$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: T8sx1+5Bgor8YItNp84EE8jI5eb010Usb7It9yQIlSg= Subject key identifier: A0:91:85:20:73:C4:62:05:8B:A5:63:83:2C:52:95:10:18:D4:E0:42 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 0865 Signing time: Tue 24 Mar 2026 20:28:57 +0000 Manifest this update: Tue 24 Mar 2026 20:28:57 +0000 Manifest next update: Tue 31 Mar 2026 20:28:57 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: hdC4ZIQY3V1AmY+qbwiu6tUxinco/s2jyq8AuvPONBs=) 2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=) 3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Mar 24 20:28:57 2026 GMT Not After : Mar 31 20:28:57 2026 GMT Subject: CN=69c2f409-18a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:ff:ea:3e:4d:eb:76:8f:6b:a2:59:2b:9a: d0:23:54:61:bb:70:51:76:e8:54:99:a6:0b:1a:22: 5e:0b:b6:4a:76:08:02:1e:69:81:85:ed:39:f9:c1: df:91:50:56:d9:98:5a:5b:0d:fc:bf:33:a3:96:58: 2a:54:80:81:d5:07:e8:51:15:ca:af:9a:67:09:52: b7:8e:01:ed:d9:0d:81:6c:b8:7e:74:95:ac:09:89: ab:c5:02:31:e8:7c:ee:24:de:38:2a:36:73:b0:01: 33:69:76:b1:23:f8:7a:96:ba:3d:dd:f5:2c:34:dc: 0a:f9:63:a5:cd:cd:76:b3:ab:f8:25:e1:60:a9:00: 26:f8:67:69:51:90:70:77:d9:43:2d:cb:d7:4c:fd: 21:73:a4:57:6d:aa:43:33:17:20:b5:81:da:ba:c0: ed:26:23:0b:a4:cf:e6:32:58:c8:0d:aa:2c:7d:fd: 4c:40:3b:f8:64:66:8c:89:d5:5b:0a:dd:55:ec:ac: c7:5c:b8:2b:d0:89:cf:1b:e4:10:ab:3c:25:2c:88: 0b:94:b0:9f:a7:1d:33:16:a5:f8:d3:37:1b:86:ee: 61:bd:1d:16:07:51:5b:f8:d7:b9:91:5d:ca:9f:90: 6e:a6:e6:25:11:5f:c5:6d:bc:f5:3d:33:4e:22:3a: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:85:20:73:C4:62:05:8B:A5:63:83:2C:52:95:10:18:D4:E0:42 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:82:e3:50:c3:e1:41:bc:04:1a:f4:6b:6b:ca:d7:ac:4f: 2a:63:77:c8:4e:b3:74:9b:44:dd:e4:fa:7a:05:54:63:ea:4c: e7:73:73:0a:26:e9:29:bb:af:b0:18:90:e2:fc:3a:3e:83:8d: 6e:21:c7:73:03:17:54:9e:f6:9c:18:36:93:3e:0d:ca:cc:f7: 54:d8:29:80:42:99:ae:8a:e2:69:70:a6:43:41:dc:2c:a1:01: be:a4:b2:22:a1:ce:f0:ca:68:ab:8f:7e:8d:3c:7d:a9:cd:31: a3:d7:c6:6d:2c:a0:93:19:38:6a:52:65:28:3a:57:c8:11:05: c3:3e:fa:ec:63:32:9e:1a:9a:dc:3b:b1:d0:2e:4c:36:ba:ba: 02:b8:6e:1c:bf:42:f1:e9:73:2d:8c:ee:d9:b6:11:5e:a3:69: 21:63:47:10:c6:9a:ee:7b:33:75:83:03:c1:4d:cc:22:31:aa: 4a:75:8b:ef:14:22:3f:a5:87:3b:be:fe:18:29:27:64:ff:20: 48:e8:10:b4:8f:7f:bb:da:f7:9d:74:f2:12:69:ad:90:93:47: 99:57:46:b9:aa:05:4f:5d:58:f4:9a:2f:1d:5b:f1:42:81:d6: b2:78:2f:ad:e1:af:56:c3:70:b2:78:8a:33:1e:c6:38:a7:aa: f8:2f:e8:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjYwMzI0MjAyODU3WhcNMjYwMzMxMjAyODU3WjAYMRYwFAYD VQQDEw02OWMyZjQwOS0xOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobP/6j5N63aPa6JZK5rQI1Rhu3BRduhUmaYLGiJeC7ZKdggCHmmBhe05+cHf kVBW2ZhaWw38vzOjllgqVICB1QfoURXKr5pnCVK3jgHt2Q2BbLh+dJWsCYmrxQIx 6HzuJN44KjZzsAEzaXaxI/h6lro93fUsNNwK+WOlzc12s6v4JeFgqQAm+GdpUZBw d9lDLcvXTP0hc6RXbapDMxcgtYHausDtJiMLpM/mMljIDaosff1MQDv4ZGaMidVb Ct1V7KzHXLgr0InPG+QQqzwlLIgLlLCfpx0zFqX40zcbhu5hvR0WB1Fb+Ne5kV3K n5BupuYlEV/Fbbz1PTNOIjoSNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCRhSBz xGIFi6VjgyxSlRAY1OBCMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJSC41DD4UG8BBr0a2vK16xPKmN3yE6zdJtE3eT6egVUY+pM53NzCibpKbuv sBiQ4vw6PoONbiHHcwMXVJ72nBg2kz4Nysz3VNgpgEKZroriaXCmQ0HcLKEBvqSy IqHO8Mpoq49+jTx9qc0xo9fGbSygkxk4alJlKDpXyBEFwz767GMynhqa3Dux0C5M Nrq6ArhuHL9C8elzLYzu2bYRXqNpIWNHEMaa7nszdYMDwU3MIjGqSnWL7xQiP6WH O77+GCknZP8gSOgQtI9/u9r3nXTyEmmtkJNHmVdGuaoFT11Y9JovHVvxQoHWsngv reGvVsNwsniKMx7GOKeq+C/oQA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:55 2026 by rpki-client