$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json) Hash identifier: 9Z1QZiaKHOuKW+bM47L8ybLIRypPm/lmUH0WfqzawSs= Subject key identifier: 89:C0:46:56:14:D8:8E:90:78:C4:3A:25:D6:3A:6C:B0:3D:67:C2:63 Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft Manifest number: 59 Signing time: Wed 25 Mar 2026 07:18:36 +0000 Manifest this update: Wed 25 Mar 2026 07:18:36 +0000 Manifest next update: Wed 01 Apr 2026 07:18:36 +0000 Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: GAP1osexZ1zvL6dvoBdiTlals+J4Cw03lHX3we8ALVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2 Validity Not Before: Mar 25 07:18:36 2026 GMT Not After : Apr 1 07:18:36 2026 GMT Subject: CN=69c38c4c-466e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:31:81:8d:fa:86:e2:f5:08:04:f7:74:bf: 15:81:43:d7:fe:1d:db:64:3a:af:7e:15:8a:72:4a: 0a:f2:27:59:9a:88:b1:74:5d:d8:9f:fd:f8:fe:43: 9a:6c:92:d8:51:3e:0f:26:2a:da:53:ca:4e:93:37: fe:5b:81:6a:ae:1a:68:19:b5:d9:1e:92:3a:95:68: 66:d9:1e:00:8e:aa:b9:7b:27:fb:c0:e2:c4:ab:dd: 6a:a3:fe:72:13:87:e4:d9:73:f2:75:3d:27:6e:5f: 51:18:8a:00:96:c5:01:29:fa:51:cf:4d:c9:cf:77: ca:a1:cc:02:b3:08:a1:a8:92:32:1d:7b:88:5d:08: cd:8b:d6:4d:39:fd:2d:b8:99:91:59:1d:23:76:97: 7d:53:7f:1b:46:77:7c:89:97:19:07:18:f8:fa:c1: 3e:8e:08:e8:82:91:bc:c3:bc:fc:24:fd:42:10:e8: 09:0a:c7:ef:5e:b1:7a:e6:55:ab:16:dc:2c:c6:7a: 4f:bf:9c:1c:09:76:9c:51:9c:e1:f5:95:20:97:2c: 21:71:23:85:8b:aa:f3:2d:24:16:7a:25:b9:93:08: 9c:c3:9d:e4:65:e4:2f:af:25:23:ae:b3:3f:d9:23: 42:dc:29:83:89:f8:a5:d1:4a:fe:72:e1:5c:7d:17: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:46:56:14:D8:8E:90:78:C4:3A:25:D6:3A:6C:B0:3D:67:C2:63 X509v3 Authority Key Identifier: keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6b:73:d5:6c:bb:80:2a:43:9e:60:6e:bc:2f:b6:23:3b:2e: 2a:71:05:d9:63:20:d7:ca:e3:44:42:7d:8d:50:ca:7f:45:0b: 6d:da:ce:9e:33:e1:aa:27:3b:7b:82:ce:19:a1:e5:9e:b4:9f: 76:53:09:2a:5f:f7:c3:c9:2b:c4:4b:14:8f:73:04:1d:5f:c2: b6:e0:7e:16:54:ef:e1:17:0d:51:ed:58:ee:3e:c5:81:ef:4d: 68:7e:33:c0:45:68:6c:3d:38:4f:32:a8:c9:1d:95:cd:c7:24: 00:20:be:3c:f5:cd:b8:1a:12:53:6b:6e:c5:ac:44:85:18:fb: 15:a4:6e:25:48:24:e5:93:db:05:56:46:87:59:76:ff:c6:8c: d4:a9:da:f2:73:f6:8d:c0:b7:8f:03:f1:a9:3c:d8:8e:a0:c1: 95:d1:05:c1:1d:fc:e6:43:4e:dd:47:a1:3c:26:e5:b4:eb:f2: 5b:0c:4d:cf:65:73:70:03:d3:82:15:aa:5d:e0:d2:6c:05:7e: 30:29:d9:57:55:a9:7e:ff:b4:96:cd:68:d7:b2:55:26:5b:70: 02:72:40:df:a7:42:da:a5:eb:51:6e:6a:86:c3:d4:53:2c:ed: ec:fd:d7:37:07:d1:46:8d:9a:5e:68:bd:68:81:0f:b2:c2:38: e1:f9:be:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzgxRDExMC8GA1UEBRMoNkMyMjk3RjgyRTIxODM3NDk0MTM5MjY1MkM5QzhCMzA1 NUM4NjNBMjAeFw0yNjAzMjUwNzE4MzZaFw0yNjA0MDEwNzE4MzZaMBgxFjAUBgNV BAMTDTY5YzM4YzRjLTQ2NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMkDGBjfqG4vUIBPd0vxWBQ9f+HdtkOq9+FYpySgryJ1maiLF0Xdif/fj+Q5ps kthRPg8mKtpTyk6TN/5bgWquGmgZtdkekjqVaGbZHgCOqrl7J/vA4sSr3Wqj/nIT h+TZc/J1PSduX1EYigCWxQEp+lHPTcnPd8qhzAKzCKGokjIde4hdCM2L1k05/S24 mZFZHSN2l31TfxtGd3yJlxkHGPj6wT6OCOiCkbzDvPwk/UIQ6AkKx+9esXrmVasW 3CzGek+/nBwJdpxRnOH1lSCXLCFxI4WLqvMtJBZ6JbmTCJzDneRl5C+vJSOusz/Z I0LcKYOJ+KXRSv5y4Vx9FwCdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUicBGVhTY jpB4xDol1jpssD1nwmMwHwYDVR0jBBgwFoAUbCKX+C4hg3SUE5JlLJyLMFXIY6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3ODFELzI3NjY3NjNFQTM2 NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNTVUU1SmxMSnlMTUZYSVk2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkNLWC1DNGhnM1NVRTVKbExKeUxNRlhJWTZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 ODFELzI3NjY3NjNFQTM2NDExRjBCRDEzNjczQ0M0RjlBRTAyL2JDS1gtQzRoZzNT VUU1SmxMSnlMTUZYSVk2SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0a3PVbLuAKkOeYG68L7YjOy4qcQXZYyDXyuNEQn2NUMp/RQtt2s6eM+GqJzt7 gs4ZoeWetJ92UwkqX/fDySvESxSPcwQdX8K24H4WVO/hFw1R7VjuPsWB701ofjPA RWhsPThPMqjJHZXNxyQAIL489c24GhJTa27FrESFGPsVpG4lSCTlk9sFVkaHWXb/ xozUqdryc/aNwLePA/GpPNiOoMGV0QXBHfzmQ07dR6E8JuW06/JbDE3PZXNwA9OC Fapd4NJsBX4wKdlXVal+/7SWzWjXslUmW3ACckDfp0LapetRbmqGw9RTLO3s/dc3 B9FGjZpeaL1ogQ+ywjjh+b4K -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:17 2026 by rpki-client