$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: YbQiyrvcaqx9BxddGpsyumEZnfnQvgj4Uxet8SekU0g= Subject key identifier: AB:16:73:56:37:2C:90:62:C8:27:0F:BA:E0:87:5B:30:65:59:5D:3C Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: CE Signing time: Wed 25 Mar 2026 05:58:56 +0000 Manifest this update: Wed 25 Mar 2026 05:58:55 +0000 Manifest next update: Wed 01 Apr 2026 05:58:55 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: r6TMgiI4V85UJrWJWeoYV0yERJDn64OeOubcrme8zPQ=) 2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: ShsUMsywl9E1H2PFgHzZA8lMp301kfVtL6IIVaO52qw=) 3: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: JiKXROdjk0AOpr8pxMtTospRbspyoLRj1RJOfyjY5w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Mar 25 05:58:55 2026 GMT Not After : Apr 1 05:58:55 2026 GMT Subject: CN=69c379a0-20de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:1e:38:13:97:04:09:c3:9b:2f:ec:ee:ab: f7:1d:30:e5:3e:ae:21:f7:f5:18:4b:b7:12:d5:75: 5b:4e:28:bb:bf:f6:b2:cb:f9:cb:3e:11:43:a0:df: 7d:7c:67:9d:ef:ed:07:a3:a3:6d:64:0f:82:a6:b4: a8:8f:78:b5:41:12:d3:26:93:b2:09:d1:bc:d1:89: 1a:ac:cf:1a:8d:50:19:ef:b2:50:4f:e6:28:4b:e7: 5b:7e:40:2b:05:a3:6a:55:8d:bd:f4:22:0e:7a:ca: 23:47:ea:bf:62:fd:11:f2:2e:09:c0:86:00:6f:f4: 5a:61:04:d5:d9:17:a9:5d:08:6e:68:be:a1:10:fb: c5:75:76:5f:18:0a:8f:39:3e:4b:03:58:58:1b:8e: e2:ed:5e:75:88:ca:66:78:29:01:18:d6:25:37:0e: 48:ca:6d:58:53:4f:26:b1:51:b4:8b:92:db:e8:43: 0b:c5:c3:16:c1:93:1b:2d:19:39:17:fe:b3:02:78: cb:08:63:0f:0c:c9:96:3c:23:26:61:af:ed:9e:4d: 29:65:21:e1:e6:97:1e:37:84:c1:11:0b:7c:ab:b2: 2a:ee:d3:0e:05:6f:4a:66:bb:ca:35:69:06:0b:5e: 6d:54:5d:c2:bc:67:09:5f:ac:75:d5:da:a5:e6:d1: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:16:73:56:37:2C:90:62:C8:27:0F:BA:E0:87:5B:30:65:59:5D:3C X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:44:7d:04:7b:6b:15:c0:69:17:a0:c3:50:d7:15:89:e6: 6a:3b:2b:44:a8:f3:fd:c5:7a:ab:1f:37:75:86:17:e4:9e:cd: e8:24:b2:07:93:58:cb:e4:b6:27:92:ca:8f:38:ca:0a:a4:03: d4:ae:3b:c0:99:54:df:f3:bf:70:ad:3c:b1:54:6e:ae:76:cd: ad:86:34:cf:50:ad:f9:fd:89:68:9b:a6:1c:da:e9:25:e3:67: 53:dc:e1:2c:ea:29:51:33:f3:e5:bf:ad:00:da:df:a4:fd:a2: b9:1e:57:b8:1a:bf:3f:d3:cb:9d:b8:2f:84:2d:74:cb:e2:10: 56:0d:13:ce:0d:1d:df:54:a6:f2:aa:45:97:57:29:e5:89:dc: b9:bc:2b:19:60:c9:8d:18:6f:00:19:aa:48:ef:fa:5b:5a:24: aa:41:8b:bb:25:62:0b:49:33:d6:3d:61:45:97:30:dd:12:55: 9f:cc:f8:2d:84:62:05:20:86:ec:b4:49:bb:34:d7:e6:d6:aa: 96:46:ce:8a:65:c3:6f:b3:b3:f4:14:40:fb:ed:71:f3:a9:85: 70:48:5b:71:c0:26:5a:f8:2b:e2:8d:e5:33:b5:d1:4d:44:b4: 6c:8d:b0:9e:84:c2:60:4e:52:c4:a9:98:e9:00:88:dd:a2:7a: ad:c2:e0:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyRkExMTAvBgNVBAUTKDA1N0I1Mzc3NDAzODI2NzhBMDc4RjVCRjI4NEM3MjY3 OTRCOUQxMzQwHhcNMjYwMzI1MDU1ODU1WhcNMjYwNDAxMDU1ODU1WjAYMRYwFAYD VQQDEw02OWMzNzlhMC0yMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GIeOBOXBAnDmy/s7qv3HTDlPq4h9/UYS7cS1XVbTii7v/ayy/nLPhFDoN99 fGed7+0Ho6NtZA+CprSoj3i1QRLTJpOyCdG80YkarM8ajVAZ77JQT+YoS+dbfkAr BaNqVY299CIOesojR+q/Yv0R8i4JwIYAb/RaYQTV2RepXQhuaL6hEPvFdXZfGAqP OT5LA1hYG47i7V51iMpmeCkBGNYlNw5Iym1YU08msVG0i5Lb6EMLxcMWwZMbLRk5 F/6zAnjLCGMPDMmWPCMmYa/tnk0pZSHh5pceN4TBEQt8q7Iq7tMOBW9KZrvKNWkG C15tVF3CvGcJX6x11dql5tEWOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsWc1Y3 LJBiyCcPuuCHWzBlWV08MB8GA1UdIwQYMBaAFAV7U3dAOCZ4oHj1vyhMcmeUudE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTJGQS9GQTQ2RTBEMkVF MDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpuaWdlUFdfS0V4eVo1UzUw VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTJGQS9GQTQ2RTBEMkVFMDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpu aWdlUFdfS0V4eVo1UzUwVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDtEfQR7axXAaRegw1DXFYnmajsrRKjz/cV6qx83dYYX5J7N6CSyB5NYy+S2 J5LKjzjKCqQD1K47wJlU3/O/cK08sVRurnbNrYY0z1Ct+f2JaJumHNrpJeNnU9zh LOopUTPz5b+tANrfpP2iuR5XuBq/P9PLnbgvhC10y+IQVg0Tzg0d31Sm8qpFl1cp 5YncubwrGWDJjRhvABmqSO/6W1okqkGLuyViC0kz1j1hRZcw3RJVn8z4LYRiBSCG 7LRJuzTX5taqlkbOimXDb7Oz9BRA++1x86mFcEhbccAmWvgr4o3lM7XRTUS0bI2w noTCYE5SxKmY6QCI3aJ6rcLgVA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:03 2026 by rpki-client