$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json) Hash identifier: TG3u+f7LcvLLNk44w0uWv/SjhNHAB1D8gY+dsVZLJ9o= Subject key identifier: D7:6B:AE:E5:4E:18:C1:D7:DC:40:40:C1:69:CF:9B:B9:43:F8:15:20 Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA Certificate serial: 0FD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft Manifest number: 0FC7 Signing time: Thu 26 Mar 2026 17:27:46 +0000 Manifest this update: Thu 26 Mar 2026 17:27:45 +0000 Manifest next update: Thu 02 Apr 2026 17:27:45 +0000 Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: SP09kQxvSMWW+QiB+m1QR/Mi1DkOOZYCXeqcuhTDyGk=) 2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: HSDF6r0vrEGGhFaSVBrgmhu0L895iD5PYpCHtPDJbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4049 (0xfd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA Validity Not Before: Mar 26 17:27:45 2026 GMT Not After : Apr 2 17:27:45 2026 GMT Subject: CN=69c56c92-f34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:be:41:04:85:bf:85:12:87:86:fb:c8:e2: 9a:fd:0a:15:04:8c:2a:08:78:21:a3:c9:fe:33:ee: c0:1e:19:ff:b7:07:6e:2e:93:4f:29:b5:5c:b5:63: ef:c0:c4:ea:2f:83:85:a2:8d:5a:28:40:ef:08:52: 95:30:af:61:f4:95:03:02:11:a2:a0:a0:e5:1a:c3: 21:16:7f:d7:9b:95:36:87:8a:80:db:cb:34:fe:3c: 1f:e4:d0:22:5b:55:75:dd:42:cc:f6:f9:99:f6:6e: 4f:c2:45:de:8b:65:ab:de:cb:4b:4a:b0:4b:20:49: b9:39:e7:b7:cf:b5:d6:81:67:3e:df:b8:08:36:31: e1:14:a4:f8:06:18:69:5f:f1:17:eb:32:70:10:17: ec:e3:55:54:14:b0:a7:a3:71:82:14:61:05:3b:6c: 23:cb:65:70:4d:83:0f:b5:4c:fb:c9:78:98:66:b9: fd:86:a1:44:a4:73:a9:61:aa:62:3d:74:0a:56:a2: bd:e4:e9:05:80:7f:e3:0c:98:35:bc:b0:4a:c0:be: f1:c0:24:a0:4a:9f:ee:58:ee:21:37:c7:67:8e:04: cd:5f:b0:4e:aa:5c:3b:af:5c:91:27:73:ea:36:44: 8e:80:d7:72:1d:2d:e5:39:b1:71:d2:00:0e:30:5e: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6B:AE:E5:4E:18:C1:D7:DC:40:40:C1:69:CF:9B:B9:43:F8:15:20 X509v3 Authority Key Identifier: keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:37:bd:ca:b5:47:2f:85:46:78:60:ff:7c:7b:1b:86:cb:b8: 03:07:6e:eb:6d:d1:c6:aa:72:b4:ab:d5:fa:39:c8:09:b3:db: 29:b4:e1:28:b9:d0:c4:d0:23:c7:6c:b9:a8:4d:44:7a:63:6d: 04:35:84:23:e5:6b:f6:86:1f:5f:14:32:4b:89:1b:cf:3e:2c: db:a6:0e:32:98:69:c3:12:45:b0:4e:5e:2a:8f:ba:95:0c:47: d1:22:ba:92:42:e1:bf:a0:a2:56:4a:c9:c7:06:88:96:8a:2d: 25:c8:43:f5:a2:64:e2:d3:76:88:5b:e1:24:c4:46:bd:bf:21: cd:11:e4:28:b8:64:a3:c2:a8:c4:40:42:e6:13:00:e7:25:67: 9e:37:88:e2:b4:77:91:71:d0:1e:66:b3:70:0d:5d:2b:b2:1a: d8:4a:96:02:d3:19:77:4b:1a:d3:b2:6a:7f:3e:14:ef:d0:5d: e7:e0:e1:ab:9d:51:cb:dc:46:b5:26:8a:e4:66:78:97:e3:21: 6b:7d:bc:bf:bb:c1:a7:91:a7:ed:08:34:b8:e3:38:08:b0:17: 18:71:5b:09:8f:50:b3:73:65:fd:c5:c8:48:f1:41:8b:35:fa: 67:4a:84:fc:e0:0c:68:fa:b6:cf:48:43:0b:e7:b5:0b:cb:9a: 42:72:61:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMjcxMTAvBgNVBAUTKDZGMzNDMjVBRDMzNjE3ODQ0MTJDNDJCMDc5ODYzM0Qw M0IyNUJFQ0EwHhcNMjYwMzI2MTcyNzQ1WhcNMjYwNDAyMTcyNzQ1WjAYMRYwFAYD VQQDEw02OWM1NmM5Mi1mMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnO++QQSFv4USh4b7yOKa/QoVBIwqCHgho8n+M+7AHhn/twduLpNPKbVctWPv wMTqL4OFoo1aKEDvCFKVMK9h9JUDAhGioKDlGsMhFn/Xm5U2h4qA28s0/jwf5NAi W1V13ULM9vmZ9m5PwkXei2Wr3stLSrBLIEm5Oee3z7XWgWc+37gINjHhFKT4Bhhp X/EX6zJwEBfs41VUFLCno3GCFGEFO2wjy2VwTYMPtUz7yXiYZrn9hqFEpHOpYapi PXQKVqK95OkFgH/jDJg1vLBKwL7xwCSgSp/uWO4hN8dnjgTNX7BOqlw7r1yRJ3Pq NkSOgNdyHS3lObFx0gAOMF5zgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdrruVO GMHX3EBAwWnPm7lD+BUgMB8GA1UdIwQYMBaAFG8zwlrTNheEQSxCsHmGM9A7Jb7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAyNy82OEY3NTkxMDcz NDYxMUU5QUQ1NjFCNDdDNEY5QUUwMi9ielBDV3RNMkY0UkJMRUt3ZVlZejBEc2x2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J6UENXdE0yRjRSQkxFS3dlWVl6MERzbHZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAyNy82OEY3NTkxMDczNDYxMUU5QUQ1NjFCNDdDNEY5QUUwMi9ielBDV3RNMkY0 UkJMRUt3ZVlZejBEc2x2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASje9yrVHL4VGeGD/fHsbhsu4Awdu623RxqpytKvV+jnICbPbKbThKLnQxNAj x2y5qE1EemNtBDWEI+Vr9oYfXxQyS4kbzz4s26YOMphpwxJFsE5eKo+6lQxH0SK6 kkLhv6CiVkrJxwaIlootJchD9aJk4tN2iFvhJMRGvb8hzRHkKLhko8KoxEBC5hMA 5yVnnjeI4rR3kXHQHmazcA1dK7Ia2EqWAtMZd0sa07Jqfz4U79Bd5+Dhq51Ry9xG tSaK5GZ4l+Mha328v7vBp5Gn7Qg0uOM4CLAXGHFbCY9Qs3Nl/cXISPFBizX6Z0qE /OAMaPq2z0hDC+e1C8uaQnJhFQ== -----END CERTIFICATE-----Generated at Fri Mar 27 00:34:03 2026 by rpki-client