$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: m9xVH4VEGHPzpdZ5gu21rUConOXE65js482glkEAVHM= Subject key identifier: C8:29:2E:B7:93:73:98:49:A2:B6:65:CC:0E:97:FF:BA:54:80:F0:23 Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1D3E Signing time: Tue 24 Mar 2026 16:06:29 +0000 Manifest this update: Tue 24 Mar 2026 16:06:29 +0000 Manifest next update: Tue 31 Mar 2026 16:06:29 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: Wuh/gxRFdSUHFsx5XNQtCuynoMN7HZq+RoUE/186G5E=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: kk2jLSlA4FrkU7gdAHQq3agexNxMubpJWMW/MfDoZiE=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: APtY/87HFPVkFCNmPABVaetDfxhkY/ZtcBEA9fzgnYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Mar 24 16:06:29 2026 GMT Not After : Mar 31 16:06:29 2026 GMT Subject: CN=69c2b685-a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:1a:fd:61:c2:2c:b3:9f:2d:45:aa:ca:27: fb:e1:23:ab:fa:24:53:aa:36:16:b6:94:4f:d9:0a: 4e:e9:ce:05:94:bf:dd:c2:c3:42:43:f5:d9:e4:6c: e1:10:0c:7e:c7:ad:91:e2:fa:86:c6:d2:0b:85:55: ac:79:1d:34:cf:b5:4e:18:3b:02:91:53:90:16:1b: 55:ec:78:d1:14:03:c0:40:e2:ce:d6:e5:13:83:89: a3:1f:10:47:9c:89:f1:e1:32:7d:32:d4:17:a5:aa: 6f:af:a7:fc:cd:5b:31:42:f6:16:ec:4a:bd:93:e7: 4d:bc:6b:7b:63:b4:d5:8a:f7:21:b3:5a:c6:61:d2: a6:3b:97:b3:19:40:77:a1:e1:3a:1d:13:68:36:98: 19:1c:1a:b6:5a:0e:9d:9b:27:63:e0:07:61:34:c9: a4:fe:7b:3d:f6:11:5d:d3:b8:47:4c:db:fa:98:25: 3c:89:8f:8c:4c:aa:42:96:e5:d8:81:60:9f:f9:c2: e5:7e:6e:82:22:f5:80:ac:e0:a7:4d:5d:54:e5:f9: 32:83:68:56:cc:9b:6c:50:91:0e:da:50:f5:28:d0: d1:ac:82:9f:9c:ba:ce:e2:1e:e6:fe:32:bd:47:f3: e0:5d:9b:9a:4c:8d:69:a5:28:7f:2f:10:cb:3c:80: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:2E:B7:93:73:98:49:A2:B6:65:CC:0E:97:FF:BA:54:80:F0:23 X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d0:7f:89:c7:23:13:26:68:53:b3:94:9e:d4:b4:89:24:47: 4d:bc:ac:3a:00:bb:72:9f:c6:5d:81:d2:4d:b8:be:73:fc:bd: c6:a4:46:6f:7c:d2:7a:4e:13:b0:8f:88:0a:26:e9:e4:9b:6d: 71:d5:c1:ad:67:34:8a:9c:33:81:d0:f3:f5:d3:c1:95:84:65: 1a:54:a9:87:dc:c7:01:55:f8:5a:bc:84:6d:e9:70:4d:fc:a3: ea:cc:49:b6:56:e5:d0:b0:dd:84:9d:e7:bf:de:3f:1d:14:f3: 7b:08:81:49:db:7c:f4:1a:04:b6:c3:8a:ee:98:54:38:b9:b1: e5:ba:fc:1b:03:f1:e2:12:4a:0a:47:35:32:fd:43:c2:9c:96: d5:39:34:f2:0b:5c:12:1c:6d:a8:c1:1a:65:df:54:03:75:b8: a2:f6:74:1c:d5:ab:0d:ea:d4:dd:c3:a9:75:d7:06:c1:d6:ea: 55:5e:57:5e:e2:f3:c3:9e:6c:6f:c9:49:57:b0:bc:72:85:6e: 01:27:92:b6:97:ff:e7:c2:da:27:2b:59:bf:43:e0:f7:7e:c6: 91:ae:1f:13:8a:f3:0a:03:e2:ef:b6:aa:36:89:90:17:cb:76: a6:28:0d:19:5e:81:d5:3d:39:f6:11:d2:0d:18:b3:d8:c0:c8: 43:76:ee:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4MDVGMTJDMzc0 N0YzNEFGODMwHhcNMjYwMzI0MTYwNjI5WhcNMjYwMzMxMTYwNjI5WjAYMRYwFAYD VQQDEw02OWMyYjY4NS1hNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziUa/WHCLLOfLUWqyif74SOr+iRTqjYWtpRP2QpO6c4FlL/dwsNCQ/XZ5Gzh EAx+x62R4vqGxtILhVWseR00z7VOGDsCkVOQFhtV7HjRFAPAQOLO1uUTg4mjHxBH nInx4TJ9MtQXpapvr6f8zVsxQvYW7Eq9k+dNvGt7Y7TVivchs1rGYdKmO5ezGUB3 oeE6HRNoNpgZHBq2Wg6dmydj4AdhNMmk/ns99hFd07hHTNv6mCU8iY+MTKpCluXY gWCf+cLlfm6CIvWArOCnTV1U5fkyg2hWzJtsUJEO2lD1KNDRrIKfnLrO4h7m/jK9 R/PgXZuaTI1ppSh/LxDLPIBdXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgpLreT c5hJorZlzA6X/7pUgPAjMB8GA1UdIwQYMBaAFGxtR7ERTy1YGoISgF8Sw3R/NK+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExWZ2FnaEtBWHhMRGRIODBy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExW Z2FnaEtBWHhMRGRIODByNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdB/iccjEyZoU7OUntS0iSRHTbysOgC7cp/GXYHSTbi+c/y9xqRGb3zSek4T sI+ICibp5JttcdXBrWc0ipwzgdDz9dPBlYRlGlSph9zHAVX4WryEbelwTfyj6sxJ tlbl0LDdhJ3nv94/HRTzewiBSdt89BoEtsOK7phUOLmx5br8GwPx4hJKCkc1Mv1D wpyW1Tk08gtcEhxtqMEaZd9UA3W4ovZ0HNWrDerU3cOpddcGwdbqVV5XXuLzw55s b8lJV7C8coVuASeStpf/58LaJytZv0Pg937Gka4fE4rzCgPi77aqNomQF8t2pigN GV6B1T059hHSDRiz2MDIQ3buXw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:01:08 2026 by rpki-client