$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: 0La2OIhMD4vpEOHffoGFQbn7qd5YFkE1FDaUAD0Tjqo= Subject key identifier: E2:8B:32:BC:A2:B4:D8:BB:7B:92:DA:4A:83:8A:72:EF:E7:59:B4:3F Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 01B3 Signing time: Wed 25 Mar 2026 03:21:04 +0000 Manifest this update: Wed 25 Mar 2026 03:21:03 +0000 Manifest next update: Wed 01 Apr 2026 03:21:03 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: x24wWcDVOUvKgS2ecgxNf3uifTCab+J5epLtkzG5iKA=) 2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=) 3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Mar 25 03:21:03 2026 GMT Not After : Apr 1 03:21:03 2026 GMT Subject: CN=69c354a0-f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:df:4f:11:31:e6:2c:5b:c7:f8:3f:4d:22:a7: cf:5b:74:ca:cb:1a:8f:8d:e6:29:ba:c4:25:d5:16: 46:4c:bb:b5:fc:58:41:14:f7:cd:50:c0:61:5c:e3: 71:1c:a8:43:94:a4:a6:a1:5c:80:7a:15:00:8f:93: 72:9c:f4:9e:cf:9e:3c:05:16:00:f6:ab:f9:e7:26: 97:82:a0:66:28:ef:8b:12:59:d0:55:0c:c7:de:a0: 37:24:a2:e8:66:81:a1:9e:43:58:e5:e8:a3:03:be: 25:8f:2c:06:16:25:35:85:d2:70:9f:8b:bb:6b:11: eb:19:a4:a5:68:b5:23:98:f7:77:c3:06:0e:ff:d8: 2c:f2:2e:f2:8e:d2:fb:c3:40:6b:46:6b:a5:b2:ee: 1a:1b:e4:11:9b:1a:4d:4c:69:0b:d3:89:6a:15:0b: bd:d7:b5:15:49:89:4b:1c:0e:8e:7e:56:7b:9e:ac: 08:b3:1e:90:1f:50:f4:05:c9:3e:9f:80:dc:f5:61: f0:df:60:2b:df:22:d2:90:99:8a:c1:49:43:b2:fd: d5:3a:2d:34:bd:70:d7:85:02:eb:97:bd:7b:ed:b9: cd:a3:cb:f3:a4:74:8a:41:fe:71:5b:8d:62:81:63: 29:27:74:bb:52:6e:eb:9d:83:f0:83:3a:61:3f:88: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:32:BC:A2:B4:D8:BB:7B:92:DA:4A:83:8A:72:EF:E7:59:B4:3F X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:57:8c:20:d7:9f:0a:39:a3:61:e3:ba:a3:0e:5f:d2:52:2d: bd:f3:a1:5b:5e:7f:05:a6:51:fc:98:c5:0a:f1:e8:09:60:81: c5:35:e3:64:86:b2:b8:ef:b7:09:c1:0c:f4:a5:83:35:74:35: 89:60:e0:0d:8b:08:92:2b:f8:56:57:c1:76:b8:00:07:8b:e9: 51:00:6f:91:45:ce:4c:d1:fe:d2:39:37:6d:99:c3:9e:38:15: 89:8d:72:8d:07:e4:c1:3d:0e:42:e5:a1:fe:c1:8c:44:3a:19: 48:30:de:01:82:8f:1a:0b:e8:10:a1:ca:0d:e4:af:f2:32:55: 70:85:0e:80:e2:8b:7a:73:0e:37:12:d0:b4:a8:92:b9:83:e2: 3a:7a:04:45:70:8f:80:1b:18:44:4e:dd:97:a0:e1:34:bf:bf: 1b:5e:53:84:a9:76:02:3c:55:0f:01:a4:18:3b:4f:68:a9:a6: 66:fa:a5:a5:7d:61:cd:58:aa:d6:d6:6f:b3:cd:95:b4:90:07: 1a:24:5e:06:c2:7c:71:ad:35:1a:27:3e:84:df:a8:09:e4:f8: e2:40:e4:09:b4:f3:61:94:b9:0e:b2:1f:fb:ae:69:2d:09:4f: c3:fc:33:33:77:e3:f4:ed:31:97:b7:71:c0:42:d9:ad:c2:ca: 0e:fa:01:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjYwMzI1MDMyMTAzWhcNMjYwNDAxMDMyMTAzWjAYMRYwFAYD VQQDEw02OWMzNTRhMC1mNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA599PETHmLFvH+D9NIqfPW3TKyxqPjeYpusQl1RZGTLu1/FhBFPfNUMBhXONx HKhDlKSmoVyAehUAj5NynPSez548BRYA9qv55yaXgqBmKO+LElnQVQzH3qA3JKLo ZoGhnkNY5eijA74ljywGFiU1hdJwn4u7axHrGaSlaLUjmPd3wwYO/9gs8i7yjtL7 w0BrRmulsu4aG+QRmxpNTGkL04lqFQu917UVSYlLHA6OflZ7nqwIsx6QH1D0Bck+ n4Dc9WHw32Ar3yLSkJmKwUlDsv3VOi00vXDXhQLrl7177bnNo8vzpHSKQf5xW41i gWMpJ3S7Um7rnYPwgzphP4ijlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKLMryi tNi7e5LaSoOKcu/nWbQ/MB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkFeMINefCjmjYeO6ow5f0lItvfOhW15/BaZR/JjFCvHoCWCBxTXjZIayuO+3 CcEM9KWDNXQ1iWDgDYsIkiv4VlfBdrgAB4vpUQBvkUXOTNH+0jk3bZnDnjgViY1y jQfkwT0OQuWh/sGMRDoZSDDeAYKPGgvoEKHKDeSv8jJVcIUOgOKLenMONxLQtKiS uYPiOnoERXCPgBsYRE7dl6DhNL+/G15ThKl2AjxVDwGkGDtPaKmmZvqlpX1hzViq 1tZvs82VtJAHGiReBsJ8ca01Gic+hN+oCeT44kDkCbTzYZS5DrIf+65pLQlPw/wz M3fj9O0xl7dxwELZrcLKDvoBLw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:58 2026 by rpki-client