$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: X6qtMJD7ZT3dVlsy3KUWNNMZ2e/XI0btjJV4w1Uz5J0= Subject key identifier: 52:EA:02:D5:31:25:80:6D:A8:D3:57:D3:65:CD:98:E6:CC:45:AB:E7 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 02D9 Signing time: Wed 25 Mar 2026 00:59:34 +0000 Manifest this update: Wed 25 Mar 2026 00:59:34 +0000 Manifest next update: Wed 01 Apr 2026 00:59:34 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: I/IRkqBsMuxuMtHdoGTI47gIFeuTTtVBZYq+Y8688v0=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: /GgOSNIsN8dBbb8Vje/7amrLJkz9iVVzHHHxG8WPW68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Mar 25 00:59:34 2026 GMT Not After : Apr 1 00:59:34 2026 GMT Subject: CN=69c33376-7555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:f7:a8:bf:25:3e:4e:b7:d5:f1:1f:24:7e: c6:29:42:f3:f5:1e:7f:f9:5d:00:ae:52:1c:7d:e9: 8a:6c:44:86:87:05:88:c3:a8:98:6a:06:f3:05:98: 85:e3:77:45:90:1a:b6:22:23:ba:18:9e:0c:2e:e4: 40:78:1f:d5:56:fa:3c:ac:e4:8b:4c:95:03:00:88: 29:b7:c2:02:ee:a8:4c:ff:22:61:10:ff:82:0b:fa: b1:ee:9e:a7:b2:ca:8a:a7:61:b7:66:e9:9a:83:39: 8c:f7:a2:ad:e3:c6:ae:9a:4f:c8:db:66:8c:e6:96: 97:2f:35:2d:c7:6d:31:2e:79:52:36:ac:a5:32:e5: bf:ad:d7:db:13:c5:5f:cf:18:97:2c:d5:a0:12:07: 98:02:82:31:d5:ad:4d:36:d8:6d:ce:92:20:96:63: 8a:76:22:f1:71:93:32:2e:28:3f:46:14:12:b5:51: c9:12:a9:a6:c1:53:ba:6e:d8:2c:cc:64:f2:6b:52: b4:a5:45:cf:2c:44:0e:9e:6e:a9:52:46:34:63:75: 95:b5:32:8e:57:0e:95:08:b7:d8:41:54:51:26:fa: 58:0c:3d:40:c5:91:62:20:7a:b4:49:1a:d5:03:1c: 74:48:db:9c:fa:db:36:60:43:f5:ba:86:f8:64:cc: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EA:02:D5:31:25:80:6D:A8:D3:57:D3:65:CD:98:E6:CC:45:AB:E7 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:ae:5d:8e:ea:e3:19:16:46:64:dd:93:54:ca:5e:bd:ce: b4:d8:61:ed:42:13:64:1d:7b:6d:07:56:03:fd:e4:6a:1a:66: 47:0f:b5:3d:38:46:7e:4c:db:3e:90:ba:0e:ab:0a:6d:39:f0: 60:6c:30:72:df:ad:b3:3f:16:38:68:56:4e:e5:06:89:54:1b: a1:72:18:10:17:af:9d:8e:73:95:43:60:d1:26:02:06:85:5f: f6:41:44:b0:d0:d2:03:bb:a3:7d:3d:85:e8:09:27:79:7e:31: e2:e5:bd:77:58:57:91:eb:25:3e:50:b0:78:20:8e:48:06:2a: 46:74:3c:71:bd:46:e9:32:91:23:68:5d:1e:0f:a9:40:57:70: 26:73:ab:ae:84:2d:d6:fa:a0:c9:c6:f3:39:30:77:0d:ee:27: cc:da:d2:77:01:5d:05:dd:27:3f:ad:2f:da:0c:18:e3:98:cc: 36:5d:0b:b5:0b:33:c1:21:7a:bb:79:6a:02:19:0d:9f:28:d9: 7b:59:f0:f8:fa:60:7c:11:a0:bd:62:67:2f:5d:79:50:ab:2e: 73:73:f6:9c:49:6c:f1:42:8b:52:31:d1:a4:db:90:29:5f:37: 3a:9c:7d:28:03:9a:3d:79:b7:90:fc:31:77:b1:fa:c9:d5:71: 16:cb:77:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjYwMzI1MDA1OTM0WhcNMjYwNDAxMDA1OTM0WjAYMRYwFAYD VQQDEw02OWMzMzM3Ni03NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS/3qL8lPk631fEfJH7GKULz9R5/+V0ArlIcfemKbESGhwWIw6iYagbzBZiF 43dFkBq2IiO6GJ4MLuRAeB/VVvo8rOSLTJUDAIgpt8IC7qhM/yJhEP+CC/qx7p6n ssqKp2G3ZumagzmM96Kt48aumk/I22aM5paXLzUtx20xLnlSNqylMuW/rdfbE8Vf zxiXLNWgEgeYAoIx1a1NNthtzpIglmOKdiLxcZMyLig/RhQStVHJEqmmwVO6btgs zGTya1K0pUXPLEQOnm6pUkY0Y3WVtTKOVw6VCLfYQVRRJvpYDD1AxZFiIHq0SRrV Axx0SNuc+ts2YEP1uob4ZMy1wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLqAtUx JYBtqNNX02XNmObMRavnMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALoquXY7q4xkWRmTdk1TKXr3OtNhh7UITZB17bQdWA/3kahpmRw+1PThGfkzb PpC6DqsKbTnwYGwwct+tsz8WOGhWTuUGiVQboXIYEBevnY5zlUNg0SYCBoVf9kFE sNDSA7ujfT2F6AkneX4x4uW9d1hXkeslPlCweCCOSAYqRnQ8cb1G6TKRI2hdHg+p QFdwJnOrroQt1vqgycbzOTB3De4nzNrSdwFdBd0nP60v2gwY45jMNl0LtQszwSF6 u3lqAhkNnyjZe1nw+PpgfBGgvWJnL115UKsuc3P2nEls8UKLUjHRpNuQKV83Opx9 KAOaPXm3kPwxd7H6ydVxFst3Iw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:28:32 2026 by rpki-client