$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: qaXu14FOwd4uoazXHEkO8GVZReLb68Rm4Gak4r6uvmA= Subject key identifier: C7:BA:D1:58:0B:91:56:C3:FE:00:C6:36:41:56:C3:E3:6C:A4:D9:04 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 058A Signing time: Tue 24 Mar 2026 23:01:28 +0000 Manifest this update: Tue 24 Mar 2026 23:01:28 +0000 Manifest next update: Tue 31 Mar 2026 23:01:28 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: VorEzLryd33ki22HJRDPINActT3r16TcaBNTCZQiJeM=) 2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=) 3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Mar 24 23:01:28 2026 GMT Not After : Mar 31 23:01:28 2026 GMT Subject: CN=69c317c8-da7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d5:3b:de:c7:1e:b0:df:75:ff:67:c7:1e:4f: a7:20:6e:03:c5:48:65:02:dd:d4:ba:49:5d:f7:6c: ec:2f:5d:b9:45:e9:f2:59:b9:26:63:94:8e:b1:7a: 28:a8:4d:2a:44:80:ae:2b:74:32:18:ec:af:2f:d6: 40:68:77:30:73:8e:8f:d2:44:d8:d0:86:7a:91:b4: 47:e9:14:82:ba:4c:52:b5:68:04:06:8c:d4:33:ee: 3b:e1:78:8e:6a:03:40:55:3e:51:62:63:3e:47:f9: 76:84:c5:0d:08:59:00:fa:8b:3a:14:e0:b3:04:6e: c4:f6:f6:fc:88:db:8a:b1:91:84:26:46:2f:f6:c9: 71:28:5b:81:0d:45:df:86:4a:41:0b:df:90:bc:a4: 7a:40:d2:ad:30:ed:cf:10:95:05:ba:0a:79:16:02: 88:bb:cf:d3:66:8b:b9:ef:9d:42:68:11:38:6b:43: 93:f1:68:ba:03:91:5d:9f:46:df:91:f4:a7:a3:26: 68:11:35:a7:03:84:75:63:13:2d:9a:30:70:10:cd: 57:c5:a6:8b:7c:30:5b:38:f2:f1:3f:4f:2f:42:92: dd:ce:2c:2e:5c:ef:29:8c:67:ef:7a:28:e8:ec:dd: df:03:49:27:91:c6:0a:c9:2e:78:15:cb:5c:16:4c: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BA:D1:58:0B:91:56:C3:FE:00:C6:36:41:56:C3:E3:6C:A4:D9:04 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e8:45:1b:44:c5:3b:22:89:5e:fe:c4:17:b4:be:62:75:9a: 80:74:f2:60:63:dd:0a:99:2b:6c:df:22:39:16:7a:4a:ce:8e: 43:38:52:99:4e:aa:57:95:a2:86:0b:88:f0:c8:4e:ae:11:41: 8d:00:a2:81:fa:68:86:41:20:05:f7:19:95:88:ba:73:9f:37: 20:24:c2:5c:c8:30:7d:da:4c:77:27:60:9c:ca:75:08:2b:9c: ef:99:9d:21:04:54:f3:b0:c4:35:27:dd:cb:06:9a:4f:ad:a8: be:5b:7a:0c:eb:24:b0:da:2f:60:5c:15:a3:00:c3:c8:10:98: 66:2e:b7:0f:c4:36:bc:b2:dc:ff:3d:66:e0:8c:f3:8b:5e:cc: d6:6e:af:32:04:fc:6b:93:97:54:d4:88:4c:04:9b:8d:25:b5: d8:92:4b:a0:b7:6b:60:a8:20:f8:cb:5a:f5:ef:9e:8f:6f:bc: 4c:33:bb:20:7a:26:a3:b9:ac:81:1a:8b:d7:f7:24:d1:58:ae: 6e:80:ee:82:b9:9e:d0:9f:e8:48:eb:62:26:e7:a5:c6:7b:68: 6b:7c:f2:f1:7b:0f:15:83:25:5d:67:73:f4:6a:ce:5a:b4:53: 50:b0:6e:2b:34:07:c4:c7:07:ba:e5:1c:39:ea:58:1c:d4:a6: e6:96:6c:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjYwMzI0MjMwMTI4WhcNMjYwMzMxMjMwMTI4WjAYMRYwFAYD VQQDEw02OWMzMTdjOC1kYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tU73scesN91/2fHHk+nIG4DxUhlAt3Uukld92zsL125RenyWbkmY5SOsXoo qE0qRICuK3QyGOyvL9ZAaHcwc46P0kTY0IZ6kbRH6RSCukxStWgEBozUM+474XiO agNAVT5RYmM+R/l2hMUNCFkA+os6FOCzBG7E9vb8iNuKsZGEJkYv9slxKFuBDUXf hkpBC9+QvKR6QNKtMO3PEJUFugp5FgKIu8/TZou5751CaBE4a0OT8Wi6A5Fdn0bf kfSnoyZoETWnA4R1YxMtmjBwEM1XxaaLfDBbOPLxP08vQpLdziwuXO8pjGfveijo 7N3fA0knkcYKyS54FctcFkzj2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMe60VgL kVbD/gDGNkFWw+NspNkEMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoehFG0TFOyKJXv7EF7S+YnWagHTyYGPdCpkrbN8iORZ6Ss6OQzhSmU6qV5Wi hguI8MhOrhFBjQCigfpohkEgBfcZlYi6c583ICTCXMgwfdpMdydgnMp1CCuc75md IQRU87DENSfdywaaT62ovlt6DOsksNovYFwVowDDyBCYZi63D8Q2vLLc/z1m4Izz i17M1m6vMgT8a5OXVNSITASbjSW12JJLoLdrYKgg+Mta9e+ej2+8TDO7IHomo7ms gRqL1/ck0ViuboDugrme0J/oSOtiJuelxntoa3zy8XsPFYMlXWdz9GrOWrRTULBu KzQHxMcHuuUcOepYHNSm5pZsHg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:16 2026 by rpki-client