$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: 6LfSvtwexlkyQz6V2E5dd0izA/jAlrpStgMaybC4OQA= Subject key identifier: DB:C0:67:81:67:1B:40:01:86:58:58:D9:42:24:30:20:8B:24:5C:F5 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 0532 Signing time: Tue 24 Mar 2026 23:17:47 +0000 Manifest this update: Tue 24 Mar 2026 23:17:46 +0000 Manifest next update: Tue 31 Mar 2026 23:17:46 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: UBVcd9YM6BuvfKsSBvJsVELyMFKI9WAKKNy7DWIyHPo=) 2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Mar 24 23:17:46 2026 GMT Not After : Mar 31 23:17:46 2026 GMT Subject: CN=69c31b9a-e770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:54:11:f8:55:39:06:cd:71:6c:8e:99:af: f9:c8:af:b3:92:99:9b:e0:32:6b:54:07:fb:b5:77: 2b:88:07:7e:fd:f3:68:17:a7:9e:4c:cc:bf:a8:37: f8:84:70:0e:99:d5:bf:51:44:e3:65:0b:b1:d7:02: 5c:bc:77:bb:2a:da:d3:4d:10:fb:aa:c1:25:c9:31: ec:6e:c5:71:c1:95:af:c8:3c:9e:dc:ae:cf:c8:e7: b9:bc:5b:c1:e5:7f:c9:ff:e9:d1:61:c4:99:65:1d: ba:15:e2:b6:3a:51:37:22:34:7d:ca:62:53:85:24: 65:e9:a6:34:11:2a:e6:ba:99:78:2d:27:5a:1f:2b: 81:0c:67:38:8d:e0:4f:13:e4:b6:62:ff:61:e8:9a: 5d:e1:a0:c8:62:60:06:d6:f8:a1:bc:87:cc:a2:77: ca:f2:3c:89:26:fa:fd:af:78:01:64:f8:27:ae:2d: 22:8e:3e:de:55:b1:ce:2a:70:5b:db:0b:81:2a:fc: f1:19:a5:4c:bf:6d:49:79:69:e8:29:d1:36:54:fe: 2a:23:9f:ba:0d:85:cc:91:d9:b8:9e:f1:44:cf:fd: e3:46:64:b9:2b:c3:ed:71:54:32:15:f8:b8:7a:66: 3c:a0:db:c3:3e:95:a5:37:40:e0:2b:b9:73:b3:e8: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:67:81:67:1B:40:01:86:58:58:D9:42:24:30:20:8B:24:5C:F5 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:45:b5:df:36:65:63:60:ec:a2:40:51:ac:66:86:79:9f:49: 84:93:3b:6b:48:57:b0:74:23:c9:5b:84:f7:28:ac:85:ec:84: ab:db:73:98:5b:47:d5:8a:cb:63:e8:40:40:1c:91:dd:06:43: c9:29:ae:89:8a:b1:85:a2:4c:94:35:31:0f:91:e9:61:c6:3d: bb:2a:3b:4f:7b:26:fc:dc:9d:79:ac:ef:fa:cf:2e:7a:b7:28: ed:6d:dc:a5:b6:1b:7b:95:24:b7:3c:b2:61:6f:3d:83:76:5d: a9:ba:a2:d7:8d:07:33:75:f0:8e:09:10:8f:c7:e3:03:ef:aa: b6:f0:b2:bd:1e:48:04:1c:5d:15:2a:8a:7a:49:f7:01:f5:9d: b7:ac:1e:cf:ab:e0:e8:42:a3:5f:af:3b:e9:75:3d:67:a0:1d: 6f:e2:2b:1f:45:5b:1b:ae:6a:44:94:d6:cb:94:a3:aa:31:0a: 6a:92:76:f2:92:2d:be:89:71:77:be:28:ba:76:26:f6:ca:2f: 96:6f:2f:3a:cc:87:aa:96:2d:03:5b:ed:e7:db:b2:e2:ca:16: 46:3b:aa:e7:9e:3e:a1:6d:63:a3:ab:29:da:d5:d7:29:f5:89: b7:b4:ce:7c:4e:4d:10:e1:ba:06:78:4c:91:65:85:e2:cc:83: 14:06:ae:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjYwMzI0MjMxNzQ2WhcNMjYwMzMxMjMxNzQ2WjAYMRYwFAYD VQQDEw02OWMzMWI5YS1lNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsztUEfhVOQbNcWyOma/5yK+zkpmb4DJrVAf7tXcriAd+/fNoF6eeTMy/qDf4 hHAOmdW/UUTjZQux1wJcvHe7KtrTTRD7qsElyTHsbsVxwZWvyDye3K7PyOe5vFvB 5X/J/+nRYcSZZR26FeK2OlE3IjR9ymJThSRl6aY0ESrmupl4LSdaHyuBDGc4jeBP E+S2Yv9h6Jpd4aDIYmAG1vihvIfMonfK8jyJJvr9r3gBZPgnri0ijj7eVbHOKnBb 2wuBKvzxGaVMv21JeWnoKdE2VP4qI5+6DYXMkdm4nvFEz/3jRmS5K8PtcVQyFfi4 emY8oNvDPpWlN0DgK7lzs+jb6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvAZ4Fn G0ABhlhY2UIkMCCLJFz1MB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVUW13zZlY2DsokBRrGaGeZ9JhJM7a0hXsHQjyVuE9yisheyEq9tzmFtH1YrL Y+hAQByR3QZDySmuiYqxhaJMlDUxD5HpYcY9uyo7T3sm/Nydeazv+s8uerco7W3c pbYbe5UktzyyYW89g3Zdqbqi140HM3XwjgkQj8fjA++qtvCyvR5IBBxdFSqKekn3 AfWdt6wez6vg6EKjX6876XU9Z6Adb+IrH0VbG65qRJTWy5SjqjEKapJ28pItvolx d74ounYm9sovlm8vOsyHqpYtA1vt59uy4soWRjuq554+oW1jo6sp2tXXKfWJt7TO fE5NEOG6BnhMkWWF4syDFAaujg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:42 2026 by rpki-client