$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: N1EvI9mDwUeZf5LDrMADWV4LoFogv1le1cK04KogFUM= Subject key identifier: 31:6E:8D:03:69:07:A4:AC:2A:9D:92:AA:BA:9E:80:85:6E:BB:96:AA Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D2E Signing time: Tue 12 May 2026 18:17:35 +0000 Manifest this update: Tue 12 May 2026 18:17:34 +0000 Manifest next update: Tue 19 May 2026 18:17:34 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: w78kjZat3avsnSfhtXUG0ZBhhc0LFOylactICFp9Dzs=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=) 3: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: ctpsa/trJni9LM1rAYyksKSnW171LcLv21VwXaH0Ntc=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: q+D1BaF/+szKNtZtYNZBG95tRE4wHMX208TqLnCcHHk=) 5: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: May 12 18:17:34 2026 GMT Not After : May 19 18:17:34 2026 GMT Subject: CN=6a036ebe-dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:1e:40:fd:72:86:fc:b7:75:4a:94:d1:75: 2a:ce:f6:a8:ba:72:d2:87:7f:d6:8a:ad:8f:77:ec: 3d:f0:d1:41:f7:8a:f1:4b:f5:fd:c7:35:da:85:16: 07:ce:53:c1:a6:f0:f4:3e:18:16:fa:b9:e6:47:9c: 89:ab:b0:ca:b3:de:76:6f:b5:e2:c2:99:61:21:ff: a1:0e:20:ca:bd:79:ab:76:91:c1:77:ca:c6:ce:40: 44:05:df:ea:0d:1f:e0:0f:69:f2:93:7a:84:c6:e6: 57:ea:4a:e3:9d:bd:5a:de:a7:77:49:6a:7e:62:a4: a6:f2:24:ea:59:2d:d7:2d:21:96:a6:ae:4d:4a:17: 01:b6:f0:0c:48:29:13:a4:43:95:b1:90:e9:7f:eb: 79:ad:0f:52:0d:88:b4:8f:17:96:a8:b6:19:31:76: 0d:23:8c:c9:0c:8c:56:14:8c:12:a1:0c:ab:2f:22: 1c:c2:b1:3d:5e:0e:64:08:6d:b4:19:43:a6:16:16: 38:91:6f:d7:36:1b:ad:c9:8e:b6:0a:94:00:eb:7c: 26:d7:0c:87:9d:1f:9c:21:f2:6f:15:2f:4a:e6:1c: 8e:bb:c0:7c:28:25:c9:04:6b:8a:d8:95:a1:c0:67: 85:9b:9e:81:b9:08:af:88:cc:bc:0b:cd:45:e6:18: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6E:8D:03:69:07:A4:AC:2A:9D:92:AA:BA:9E:80:85:6E:BB:96:AA X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ca:0c:46:d9:ee:eb:e3:85:b1:09:a7:67:ce:70:05:31:8a: f0:34:d6:59:b3:48:71:4d:3e:de:14:8c:06:ef:bf:5f:b3:9d: 25:87:d7:cb:dd:58:f4:07:f0:0b:75:1d:6c:0a:e5:ec:53:65: 69:de:9c:d0:5a:07:a8:47:1f:be:81:1a:99:36:37:2c:0a:1d: e4:c7:1b:8a:c2:84:04:90:07:b3:32:71:d4:c4:0c:d4:e2:54: 68:9a:20:45:2c:d1:67:fb:f2:18:93:bf:70:bf:61:80:0c:12: 53:ee:05:0f:d0:f0:7f:42:7f:06:fc:d2:cb:83:3e:b5:69:5d: 51:64:76:c1:82:86:7e:68:ed:74:a8:6d:28:b3:75:03:47:25: 6f:1a:0a:7a:37:01:fb:c2:83:3c:51:b2:9c:29:8c:e2:44:31: 5d:d6:2e:f8:33:c6:91:76:18:3f:fe:b8:17:60:36:60:ac:ca: 12:ee:d7:a7:d4:67:35:6b:77:9b:4e:df:27:5c:ae:1e:13:f5: bd:b2:fb:12:d5:a5:46:b0:62:86:0a:1d:1c:54:9e:5d:88:68: 48:ec:64:0f:7e:b1:4a:ed:64:88:34:ee:a3:45:87:7b:b5:42: 9d:0b:d7:f2:5d:5d:32:11:6c:f8:cb:29:01:64:37:14:d3:98: 02:ed:71:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwNTEyMTgxNzM0WhcNMjYwNTE5MTgxNzM0WjAYMRYwFAYD VQQDEw02YTAzNmViZS1kZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6ceQP1yhvy3dUqU0XUqzvaounLSh3/Wiq2Pd+w98NFB94rxS/X9xzXahRYH zlPBpvD0PhgW+rnmR5yJq7DKs952b7XiwplhIf+hDiDKvXmrdpHBd8rGzkBEBd/q DR/gD2nyk3qExuZX6krjnb1a3qd3SWp+YqSm8iTqWS3XLSGWpq5NShcBtvAMSCkT pEOVsZDpf+t5rQ9SDYi0jxeWqLYZMXYNI4zJDIxWFIwSoQyrLyIcwrE9Xg5kCG20 GUOmFhY4kW/XNhutyY62CpQA63wm1wyHnR+cIfJvFS9K5hyOu8B8KCXJBGuK2JWh wGeFm56BuQiviMy8C81F5hihqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFujQNp B6SsKp2SqrqegIVuu5aqMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMoMRtnu6+OFsQmnZ85wBTGK8DTWWbNIcU0+3hSMBu+/X7OdJYfXy91Y9Afw C3UdbArl7FNlad6c0FoHqEcfvoEamTY3LAod5McbisKEBJAHszJx1MQM1OJUaJog RSzRZ/vyGJO/cL9hgAwSU+4FD9Dwf0J/BvzSy4M+tWldUWR2wYKGfmjtdKhtKLN1 A0clbxoKejcB+8KDPFGynCmM4kQxXdYu+DPGkXYYP/64F2A2YKzKEu7Xp9RnNWt3 m07fJ1yuHhP1vbL7EtWlRrBihgodHFSeXYhoSOxkD36xSu1kiDTuo0WHe7VCnQvX 8l1dMhFs+MspAWQ3FNOYAu1xyA== -----END CERTIFICATE-----Generated at Wed May 13 12:16:48 2026 by rpki-client