$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: TLoVbjqol6HFfmYwzoH0v1zPsde/rPDLM9yFrIfZEmU= Subject key identifier: C3:BE:8F:6B:3A:D9:A8:EC:76:6D:15:6D:1C:23:2D:2F:DC:E4:1B:F3 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 066A Signing time: Tue 24 Mar 2026 22:17:52 +0000 Manifest this update: Tue 24 Mar 2026 22:17:51 +0000 Manifest next update: Tue 31 Mar 2026 22:17:51 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: eNGlg+dovKJwxi+zykNovsyVSd7aWkYFVXThffb7T2U=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 7GG4HXVAAliKVWU1/QAGmEXY38iid1/8BMRmSndCqBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Mar 24 22:17:51 2026 GMT Not After : Mar 31 22:17:51 2026 GMT Subject: CN=69c30d90-9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:b2:2d:e7:fe:ee:31:87:a1:f1:c8:28:bd: 77:c7:26:c2:2c:4a:00:a7:f7:99:49:de:34:c9:6d: 2d:7d:be:e3:67:d7:39:12:56:0b:57:0e:f4:57:98: 3c:1e:71:b7:4b:fb:cd:b4:57:05:3b:64:73:d0:ef: 6c:51:0d:9a:55:eb:47:c0:a7:ed:f1:2a:68:c0:ac: 9b:4c:3b:e1:43:8b:eb:53:e2:c8:67:86:3b:dd:3c: 67:ff:0c:28:9e:1c:54:90:7c:58:ae:6d:0f:12:5f: 04:21:8f:ed:51:2b:73:de:d3:6c:43:4b:98:f4:bf: fe:8d:da:ce:52:a0:b5:a8:39:16:c4:01:86:20:6b: 3b:04:e9:69:05:0a:9e:47:68:27:a0:f1:11:d6:d7: 85:7b:c9:f8:ae:73:56:5f:32:fc:dd:ef:48:c6:cb: 41:13:a5:09:5f:3c:f4:2d:a6:3c:52:79:cb:4e:68: d4:ef:f4:7e:d5:79:73:42:ff:c3:47:ac:eb:ec:5e: dd:65:08:b8:d4:59:ad:ca:aa:fb:9c:86:af:75:74: 94:79:72:52:bf:5b:40:58:d3:68:88:51:f2:ef:55: ba:de:77:f4:ae:6f:7c:7b:41:32:5b:e2:32:77:92: 71:9d:af:bb:1b:d0:86:64:fb:46:99:55:93:ba:c6: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BE:8F:6B:3A:D9:A8:EC:76:6D:15:6D:1C:23:2D:2F:DC:E4:1B:F3 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f5:9c:3f:b0:7f:4e:0c:d7:e5:65:40:fc:3b:a8:01:87:df: d7:31:8d:98:38:d9:56:9d:b4:c1:24:fe:b4:d6:bd:11:93:59: 86:56:3b:05:9d:c5:19:17:4c:0c:ec:86:1f:e0:72:af:7e:22: 54:ac:8a:39:cf:55:bf:a8:05:9d:5b:7a:a4:6d:66:39:7c:77: dc:81:d7:5f:f3:4d:eb:68:2f:c3:ba:fd:29:55:1c:21:93:e0: 7a:bf:d0:01:69:10:1f:4b:b9:f1:24:87:11:5e:12:6a:8d:17: 57:69:8d:91:b5:81:cf:5e:37:8f:08:14:63:7f:27:8b:c0:e6: 56:13:a3:21:27:a1:77:18:dd:96:65:70:f5:1a:68:7b:2a:21: 18:ae:b7:70:70:f6:0f:7d:70:b3:b8:b5:04:49:a1:d1:09:9b: a2:c5:9a:93:bb:c5:88:cc:a5:46:a8:54:01:cc:2b:d5:69:d3: 21:be:a1:98:ca:07:10:d8:82:a2:fa:ca:93:70:38:5f:78:92: 86:7f:16:ea:0a:98:91:c7:ff:4c:0d:44:c5:ee:3f:f7:39:77: c6:ef:e0:4f:8c:15:64:9c:01:32:86:bb:5e:8e:39:63:55:d0: 4e:3d:c7:7d:82:84:28:65:29:fa:8c:4b:24:08:2e:b6:67:9f: d2:4d:5c:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjYwMzI0MjIxNzUxWhcNMjYwMzMxMjIxNzUxWjAYMRYwFAYD VQQDEw02OWMzMGQ5MC05NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVKyLef+7jGHofHIKL13xybCLEoAp/eZSd40yW0tfb7jZ9c5ElYLVw70V5g8 HnG3S/vNtFcFO2Rz0O9sUQ2aVetHwKft8SpowKybTDvhQ4vrU+LIZ4Y73Txn/wwo nhxUkHxYrm0PEl8EIY/tUStz3tNsQ0uY9L/+jdrOUqC1qDkWxAGGIGs7BOlpBQqe R2gnoPER1teFe8n4rnNWXzL83e9IxstBE6UJXzz0LaY8UnnLTmjU7/R+1XlzQv/D R6zr7F7dZQi41Fmtyqr7nIavdXSUeXJSv1tAWNNoiFHy71W63nf0rm98e0EyW+Iy d5Jxna+7G9CGZPtGmVWTusYpLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMO+j2s6 2ajsdm0VbRwjLS/c5BvzMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ/WcP7B/TgzX5WVA/DuoAYff1zGNmDjZVp20wST+tNa9EZNZhlY7BZ3FGRdM DOyGH+Byr34iVKyKOc9Vv6gFnVt6pG1mOXx33IHXX/NN62gvw7r9KVUcIZPger/Q AWkQH0u58SSHEV4Sao0XV2mNkbWBz143jwgUY38ni8DmVhOjISehdxjdlmVw9Rpo eyohGK63cHD2D31ws7i1BEmh0QmbosWak7vFiMylRqhUAcwr1WnTIb6hmMoHENiC ovrKk3A4X3iShn8W6gqYkcf/TA1Exe4/9zl3xu/gT4wVZJwBMoa7Xo45Y1XQTj3H fYKEKGUp+oxLJAgutmef0k1chw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:41 2026 by rpki-client