLd+bHPZok3eQdPUMN jN7JMdnhpO583gBnFG1FZdbpmmxLFvLL46yXL4+d/EblANRFkLzzl0pCTPMhFX6q gag1tcLlMeoeGt694yzT+a5sOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIC9Lmx nz9Bi7g8GVHqJWZ5RHy9MB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn2e4x2BjjgucKBhA46/bSM8ESmyAL48CC248FtfPyDfeX5SIM9lFn/miCtg5 v3ofhNeFRV6nqVCtylY3qZ+gO1moYy3vsxpdY2mgXH9zm3vH2H+as3KiOBRIfzHV YlM+Bk2G/OdMd9bU/mfLsVUOrfVWKSUdQsYkJpIxPZs1hP0mjnzNrCQcfWDbBurU L+QRgODiLXdFuGwrqCRUoukdqxlPgBIa6Q3a7fsHjLV6tB/fV2aWOnPACFmuSJ7W rnBa/GpVQSPY7BUdyAWRhrT/wGfnEfj7C5tFQ/EWJA22iOGPVYhXMZO7zSbLAA7Y BMIcMKTvxbxdppy65ouLc2v2JA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:29 2026 by rpki-client