$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: ESJhT3J5irAtGiQee7EOHlcVaJb/15SHQev0LHM2LQs= Subject key identifier: 64:C3:E3:30:AA:C6:AA:1E:3D:8A:5C:4E:58:93:71:BF:FA:D1:1E:C4 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 089F Signing time: Tue 24 Mar 2026 20:18:28 +0000 Manifest this update: Tue 24 Mar 2026 20:18:28 +0000 Manifest next update: Tue 31 Mar 2026 20:18:28 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: +zYisnx9wS37QSNIA57jPr+B/3kvJB9rRuE7DlroFd8=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: Y/u7H/M9ezhCW7Alg5EFaom2eH6uNFYYtjc9KkM3gSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Mar 24 20:18:28 2026 GMT Not After : Mar 31 20:18:28 2026 GMT Subject: CN=69c2f194-37e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:1a:d6:a8:d5:27:d8:76:eb:aa:9b:1d:21: a1:5c:5c:07:dc:4b:ee:b6:25:2c:a9:3d:54:52:7b: 54:a4:84:83:ba:1d:9a:2f:d2:d1:57:85:ba:a4:b6: c1:2d:f8:9f:25:41:ed:54:bb:12:2b:68:09:53:ce: ee:97:62:1a:bf:88:f4:62:8f:0e:e8:c2:86:c2:60: d6:a6:29:dd:4c:af:fc:75:1b:fa:76:da:a4:3b:f2: ef:71:61:3c:2a:f8:a9:c1:df:2d:15:67:5b:39:66: c4:dd:f4:2d:ac:69:f3:6a:11:6c:f1:91:72:87:b5: 09:ee:4d:8e:c1:8e:00:ed:aa:a4:a9:0e:8a:b9:88: 54:1e:05:f4:c5:9b:59:ed:0b:d0:fa:5a:79:b3:bc: ef:78:47:ce:7d:1a:33:3d:11:bf:7f:08:c6:3d:f1: 79:b7:3d:fd:0b:e1:13:65:43:5d:a1:37:4a:aa:1d: 34:60:60:b4:af:b4:d4:a9:ef:35:3d:a5:f0:f9:8a: 92:a1:5a:22:fc:4f:79:85:c0:c1:0e:7c:2f:54:93: 23:26:13:81:4d:8c:0a:dc:d6:9c:68:dc:f6:78:e1: 00:63:56:cf:11:69:33:b7:3f:bd:b5:93:3c:89:2e: 56:b9:79:84:cc:c6:18:47:ca:a3:b5:b2:38:2d:c8: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:E3:30:AA:C6:AA:1E:3D:8A:5C:4E:58:93:71:BF:FA:D1:1E:C4 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e0:00:05:55:50:33:39:31:05:bc:49:e9:d3:b1:6b:b2:39: 04:3b:7f:cf:0b:19:15:0a:cc:9b:02:2f:c9:9c:25:56:cc:23: 1e:70:33:5f:56:4f:ae:8d:a2:4f:3b:b5:74:66:d9:53:ee:7f: d0:d8:4f:1a:35:79:2b:29:96:35:07:5f:91:34:12:d1:59:c1: d0:65:08:4f:94:5c:74:d1:94:1e:75:1b:24:5d:21:6c:48:42: fa:ea:55:c5:cb:1c:4a:5a:ee:90:4b:9b:58:bb:fa:26:17:aa: 76:cb:34:88:13:1a:08:38:53:2e:9b:09:3e:3a:95:2f:df:59: 1b:4e:43:ae:7d:18:09:73:8f:0b:22:4c:96:6c:29:fd:86:36: 12:de:46:3c:ba:fa:b0:a4:6e:fc:97:84:7f:05:ed:4f:f1:2a: d0:ee:1f:6a:2e:3e:90:11:1a:4c:86:c5:1e:68:45:fb:72:2a: be:16:3c:ea:50:b1:9c:87:f5:16:1b:67:30:ca:d2:38:fa:8f: 20:26:40:05:98:b4:e0:09:50:d3:1c:42:4a:96:ae:af:5c:eb: b7:67:3f:64:c2:f8:6f:08:d9:5c:da:bd:a8:77:a1:1d:4f:7b: ac:6b:a3:0e:27:9c:49:f3:88:49:99:b2:32:fd:7b:08:d2:18: 54:98:97:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjYwMzI0MjAxODI4WhcNMjYwMzMxMjAxODI4WjAYMRYwFAYD VQQDEw02OWMyZjE5NC0zN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg8a1qjVJ9h266qbHSGhXFwH3EvutiUsqT1UUntUpISDuh2aL9LRV4W6pLbB LfifJUHtVLsSK2gJU87ul2Iav4j0Yo8O6MKGwmDWpindTK/8dRv6dtqkO/LvcWE8 Kvipwd8tFWdbOWbE3fQtrGnzahFs8ZFyh7UJ7k2OwY4A7aqkqQ6KuYhUHgX0xZtZ 7QvQ+lp5s7zveEfOfRozPRG/fwjGPfF5tz39C+ETZUNdoTdKqh00YGC0r7TUqe81 PaXw+YqSoVoi/E95hcDBDnwvVJMjJhOBTYwK3NacaNz2eOEAY1bPEWkztz+9tZM8 iS5WuXmEzMYYR8qjtbI4LciyMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTD4zCq xqoePYpcTliTcb/60R7EMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATuAABVVQMzkxBbxJ6dOxa7I5BDt/zwsZFQrMmwIvyZwlVswjHnAzX1ZPro2i Tzu1dGbZU+5/0NhPGjV5KymWNQdfkTQS0VnB0GUIT5RcdNGUHnUbJF0hbEhC+upV xcscSlrukEubWLv6Jheqdss0iBMaCDhTLpsJPjqVL99ZG05Drn0YCXOPCyJMlmwp /YY2Et5GPLr6sKRu/JeEfwXtT/Eq0O4fai4+kBEaTIbFHmhF+3IqvhY86lCxnIf1 FhtnMMrSOPqPICZABZi04AlQ0xxCSpaur1zrt2c/ZML4bwjZXNq9qHehHU97rGuj DiecSfOISZmyMv17CNIYVJiXOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:49 2026 by rpki-client