$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: c8LjDGgV8aCp4GfAZ8IL58oH3oU6XjsFHJTn6GSIQP0= Subject key identifier: B0:F4:72:86:C8:10:CA:BB:9C:AD:62:01:DB:D1:FE:C4:CA:A1:F5:8A Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 25CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 25A9 Signing time: Tue 24 Mar 2026 15:40:51 +0000 Manifest this update: Tue 24 Mar 2026 15:40:50 +0000 Manifest next update: Tue 31 Mar 2026 15:40:50 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: sLw522HYM6/fNen+ggnKnp+oSPkdoK8hL4QCiuwkyBg=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9677 (0x25cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: Mar 24 15:40:50 2026 GMT Not After : Mar 31 15:40:50 2026 GMT Subject: CN=69c2b083-d8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:3e:65:c5:83:12:ad:be:c0:f7:aa:bb:55: 30:64:56:33:2a:45:ba:99:18:84:94:8f:79:26:3c: be:2d:a9:5b:a3:3d:49:ba:27:bc:fd:39:54:e4:5e: b5:1e:bd:08:6e:20:c5:e9:c4:ff:c2:0b:f9:1d:db: 17:b8:32:c7:87:14:9a:a1:30:5a:8f:00:96:40:c2: 2d:cd:09:ef:88:ea:41:55:6b:1b:64:77:38:67:ac: de:9f:25:3d:12:a5:02:fe:af:8e:f7:66:0a:73:f6: 4c:8c:02:4f:97:27:f8:ed:17:e3:50:29:d1:2a:1f: 38:ba:4c:fc:d2:3b:15:15:58:58:75:84:37:87:f0: 2a:a9:b7:cd:8f:b8:9b:3e:71:18:ad:2f:bd:99:2e: aa:20:e3:86:de:7b:ef:ac:96:c2:87:17:59:9d:81: b0:c5:35:52:28:75:0a:be:bd:9e:79:e3:10:1c:69: 52:cf:f8:a2:17:e0:f3:07:8c:65:99:ff:58:a1:4b: 4d:2c:a9:8c:40:3a:86:55:6b:28:b6:b5:2b:2d:b6: b0:50:ec:a8:b6:de:dc:32:56:23:dd:80:3a:fa:41: 42:4c:aa:76:b2:33:5a:dd:39:f9:d8:8f:b3:90:b7: ed:70:58:d3:66:b9:ca:b1:90:6f:e3:bb:24:01:ae: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:72:86:C8:10:CA:BB:9C:AD:62:01:DB:D1:FE:C4:CA:A1:F5:8A X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:73:23:88:ee:48:25:68:f1:38:22:9a:de:9f:ff:76:da:7e: b2:2e:ca:64:31:a4:30:5f:54:bc:8a:4b:40:95:41:33:39:81: 51:db:49:a5:d6:af:d5:3a:ff:25:6c:da:fb:9c:45:18:75:f0: 3a:2a:5b:0c:c9:80:9e:a3:bf:99:3d:3f:71:3a:c2:59:79:1f: 3e:b8:d8:10:f0:2a:ec:99:32:1a:c4:1d:1e:d7:d4:ad:0e:11: 3e:3e:02:c8:ac:f5:81:4a:af:22:ff:65:ef:c1:93:cd:c6:3e: a2:ac:7f:e8:6d:d8:67:44:95:21:dc:17:5f:af:8f:3b:fb:88: c1:c1:bf:2d:cd:73:a5:27:86:a0:e4:93:8d:17:c9:09:f1:0c: 4b:2b:be:b1:b4:03:bf:5a:3b:0e:f5:f7:db:34:87:6b:ae:ad: ac:93:80:e9:1f:f6:c4:04:5c:96:df:a6:b1:16:fb:d3:3f:d7: d0:bc:77:5e:d7:f7:95:d7:0a:b7:e0:8b:b7:9e:43:eb:51:cb: ae:66:af:e3:bb:d7:bb:0d:75:47:95:ec:f6:8e:03:40:d3:f9: 87:19:20:79:7e:43:b6:8c:dd:9b:c7:cf:c0:75:dd:b7:7d:fd: 3f:f9:1b:37:85:c5:73:18:19:6c:64:df:2a:f9:82:36:f2:88: e3:ff:79:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjYwMzI0MTU0MDUwWhcNMjYwMzMxMTU0MDUwWjAYMRYwFAYD VQQDEw02OWMyYjA4My1kOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWw+ZcWDEq2+wPequ1UwZFYzKkW6mRiElI95Jjy+Lalboz1Juie8/TlU5F61 Hr0IbiDF6cT/wgv5HdsXuDLHhxSaoTBajwCWQMItzQnviOpBVWsbZHc4Z6zenyU9 EqUC/q+O92YKc/ZMjAJPlyf47RfjUCnRKh84ukz80jsVFVhYdYQ3h/AqqbfNj7ib PnEYrS+9mS6qIOOG3nvvrJbChxdZnYGwxTVSKHUKvr2eeeMQHGlSz/iiF+DzB4xl mf9YoUtNLKmMQDqGVWsotrUrLbawUOyott7cMlYj3YA6+kFCTKp2sjNa3Tn52I+z kLftcFjTZrnKsZBv47skAa4yMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLD0cobI EMq7nK1iAdvR/sTKofWKMB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApXMjiO5IJWjxOCKa3p//dtp+si7KZDGkMF9UvIpLQJVBMzmBUdtJpdav1Tr/ JWza+5xFGHXwOipbDMmAnqO/mT0/cTrCWXkfPrjYEPAq7JkyGsQdHtfUrQ4RPj4C yKz1gUqvIv9l78GTzcY+oqx/6G3YZ0SVIdwXX6+PO/uIwcG/Lc1zpSeGoOSTjRfJ CfEMSyu+sbQDv1o7DvX32zSHa66trJOA6R/2xARclt+msRb70z/X0Lx3Xtf3ldcK t+CLt55D61HLrmav47vXuw11R5Xs9o4DQNP5hxkgeX5Dtozdm8fPwHXdt339P/kb N4XFcxgZbGTfKvmCNvKI4/95pw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:46 2026 by rpki-client