$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json) Hash identifier: L6IfLzYZDRlCiPDQfztjybvXbGfyR2ZS+hcrTpKK1G0= Subject key identifier: 34:58:A6:1F:00:90:03:F7:9F:AB:5F:BA:D1:FA:A7:57:1C:62:42:75 Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft Manifest number: 35 Signing time: Wed 25 Mar 2026 07:55:21 +0000 Manifest this update: Wed 25 Mar 2026 07:55:20 +0000 Manifest next update: Wed 01 Apr 2026 07:55:20 +0000 Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: s7hPd76be4aHXHL61Gl6AJMJ8svCNXhw7sUFjPhrTD0=) 2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A Validity Not Before: Mar 25 07:55:20 2026 GMT Not After : Apr 1 07:55:20 2026 GMT Subject: CN=69c394e9-b19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:23:36:28:d4:7d:17:42:07:bc:c2:df:c7: 9f:1b:3e:67:4d:97:6c:ce:b1:95:f7:d1:bf:3c:5f: 28:df:0c:bf:01:ae:80:68:73:57:5b:9d:2a:36:27: 83:fe:29:9f:dd:4a:73:62:1f:5c:f0:a8:e8:09:57: 69:04:fc:7d:ce:b2:04:fe:c8:49:d7:68:bc:a6:ef: 25:97:21:99:73:57:d7:5c:2a:a1:22:74:08:27:62: 34:9a:61:90:1e:af:4d:35:a5:65:42:09:63:c6:aa: 1e:04:77:a3:08:1f:d1:f6:19:1f:62:2f:5b:c6:15: 58:bc:88:a6:71:34:2e:37:c8:b7:33:91:cd:62:46: cd:d9:1a:fe:53:29:23:ca:1b:7d:ac:ea:04:32:3f: e6:dd:b6:ec:79:26:8e:c2:e5:85:b8:63:af:2f:3a: c0:23:48:60:35:4a:e3:45:54:2b:e5:9e:0a:77:cd: ea:00:d0:af:11:d8:a7:ab:0e:4f:e5:be:d5:ca:40: 1c:69:6e:d2:14:1d:28:d8:28:ee:d8:9b:76:cc:f3: 71:07:3c:92:f3:e1:db:30:14:60:53:88:c5:2a:07: 3a:6c:a4:75:7d:3e:e1:5f:c4:58:84:70:fa:84:c2: 0a:02:e3:30:2c:50:ea:e4:d2:89:50:fc:77:62:23: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:58:A6:1F:00:90:03:F7:9F:AB:5F:BA:D1:FA:A7:57:1C:62:42:75 X509v3 Authority Key Identifier: keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c4:9a:8c:be:1a:64:48:54:4d:2b:25:d0:ca:75:cf:d2:4b: 05:e4:38:db:bb:b0:31:5a:81:07:38:33:66:cf:23:91:d7:5a: f4:58:a1:01:7f:48:64:1f:67:82:6b:1d:c6:07:bf:88:e0:8b: b6:da:c3:7a:b3:9d:d3:62:69:9b:b7:43:55:47:64:38:c1:34: 13:98:0d:ef:27:5a:42:69:46:13:fe:95:83:be:a5:1e:4d:70: 9d:fe:5d:4d:98:e9:f1:42:a5:10:30:a0:a6:ac:28:43:4e:96: 12:0c:21:0a:d8:7f:a7:cb:7e:80:27:2f:7b:2c:a2:73:b0:ba: 35:35:60:ac:22:ea:0f:e8:65:a3:db:34:e7:de:ff:fa:a4:85: e5:31:2a:26:55:47:c1:04:2e:54:30:f1:ad:60:fa:d5:80:03: fb:d1:40:e8:f9:6e:eb:67:ad:7c:9e:98:29:88:b3:6f:4d:3d: 02:89:96:f1:4c:80:40:c0:03:24:dd:56:f1:06:31:1f:66:20: 6c:47:18:a7:f9:43:e8:1b:81:ce:d5:39:25:94:8b:b7:a3:0f: 27:ae:63:e4:58:2e:e1:70:be:c6:a7:33:e6:44:29:95:b4:02: 16:f8:cc:69:3e:d3:b2:51:61:e8:7b:46:df:cb:c6:98:93:b6: 32:ba:81:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjlERjExMC8GA1UEBRMoNkNGMUY0NzZGNDQ1MTQ2NkM4RkQyNkUyMTZGMzI3NkND MTVFMkUxQTAeFw0yNjAzMjUwNzU1MjBaFw0yNjA0MDEwNzU1MjBaMBgxFjAUBgNV BAMTDTY5YzM5NGU5LWIxOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC34iM2KNR9F0IHvMLfx58bPmdNl2zOsZX30b88XyjfDL8BroBoc1dbnSo2J4P+ KZ/dSnNiH1zwqOgJV2kE/H3OsgT+yEnXaLym7yWXIZlzV9dcKqEidAgnYjSaYZAe r001pWVCCWPGqh4Ed6MIH9H2GR9iL1vGFVi8iKZxNC43yLczkc1iRs3ZGv5TKSPK G32s6gQyP+bdtux5Jo7C5YW4Y68vOsAjSGA1SuNFVCvlngp3zeoA0K8R2KerDk/l vtXKQBxpbtIUHSjYKO7Ym3bM83EHPJLz4dswFGBTiMUqBzpspHV9PuFfxFiEcPqE wgoC4zAsUOrk0olQ/HdiI7G7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNFimHwCQ A/efq1+60fqnVxxiQnUwHwYDVR0jBBgwFoAUbPH0dvRFFGbI/SbiFvMnbMFeLhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0VBQ0NBOTE4RUQy RTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdiSV9TYmlGdk1uYk1GZUxo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlBIMGR2UkZGR2JJX1NiaUZ2TW5iTUZlTGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy OURGL0VBQ0NBOTE4RUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdi SV9TYmlGdk1uYk1GZUxoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCpxJqMvhpkSFRNKyXQynXP0ksF5Djbu7AxWoEHODNmzyOR11r0WKEBf0hkH2eC ax3GB7+I4Iu22sN6s53TYmmbt0NVR2Q4wTQTmA3vJ1pCaUYT/pWDvqUeTXCd/l1N mOnxQqUQMKCmrChDTpYSDCEK2H+ny36AJy97LKJzsLo1NWCsIuoP6GWj2zTn3v/6 pIXlMSomVUfBBC5UMPGtYPrVgAP70UDo+W7rZ618npgpiLNvTT0CiZbxTIBAwAMk 3VbxBjEfZiBsRxin+UPoG4HO1TkllIu3ow8nrmPkWC7hcL7GpzPmRCmVtAIW+Mxp PtOyUWHoe0bfy8aYk7YyuoH4 -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:38 2026 by rpki-client