$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: VUQqRABMmpfcsOfSFJ5hTAFlNMmRJp0zx+prMPXvPdo= Subject key identifier: 8A:DC:C5:92:2A:37:4F:25:88:0A:97:7A:EF:3B:AD:08:D2:72:5C:E1 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 02B2 Signing time: Wed 25 Mar 2026 01:04:59 +0000 Manifest this update: Wed 25 Mar 2026 01:04:58 +0000 Manifest next update: Wed 01 Apr 2026 01:04:58 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: 3MtrwyOGPyUDaoJ2kUfKdp42HNE5sOuvVZv9Yspf/e8=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Mar 25 01:04:58 2026 GMT Not After : Apr 1 01:04:58 2026 GMT Subject: CN=69c334bb-abb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:07:52:61:56:e6:e6:12:06:57:73:fc:1e: 25:d7:41:4e:43:81:da:59:df:e7:bc:21:43:f9:73: ba:19:a0:bf:41:88:79:36:58:de:d1:4f:7d:6f:fd: 06:e7:45:cd:0b:8f:18:5a:56:3c:a0:24:06:d8:f1: 95:de:fe:61:49:d7:09:7c:17:e2:3d:2c:7e:86:7e: 7a:9c:e6:21:0b:da:09:b1:b0:1e:6f:3e:6f:c6:46: 6d:0f:53:6d:ca:90:df:ad:24:27:f6:5f:be:ee:af: 68:d2:c6:ca:bf:04:5e:bc:7d:b0:1e:e5:1e:f5:7e: f0:eb:58:8e:0a:23:c6:3a:ac:00:f3:a3:5c:ca:dc: 01:29:69:7a:ad:20:45:46:76:22:57:e4:fa:69:b4: e8:45:60:13:5e:c4:41:d2:f0:14:5b:72:e9:0c:bd: 23:83:f5:fe:cd:6b:a3:85:fd:f1:13:c2:a7:fb:22: 51:1a:eb:bb:66:bc:7c:cf:33:a7:c0:7d:ad:1b:b7: a9:f6:85:99:22:6b:47:86:6f:f7:53:3c:36:8d:e2: 90:8e:2f:1a:72:29:4f:91:31:7c:57:16:7c:19:df: 89:5f:39:c6:66:aa:a4:9b:d8:7e:b9:25:52:79:e2: 03:e7:ca:be:43:f9:e4:1d:62:c3:c6:4e:a5:93:ef: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DC:C5:92:2A:37:4F:25:88:0A:97:7A:EF:3B:AD:08:D2:72:5C:E1 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c5:df:8c:dd:58:c2:2f:79:c4:97:cf:e0:5a:5a:89:59:4e: 5e:4f:d4:e6:0e:a9:0a:95:8b:5a:b6:9d:b7:24:96:32:53:c5: a8:10:71:0b:88:6c:eb:f8:49:e9:74:c6:1d:8d:71:4d:e0:48: b9:8e:e2:5a:a9:96:ff:64:19:31:91:61:f3:70:ed:1d:40:59: 5b:19:2a:ab:19:99:e6:51:9a:d1:8e:9b:07:48:c1:8b:9b:25: 2b:9e:fd:ad:94:4c:46:eb:3d:c2:c5:75:08:5f:2a:76:2d:24: 26:07:05:01:c4:0a:7b:e5:dc:73:1d:81:6b:37:b5:4c:55:43: 24:17:85:61:8f:85:7b:97:b5:cd:fc:15:10:12:d9:10:40:e0: 98:5c:09:17:e1:49:a5:98:2c:b9:c3:1f:ac:a7:da:8b:b9:1e: 5b:79:86:b6:04:b4:15:32:3c:cb:69:e3:b1:8d:37:23:40:3b: 26:1b:ce:bc:1f:e3:70:42:ff:89:60:85:30:c3:55:78:5c:32: 1d:95:ef:8c:d2:28:8c:92:5e:ed:99:bc:a2:1b:02:61:ee:6f: 1a:fc:db:70:6f:56:83:6a:c9:16:0a:46:0f:05:8f:d4:99:35: 78:f8:1f:84:a2:17:8a:dc:e7:ac:7c:e8:81:7a:1d:ec:76:97: 19:68:01:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjYwMzI1MDEwNDU4WhcNMjYwNDAxMDEwNDU4WjAYMRYwFAYD VQQDEw02OWMzMzRiYi1hYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj28HUmFW5uYSBldz/B4l10FOQ4HaWd/nvCFD+XO6GaC/QYh5Nlje0U99b/0G 50XNC48YWlY8oCQG2PGV3v5hSdcJfBfiPSx+hn56nOYhC9oJsbAebz5vxkZtD1Nt ypDfrSQn9l++7q9o0sbKvwRevH2wHuUe9X7w61iOCiPGOqwA86NcytwBKWl6rSBF RnYiV+T6abToRWATXsRB0vAUW3LpDL0jg/X+zWujhf3xE8Kn+yJRGuu7Zrx8zzOn wH2tG7ep9oWZImtHhm/3Uzw2jeKQji8acilPkTF8VxZ8Gd+JXznGZqqkm9h+uSVS eeID58q+Q/nkHWLDxk6lk+/p7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrcxZIq N08liAqXeu87rQjSclzhMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8XfjN1Ywi95xJfP4FpaiVlOXk/U5g6pCpWLWradtySWMlPFqBBxC4hs6/hJ 6XTGHY1xTeBIuY7iWqmW/2QZMZFh83DtHUBZWxkqqxmZ5lGa0Y6bB0jBi5slK579 rZRMRus9wsV1CF8qdi0kJgcFAcQKe+Xccx2Baze1TFVDJBeFYY+Fe5e1zfwVEBLZ EEDgmFwJF+FJpZgsucMfrKfai7keW3mGtgS0FTI8y2njsY03I0A7JhvOvB/jcEL/ iWCFMMNVeFwyHZXvjNIojJJe7Zm8ohsCYe5vGvzbcG9Wg2rJFgpGDwWP1Jk1ePgf hKIXitznrHzogXod7HaXGWgB1g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:12 2026 by rpki-client