$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: KCIikkepR+gTM5nDN/JGJck5pNySY0DBbb1Dsv54Pf4= Subject key identifier: B0:DF:E4:57:9B:A8:B9:45:0F:3E:C7:5F:BE:42:70:B6:E2:D2:BB:FD Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 11B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 11A2 Signing time: Tue 24 Mar 2026 17:05:39 +0000 Manifest this update: Tue 24 Mar 2026 17:05:38 +0000 Manifest next update: Tue 31 Mar 2026 17:05:38 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: Bwx8ftPLps+nCOu7lIGqn7s9t2dv4Nuag/ddJhOOaYI=) 2: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: cXPjCHPaKFx65HIG8toHkGNypseR6/vfwRdThb3BfVw=) 3: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: h2DwpWR+IjAMG7fxYPQ9pAtPnP4GTYNqqiG9hVcrgDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4534 (0x11b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Mar 24 17:05:38 2026 GMT Not After : Mar 31 17:05:38 2026 GMT Subject: CN=69c2c463-bc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:ea:17:fd:53:ce:9e:3f:d2:2e:f2:b1:3a: 96:0c:f7:7d:d7:73:c6:d5:48:7e:89:31:a2:c3:d1: df:51:02:d8:80:61:1a:03:d6:75:f1:fe:17:95:5f: 09:75:a3:22:d5:d5:c5:ed:e0:32:03:f0:84:71:3f: 71:62:b5:a3:03:dc:8c:c9:fc:65:e9:a9:fe:64:55: d1:ea:1b:8c:0d:60:c5:4f:82:7f:0c:58:21:2b:7e: 0c:17:98:98:1b:da:94:bf:2a:55:25:1b:94:80:96: e3:dd:8a:5d:f2:21:4e:03:aa:11:24:86:59:a9:6a: 0b:b5:05:ec:b7:74:60:7c:e3:42:cc:05:3e:54:66: a5:ff:a6:74:21:5b:be:0a:af:6a:fa:27:bd:38:ed: cb:68:45:db:b5:c7:9d:f4:e4:5b:ba:06:cd:67:67: 0e:c3:6a:df:e6:55:b3:ce:e6:22:22:06:25:11:c8: 7d:42:2d:2e:1b:e2:16:8b:d1:75:5b:dd:29:18:4e: 33:c0:e8:34:fe:20:99:d8:43:d7:92:2b:82:84:1a: d5:c1:cd:98:f2:92:f1:00:ab:e3:4a:87:86:08:58: 58:a8:05:6c:f2:b5:e5:ff:f6:16:06:1d:c4:5e:57: 19:44:39:ae:e8:8e:07:49:82:a5:9a:17:2a:88:4d: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:E4:57:9B:A8:B9:45:0F:3E:C7:5F:BE:42:70:B6:E2:D2:BB:FD X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:0b:4b:77:f4:3c:3f:f9:36:45:cc:6c:31:3a:e5:4d:17: 5e:1d:58:31:32:10:5e:5f:2f:b6:80:bc:c5:29:09:4c:70:b5: 68:b9:13:27:19:ad:28:07:40:e9:93:84:dd:54:c2:52:c5:e2: cd:3c:7f:ca:0e:b3:cc:ea:c8:3e:8f:e6:bc:f3:8d:10:61:7d: 99:28:c9:50:6c:8a:e9:a7:30:2f:c9:92:23:92:2b:1c:30:ed: 7f:2f:ff:d9:48:c4:e7:bd:0f:2e:3b:d7:c6:be:85:ec:97:ab: d9:e1:59:7c:cb:88:fd:6c:0b:21:58:7f:10:7f:d8:a9:f4:82: 54:78:e0:dd:f0:35:a8:71:ab:88:0f:6d:62:a5:de:a2:0d:28: 23:de:41:d9:63:73:4a:32:90:bb:59:db:1e:83:0f:f1:ea:0d: d6:b0:75:cc:61:3d:5f:80:4c:d4:cd:4a:2e:ae:a8:02:ff:81: ae:55:13:df:42:c0:63:f8:ae:e6:8b:7f:2a:2a:6a:d3:d6:bb: 97:18:3b:c7:76:6f:b0:48:47:4a:59:e3:4b:2a:82:63:a1:0f: e3:74:f7:4f:59:d3:de:62:53:27:a3:fe:11:71:9b:6d:9c:f0: 5d:0f:77:5f:b7:9a:b1:fd:c3:9b:10:f2:f9:4c:6d:2d:64:64: 43:4c:84:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjYwMzI0MTcwNTM4WhcNMjYwMzMxMTcwNTM4WjAYMRYwFAYD VQQDEw02OWMyYzQ2My1iYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP3qF/1Tzp4/0i7ysTqWDPd913PG1Uh+iTGiw9HfUQLYgGEaA9Z18f4XlV8J daMi1dXF7eAyA/CEcT9xYrWjA9yMyfxl6an+ZFXR6huMDWDFT4J/DFghK34MF5iY G9qUvypVJRuUgJbj3Ypd8iFOA6oRJIZZqWoLtQXst3RgfONCzAU+VGal/6Z0IVu+ Cq9q+ie9OO3LaEXbtced9ORbugbNZ2cOw2rf5lWzzuYiIgYlEch9Qi0uG+IWi9F1 W90pGE4zwOg0/iCZ2EPXkiuChBrVwc2Y8pLxAKvjSoeGCFhYqAVs8rXl//YWBh3E XlcZRDmu6I4HSYKlmhcqiE0ivwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDf5Feb qLlFDz7HX75CcLbi0rv9MB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKB4LS3f0PD/5NkXMbDE65U0XXh1YMTIQXl8vtoC8xSkJTHC1aLkTJxmtKAdA 6ZOE3VTCUsXizTx/yg6zzOrIPo/mvPONEGF9mSjJUGyK6acwL8mSI5IrHDDtfy// 2UjE570PLjvXxr6F7Jer2eFZfMuI/WwLIVh/EH/YqfSCVHjg3fA1qHGriA9tYqXe og0oI95B2WNzSjKQu1nbHoMP8eoN1rB1zGE9X4BM1M1KLq6oAv+BrlUT30LAY/iu 5ot/Kipq09a7lxg7x3ZvsEhHSlnjSyqCY6EP43T3T1nT3mJTJ6P+EXGbbZzwXQ93 X7easf3DmxDy+UxtLWRkQ0yE8g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:12 2026 by rpki-client