$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: J2K0f5ZOj9CpftExA3aHT3vHjQ8RlhZ1RHVpqnfkzEI= Subject key identifier: 34:12:10:96:31:36:17:75:29:0F:E6:8D:7D:FD:8F:4F:20:26:D0:EB Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D13 Signing time: Tue 24 Mar 2026 18:07:24 +0000 Manifest this update: Tue 24 Mar 2026 18:07:24 +0000 Manifest next update: Tue 31 Mar 2026 18:07:24 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: zMEiLv9CIIYrZKZH1re+0dcfUhtMvxAuERF/9uSvtsE=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: jaXolcx4AbEHbGm0tsO9DjPQ+oN9ZYfJ9/ifRsFMGYg=) 3: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: /Tvplkmm6qxVmlC51qbOfmRirpoi54XXMcLh/gPSqV0=) 4: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: gjazV/iVCkpQTSN3FdEKb8gzMy16E4WeeBKJNLMtc/Y=) 5: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: N/PTmxsd2qWDIg6nnrJkOUd5Pv8F/h9BMSmjENT3ckM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3407 (0xd4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Mar 24 18:07:24 2026 GMT Not After : Mar 31 18:07:24 2026 GMT Subject: CN=69c2d2dc-ce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:c2:24:ea:01:98:35:b3:e3:79:0f:7f:eb: 41:f2:25:5a:7b:64:41:2a:c8:8c:06:73:3c:62:2c: e9:ad:81:de:6f:f5:10:6c:78:f5:2f:97:fe:08:b2: 45:4d:c0:a6:d3:00:02:b7:7b:b5:d9:2a:aa:d9:4a: 31:7a:28:c8:59:3d:4e:52:69:6d:65:d6:9c:34:a9: 47:d6:12:87:90:2c:93:4a:4d:03:39:8b:4f:4e:df: a0:15:df:c0:f5:a7:fe:43:f8:76:d9:4d:96:f6:c5: cf:a8:d2:47:74:a3:ab:7f:b5:2b:84:d3:43:c4:2e: 22:9b:cd:38:86:49:a0:b5:de:4b:c5:46:d9:b8:33: e1:12:c7:e3:19:2b:40:5d:6f:73:b6:08:06:b5:3e: 88:09:b7:89:e2:26:ae:c6:6d:bd:ef:b1:ea:c1:7c: be:fc:7c:22:ff:d1:ca:85:86:7a:ca:1d:c3:43:dd: 4b:d3:33:d8:c5:2d:0b:b8:4b:d7:6f:9b:c3:f2:63: 0a:fd:24:30:15:4a:ba:fd:50:2a:d6:e2:8d:31:4e: 2e:6e:5d:a2:64:59:d2:b5:df:9a:fc:6e:20:6f:75: 91:e8:d8:b4:dc:99:70:ed:51:2f:8a:f9:a6:88:fe: d4:60:b4:98:3e:38:d6:98:31:68:6d:06:d5:1c:b4: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:10:96:31:36:17:75:29:0F:E6:8D:7D:FD:8F:4F:20:26:D0:EB X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1a:1c:2c:7d:5d:4c:08:d6:b5:c6:6d:ed:2c:55:41:a7:f0: 41:9b:34:c9:5c:d9:75:79:39:c9:02:bd:35:52:8b:a4:3a:ef: 90:9b:25:b4:3c:79:cc:f1:fe:a4:bf:0c:5e:d2:5b:64:3f:e6: 64:c3:be:54:d9:39:9d:ac:ea:dd:5e:00:a2:d1:a3:21:68:23: 2a:a8:33:8f:08:14:ac:a7:38:32:e8:83:0f:8f:00:73:4b:fe: 7f:1e:65:1e:4e:44:44:25:bc:04:0f:b6:3e:df:12:c0:3a:6a: 73:07:bd:51:85:3d:4e:14:0a:62:99:48:0b:a9:00:65:ac:9b: 42:33:0c:52:da:fd:2b:a5:44:6c:3d:75:95:a8:3a:af:4a:78: 87:8c:8a:47:8b:b5:c7:cd:ce:23:cb:4e:ec:ed:9d:39:5c:a8: 8e:4c:09:81:b6:36:c5:ee:62:c1:9f:d9:5d:07:9d:60:e8:33: ba:81:24:20:4d:b6:2c:0b:27:7d:f4:ef:bf:97:7f:28:9e:dd: 2a:76:9e:87:b1:5d:6f:2d:50:2c:b5:90:6a:2e:3c:c0:96:5b: 9d:50:97:9b:e9:b9:c0:88:d5:f3:7d:48:1e:7c:b9:a1:9f:b9: 3e:99:16:c3:60:2b:4d:c2:33:f0:39:b9:69:f9:da:0e:f3:01: fa:0f:c9:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwMzI0MTgwNzI0WhcNMjYwMzMxMTgwNzI0WjAYMRYwFAYD VQQDEw02OWMyZDJkYy1jZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWDCJOoBmDWz43kPf+tB8iVae2RBKsiMBnM8YizprYHeb/UQbHj1L5f+CLJF TcCm0wACt3u12Sqq2UoxeijIWT1OUmltZdacNKlH1hKHkCyTSk0DOYtPTt+gFd/A 9af+Q/h22U2W9sXPqNJHdKOrf7UrhNNDxC4im804hkmgtd5LxUbZuDPhEsfjGStA XW9ztggGtT6ICbeJ4iauxm2977HqwXy+/Hwi/9HKhYZ6yh3DQ91L0zPYxS0LuEvX b5vD8mMK/SQwFUq6/VAq1uKNMU4ubl2iZFnStd+a/G4gb3WR6Ni03Jlw7VEvivmm iP7UYLSYPjjWmDFobQbVHLQJuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQSEJYx Nhd1KQ/mjX39j08gJtDrMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMRocLH1dTAjWtcZt7SxVQafwQZs0yVzZdXk5yQK9NVKLpDrvkJsltDx5zPH+ pL8MXtJbZD/mZMO+VNk5nazq3V4AotGjIWgjKqgzjwgUrKc4MuiDD48Ac0v+fx5l Hk5ERCW8BA+2Pt8SwDpqcwe9UYU9ThQKYplIC6kAZaybQjMMUtr9K6VEbD11lag6 r0p4h4yKR4u1x83OI8tO7O2dOVyojkwJgbY2xe5iwZ/ZXQedYOgzuoEkIE22LAsn ffTvv5d/KJ7dKnaeh7Fdby1QLLWQai48wJZbnVCXm+m5wIjV831IHny5oZ+5PpkW w2ArTcIz8Dm5afnaDvMB+g/J0A== -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:20 2026 by rpki-client