$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: rdF//YRU6Qdg0EjvuOdjjyC8vL2otJkyQ+Bzw2n2xk4= Subject key identifier: DD:75:5D:94:D4:A8:ED:CE:75:E2:8A:3E:04:78:E1:61:44:CB:9B:00 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 027F Signing time: Wed 25 Mar 2026 01:19:06 +0000 Manifest this update: Wed 25 Mar 2026 01:19:06 +0000 Manifest next update: Wed 01 Apr 2026 01:19:06 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: z7KlXoEyW3scN21GSavh7TAQxs/ABQ2B7bqBF5RbPUE=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: tvqlcJCmAFNM8ul/lcMi6vNrt3BBFQygy7dURzB2DO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Mar 25 01:19:06 2026 GMT Not After : Apr 1 01:19:06 2026 GMT Subject: CN=69c3380a-44ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:9e:48:d8:06:78:20:25:d4:b3:42:69:ea: 62:01:fd:3e:95:71:28:e8:18:fe:4f:98:a2:55:87: f6:1c:5e:80:01:91:55:22:8a:6c:08:00:fb:81:51: ca:d4:71:72:08:bb:3c:90:34:25:ff:c2:f6:bf:0d: a7:50:21:6e:92:b7:f3:f0:d7:cf:37:c8:77:6e:0e: ee:a3:08:29:78:15:32:3b:c2:d9:42:54:e8:38:be: 0d:95:55:6a:f5:13:1a:33:f3:b5:99:ce:e3:1c:01: ad:eb:5e:d0:06:8e:78:e3:48:99:e4:bd:9c:7e:7f: 85:68:00:e3:3b:6e:ed:5d:45:49:22:be:99:eb:ab: b2:8d:70:77:35:22:4a:7e:c5:ee:fb:ae:d8:29:ec: 84:4a:94:ed:e7:37:94:25:04:52:a9:15:a6:84:f7: aa:0d:66:c4:52:56:de:d1:eb:1a:ee:33:ce:01:b3: 67:7a:1c:97:fc:20:06:74:a8:11:6e:94:5a:c6:ef: 7d:f9:07:97:0f:23:e6:38:e2:1c:ec:50:90:5c:3c: c0:47:44:4d:f9:54:5d:f5:5b:52:f2:61:2b:54:ff: 83:de:1d:b9:f3:46:da:21:6a:b5:e8:3e:79:95:5b: 3b:8c:b0:da:db:68:0b:e6:f1:2f:1e:14:e6:cb:f6: 7f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:5D:94:D4:A8:ED:CE:75:E2:8A:3E:04:78:E1:61:44:CB:9B:00 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:62:18:de:ec:4e:ee:4b:55:d4:97:1e:41:34:e5:94:21: 7e:62:c2:85:90:30:30:dc:42:23:e0:2b:31:ec:51:14:2e:24: 3f:33:69:b7:d1:8e:8c:e5:55:36:7f:77:1d:20:df:00:35:47: 58:03:e9:4c:de:7b:06:45:56:c7:4d:5a:45:09:65:25:99:3f: f0:1b:0a:9d:1e:b8:38:03:b2:f8:c2:c6:f3:2f:34:02:0a:4e: 45:bc:91:54:93:d0:04:aa:36:26:a7:88:ed:42:01:cc:66:81: 7f:85:72:09:b5:9f:a3:3c:e9:10:bb:72:ac:f7:72:2e:79:04: c7:db:cc:44:49:fb:f5:b5:e6:a8:25:56:5d:60:8d:8b:55:e9: 8a:1e:54:3b:2f:58:4d:56:d2:34:37:17:70:d9:f9:1d:08:3a: 74:14:46:3f:9b:b0:33:5d:7f:d4:0a:14:31:2f:4e:c9:3c:c5: 19:c5:fe:d2:5d:e6:70:cd:bd:e2:b7:a0:35:9b:08:c5:4b:d0: 44:d9:2e:0d:2a:1e:d5:29:03:71:52:d8:4e:ef:0c:71:c9:5b: 30:7f:9b:4a:dc:8b:c9:45:8b:4d:2c:7c:3d:ae:74:d7:4c:45: d5:7c:82:16:46:57:a7:a4:35:ac:30:76:df:de:6b:a8:01:86: c9:00:f3:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjYwMzI1MDExOTA2WhcNMjYwNDAxMDExOTA2WjAYMRYwFAYD VQQDEw02OWMzMzgwYS00NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJieSNgGeCAl1LNCaepiAf0+lXEo6Bj+T5iiVYf2HF6AAZFVIopsCAD7gVHK 1HFyCLs8kDQl/8L2vw2nUCFukrfz8NfPN8h3bg7uowgpeBUyO8LZQlToOL4NlVVq 9RMaM/O1mc7jHAGt617QBo5440iZ5L2cfn+FaADjO27tXUVJIr6Z66uyjXB3NSJK fsXu+67YKeyESpTt5zeUJQRSqRWmhPeqDWbEUlbe0esa7jPOAbNnehyX/CAGdKgR bpRaxu99+QeXDyPmOOIc7FCQXDzAR0RN+VRd9VtS8mErVP+D3h2580baIWq16D55 lVs7jLDa22gL5vEvHhTmy/Z/3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN11XZTU qO3OdeKKPgR44WFEy5sAMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsdiGN7sTu5LVdSXHkE05ZQhfmLChZAwMNxCI+ArMexRFC4kPzNpt9GOjOVV Nn93HSDfADVHWAPpTN57BkVWx01aRQllJZk/8BsKnR64OAOy+MLG8y80AgpORbyR VJPQBKo2JqeI7UIBzGaBf4VyCbWfozzpELtyrPdyLnkEx9vMREn79bXmqCVWXWCN i1Xpih5UOy9YTVbSNDcXcNn5HQg6dBRGP5uwM11/1AoUMS9OyTzFGcX+0l3mcM29 4regNZsIxUvQRNkuDSoe1SkDcVLYTu8McclbMH+bStyLyUWLTSx8Pa5010xF1XyC FkZXp6Q1rDB2395rqAGGyQDz+w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:20 2026 by rpki-client