$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: qhnLjzxIJ6dJ4tld35oJTNBBObvijbmGGdNS+qYpIqY= Subject key identifier: D8:FD:72:63:C7:3D:E0:60:F7:BA:D3:56:13:D1:4E:C6:5A:30:DC:9F Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 0985 Signing time: Tue 24 Mar 2026 19:55:19 +0000 Manifest this update: Tue 24 Mar 2026 19:55:18 +0000 Manifest next update: Tue 31 Mar 2026 19:55:18 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: Ukju8PZLtfV1VNEg7iWfrTrke1QeGt/TulWJglG9bO4=) 2: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) 3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 4: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 5: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 6: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 7: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Mar 24 19:55:18 2026 GMT Not After : Mar 31 19:55:18 2026 GMT Subject: CN=69c2ec27-9269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:da:6a:bf:78:af:cc:eb:8e:14:72:97:4d: e8:14:50:da:47:a6:e0:bf:83:dd:a9:ff:b9:da:13: 99:1e:2f:00:c4:93:58:6f:0d:b5:c5:ba:a2:0d:7e: ce:ef:74:87:d4:30:c1:2c:d5:e1:f7:ab:5a:b0:01: 5c:56:af:43:3d:3a:29:c2:1c:b9:52:2f:b7:c0:83: 1d:8f:ce:4b:f8:38:38:3b:b2:08:e9:a9:4c:28:35: ff:51:62:a1:f7:46:ac:4f:2a:e4:f3:68:39:e3:cd: cf:a8:8f:79:12:b2:09:fb:ba:84:13:31:75:ec:d5: ac:ab:4a:51:b8:d6:2b:73:1d:6c:9d:90:3a:99:6e: 2f:a0:45:b9:cb:9b:9c:08:75:11:84:d5:4c:7c:14: df:95:60:a1:0b:32:0b:18:90:fe:78:26:1d:5f:59: 15:d9:95:5c:0c:72:0d:b5:61:18:a3:ee:bb:45:bb: 55:07:c9:a3:a6:aa:2c:a2:72:a1:ea:cc:b6:e8:72: e3:be:a4:40:ba:55:09:e9:30:b3:38:76:86:88:c2: 2d:56:6a:7f:52:3a:28:a5:df:a3:08:c2:e6:5e:f3: bd:e4:6c:0f:5e:0d:98:1c:c5:bb:0f:df:66:a1:bb: 28:bf:64:a8:82:84:dc:1c:9f:b5:53:60:c3:59:b5: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:72:63:C7:3D:E0:60:F7:BA:D3:56:13:D1:4E:C6:5A:30:DC:9F X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:95:6f:9b:64:be:75:12:fb:26:0f:59:b8:4f:9f:6a:c3:99: 95:19:2e:c1:54:54:1d:5c:09:75:59:96:c1:5a:32:67:fe:2a: 55:ca:4f:0e:73:e5:41:4d:ff:70:4b:d5:a8:bb:f3:54:cb:9c: 09:78:4d:9c:5b:fb:d6:9a:1f:26:c4:7a:b6:51:5c:f9:ea:91: 1f:72:63:3a:d9:45:a5:e2:ae:25:6c:68:d9:0a:70:32:37:8c: 35:08:5b:fe:d1:31:bd:01:2c:b0:fd:44:1d:06:3e:de:09:13: 00:fe:f2:4c:b6:ee:ce:1e:5d:53:4a:40:d4:a8:ff:fe:8e:4e: aa:57:8e:d7:10:29:a3:f7:b6:dc:f4:b1:44:78:d6:b6:ec:8d: d0:73:ae:fc:be:bd:c7:7a:c1:57:b7:54:e6:0f:23:31:e5:37: 3e:8f:ac:cf:02:d4:d8:3b:15:93:da:bf:66:21:ce:84:5a:8a: d0:3d:ab:ef:b2:46:3d:84:c4:90:99:4c:6a:73:c7:d7:b0:88: 8d:5e:eb:f4:09:da:c2:bc:f3:69:1c:01:17:c4:eb:4d:5f:88: b6:6a:6f:53:f1:f5:f0:77:28:5d:ae:e8:5f:69:f6:a5:e4:88: a3:77:51:3e:df:e9:fb:ef:fe:7a:89:10:ec:a4:26:84:f0:c9: 2b:13:09:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwMzI0MTk1NTE4WhcNMjYwMzMxMTk1NTE4WjAYMRYwFAYD VQQDEw02OWMyZWMyNy05MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Yfaar94r8zrjhRyl03oFFDaR6bgv4Pdqf+52hOZHi8AxJNYbw21xbqiDX7O 73SH1DDBLNXh96tasAFcVq9DPTopwhy5Ui+3wIMdj85L+Dg4O7II6alMKDX/UWKh 90asTyrk82g5483PqI95ErIJ+7qEEzF17NWsq0pRuNYrcx1snZA6mW4voEW5y5uc CHURhNVMfBTflWChCzILGJD+eCYdX1kV2ZVcDHINtWEYo+67RbtVB8mjpqosonKh 6sy26HLjvqRAulUJ6TCzOHaGiMItVmp/Ujoopd+jCMLmXvO95GwPXg2YHMW7D99m obsov2SogoTcHJ+1U2DDWbV2AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNj9cmPH PeBg97rTVhPRTsZaMNyfMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMpVvm2S+dRL7Jg9ZuE+fasOZlRkuwVRUHVwJdVmWwVoyZ/4qVcpPDnPlQU3/ cEvVqLvzVMucCXhNnFv71pofJsR6tlFc+eqRH3JjOtlFpeKuJWxo2QpwMjeMNQhb /tExvQEssP1EHQY+3gkTAP7yTLbuzh5dU0pA1Kj//o5OqleO1xApo/e23PSxRHjW tuyN0HOu/L69x3rBV7dU5g8jMeU3Po+szwLU2DsVk9q/ZiHOhFqK0D2r77JGPYTE kJlManPH17CIjV7r9AnawrzzaRwBF8TrTV+ItmpvU/H18HcoXa7oX2n2peSIo3dR Pt/p++/+eokQ7KQmhPDJKxMJrQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:39 2026 by rpki-client