$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: bCHlBptr8zuazp5jleI1thBAUkwyEZ6heev4WRdkLpo= Subject key identifier: 65:DD:49:C0:07:94:04:48:66:61:60:93:DB:78:9D:DF:76:08:D0:B2 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 0159 Signing time: Wed 25 Mar 2026 04:54:08 +0000 Manifest this update: Wed 25 Mar 2026 04:54:08 +0000 Manifest next update: Wed 01 Apr 2026 04:54:08 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: TQldlMGhvz14i3mLQEl6uQzlATF3fDiKFj/oFZhk3DI=) 2: FA414880107B11F09A6AF277C4F9AE02.roa (hash: 7CrcHnX9u7Qh9wpxaS4RWZSSKmnBWujTJ32kRlMQGM0=) 3: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: KBwZ0Bh81Ox2IUFyz9I7ijbEOAfndojyLmDer3zkH74=) 4: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: ElmyWXvCHo+AUoV8EKF8B3bmRpxGFQmZWv8iV6gr7rs=) 5: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: WP9+5Ms1ChWYZyb/nmIxHwJL09xTjBwNcIuk6ZDgaos=) 6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: Rb7qYVEqngyzVprIHtHroEk3Tc1sKvHHk4W+QyxuyQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Mar 25 04:54:08 2026 GMT Not After : Apr 1 04:54:08 2026 GMT Subject: CN=69c36a70-91e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:79:73:48:d1:4a:c0:c4:0c:48:63:8f:bc: 8f:bf:76:aa:a9:0c:74:37:3e:f8:ae:e3:52:33:e5: fd:3b:b6:58:62:5f:c3:dd:21:c9:99:c4:24:ff:c0: 63:47:bb:67:c5:f4:08:65:77:2f:d3:bd:a9:1d:9f: f5:73:ff:d2:4e:63:34:75:42:fd:a0:44:37:52:33: ec:3f:5e:1c:06:e1:02:b4:17:58:76:fc:d4:74:c5: 25:70:e5:4c:4a:76:83:85:2d:2a:61:dd:0f:c7:f6: f6:69:ba:e5:73:3c:81:13:97:9f:b3:71:37:91:fa: 55:d0:91:14:b0:97:49:d1:43:3a:b6:07:bc:f8:0a: 48:03:18:65:5d:90:0b:76:c0:8f:c6:0a:5b:a8:83: 55:99:1b:46:2b:0e:77:85:ec:80:a7:30:c2:ac:f4: ae:26:cd:b7:a8:b0:f9:f3:70:79:be:b8:4f:76:ca: d3:85:8e:18:f5:7c:fa:c2:9d:6d:52:28:41:04:88: 53:e5:83:25:90:5e:f8:e3:86:52:3d:84:ca:06:c5: 82:80:79:6a:c6:c4:a1:09:5d:d3:52:64:54:fb:7e: 83:1e:3f:80:54:31:ae:8f:27:25:74:2a:d6:6d:ed: 1a:4c:43:38:80:aa:ed:d8:5c:d1:ac:13:e1:70:df: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:49:C0:07:94:04:48:66:61:60:93:DB:78:9D:DF:76:08:D0:B2 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0a:2a:87:3d:d4:9e:18:1e:f4:95:86:dd:25:0c:0c:24:68: 18:71:fa:f5:59:60:cb:3d:a6:c8:65:d0:f3:3b:1d:d1:b8:a3: de:80:99:43:d3:7f:90:8e:91:90:1c:df:39:6b:d8:f4:d3:23: 82:11:ad:f3:ac:3a:2d:5f:a9:29:65:4e:dd:d9:b6:ce:77:30: ef:34:92:be:9e:88:6f:f0:d4:6f:0c:32:47:bd:5c:7c:72:f0: 73:38:87:cb:38:37:5d:63:66:26:3d:29:02:30:f1:51:0c:3f: 20:85:eb:a7:19:75:32:bc:04:da:ae:d7:aa:10:b8:c6:ea:5d: e9:c5:26:28:97:3f:6d:23:ea:a6:64:36:6b:28:60:39:0d:6d: e4:eb:d6:b5:36:58:c9:51:25:91:b6:70:0d:df:83:c1:74:be: a3:53:a3:b3:84:a6:d0:74:ad:d1:87:93:8f:1f:73:e4:72:98: 83:1b:09:a0:74:48:f7:fe:34:ad:a5:6d:b0:d7:e1:88:25:83: 1d:28:b1:23:ec:88:85:0c:ad:63:16:b5:ba:60:c5:92:b1:b0: 06:c2:21:56:48:85:d7:ba:98:b2:b0:c4:76:3f:05:8a:73:1e: 02:ff:ed:6a:eb:df:4b:28:11:bd:16:a4:3e:77:b5:99:84:22: 49:0b:e8:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjYwMzI1MDQ1NDA4WhcNMjYwNDAxMDQ1NDA4WjAYMRYwFAYD VQQDEw02OWMzNmE3MC05MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkO55c0jRSsDEDEhjj7yPv3aqqQx0Nz74ruNSM+X9O7ZYYl/D3SHJmcQk/8Bj R7tnxfQIZXcv072pHZ/1c//STmM0dUL9oEQ3UjPsP14cBuECtBdYdvzUdMUlcOVM SnaDhS0qYd0Px/b2abrlczyBE5efs3E3kfpV0JEUsJdJ0UM6tge8+ApIAxhlXZAL dsCPxgpbqINVmRtGKw53heyApzDCrPSuJs23qLD583B5vrhPdsrThY4Y9Xz6wp1t UihBBIhT5YMlkF7444ZSPYTKBsWCgHlqxsShCV3TUmRU+36DHj+AVDGujycldCrW be0aTEM4gKrt2FzRrBPhcN9pFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXdScAH lARIZmFgk9t4nd92CNCyMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh Wl95NjFZSmhlM3VxOHNNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQoqhz3Unhge9JWG3SUMDCRoGHH69Vlgyz2myGXQ8zsd0bij3oCZQ9N/kI6R kBzfOWvY9NMjghGt86w6LV+pKWVO3dm2zncw7zSSvp6Ib/DUbwwyR71cfHLwcziH yzg3XWNmJj0pAjDxUQw/IIXrpxl1MrwE2q7XqhC4xupd6cUmKJc/bSPqpmQ2ayhg OQ1t5OvWtTZYyVElkbZwDd+DwXS+o1Ojs4Sm0HSt0YeTjx9z5HKYgxsJoHRI9/40 raVtsNfhiCWDHSixI+yIhQytYxa1umDFkrGwBsIhVkiF17qYsrDEdj8FinMeAv/t auvfSygRvRakPne1mYQiSQvo/w== -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:42 2026 by rpki-client