$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: PZQUca/Qw9S6UuJFnWOgJM0j8GL3llBwhRpPksAFvSM= Subject key identifier: 24:82:EE:C6:B8:3B:B7:B6:93:66:B7:BD:FE:03:32:31:0C:2D:EF:AE Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0BB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0BAB Signing time: Tue 24 Mar 2026 18:49:15 +0000 Manifest this update: Tue 24 Mar 2026 18:49:14 +0000 Manifest next update: Tue 31 Mar 2026 18:49:14 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: v7/naLvIOOH2qPPHGoP+NQjhaIaaSIoik9NwUE7h6t4=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: bU5lNAcE66Bv/ZZrCjffKOq+spnXNneUB8Pi8JBkWRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2997 (0xbb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Mar 24 18:49:14 2026 GMT Not After : Mar 31 18:49:14 2026 GMT Subject: CN=69c2dcab-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:3e:21:77:54:75:fc:52:db:5b:d7:c8:a8: 86:60:6f:6b:ad:30:40:b6:0e:29:61:64:88:05:c7: 65:ca:e0:ce:99:b3:58:c7:ed:9b:bb:be:8e:83:b2: f2:30:48:a6:0e:5e:08:84:50:a8:1f:be:b7:fe:85: 34:13:d6:5e:4f:c8:d8:8e:2e:18:6c:cb:3d:b3:24: cf:25:fa:10:73:e3:48:ab:17:0b:d9:f2:6c:6f:49: 82:d0:c7:82:29:d4:de:ea:26:61:8d:52:ff:14:b9: fc:4d:0d:01:7f:c7:57:b1:d8:ab:1e:93:62:08:ce: 36:f3:8d:f7:4f:f8:28:1c:6d:ba:4f:3c:80:a4:7a: ab:f5:0e:11:7c:ef:e5:2f:04:22:80:62:54:c4:a8: 3c:cb:b5:c1:93:61:d0:8a:87:b6:c0:0b:d5:ea:6f: 71:6a:23:77:a7:ea:8c:15:03:c2:77:ba:3e:d0:71: 8f:f0:8d:5b:ae:e1:57:c0:9e:49:4b:c1:44:db:d9: 4c:0c:8b:11:46:17:02:b1:52:fc:b0:81:fc:59:31: a5:c5:9f:93:b2:ec:01:aa:3b:56:da:d0:6a:8e:c9: ca:2e:7c:3f:89:f0:69:4f:e6:7d:49:33:a3:45:71: d9:f7:63:7a:a7:de:78:5d:78:a1:6c:88:01:84:9f: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:EE:C6:B8:3B:B7:B6:93:66:B7:BD:FE:03:32:31:0C:2D:EF:AE X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ba:3e:50:90:b5:80:42:03:67:d8:f2:53:08:ae:40:e9:af: ed:68:b1:3b:5f:2b:0e:a1:49:64:ea:19:c4:76:fd:e0:3e:f5: 51:24:70:cc:17:e8:d2:3c:f7:84:75:22:03:00:1a:db:2d:ba: 6a:f8:77:0f:8f:c1:be:9f:01:b3:ae:44:82:96:0e:3c:1f:0a: 30:e2:2d:b0:e5:90:f6:8a:f2:59:2c:5f:23:b9:0f:22:8b:3f: 71:9f:84:bc:46:67:13:12:90:22:8b:78:f2:4f:63:86:3d:a1: 10:cd:92:81:4b:0a:dd:34:96:14:c4:1d:a2:73:cb:fe:b7:0f: 6d:14:44:5d:62:8b:ba:5a:13:c5:79:80:2c:d3:09:6a:aa:91: c4:57:a6:54:1e:bf:dc:de:8f:5c:5e:ff:35:4b:9e:18:64:a9: e4:84:b1:67:08:33:b2:9d:2a:d5:40:e1:ec:ac:77:a0:46:a9: eb:42:96:f5:48:22:48:41:99:36:82:3e:8f:fc:2a:60:79:dd: 4f:f2:d8:80:8e:46:f6:a7:ee:18:a9:2f:28:33:0e:bc:ce:0f: 54:bb:5d:2e:e6:17:f4:58:33:3f:6e:84:86:79:d8:6b:80:ba: 02:27:29:37:b0:d4:a8:05:92:b9:c9:4c:86:00:c4:09:b3:73: 68:72:98:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjYwMzI0MTg0OTE0WhcNMjYwMzMxMTg0OTE0WjAYMRYwFAYD VQQDEw02OWMyZGNhYi0yMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWE+IXdUdfxS21vXyKiGYG9rrTBAtg4pYWSIBcdlyuDOmbNYx+2bu76Og7Ly MEimDl4IhFCoH763/oU0E9ZeT8jYji4YbMs9syTPJfoQc+NIqxcL2fJsb0mC0MeC KdTe6iZhjVL/FLn8TQ0Bf8dXsdirHpNiCM428433T/goHG26TzyApHqr9Q4RfO/l LwQigGJUxKg8y7XBk2HQioe2wAvV6m9xaiN3p+qMFQPCd7o+0HGP8I1bruFXwJ5J S8FE29lMDIsRRhcCsVL8sIH8WTGlxZ+TsuwBqjtW2tBqjsnKLnw/ifBpT+Z9STOj RXHZ92N6p954XXihbIgBhJ/yBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSC7sa4 O7e2k2a3vf4DMjEMLe+uMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiro+UJC1gEIDZ9jyUwiuQOmv7WixO18rDqFJZOoZxHb94D71USRwzBfo0jz3 hHUiAwAa2y26avh3D4/Bvp8Bs65EgpYOPB8KMOItsOWQ9oryWSxfI7kPIos/cZ+E vEZnExKQIot48k9jhj2hEM2SgUsK3TSWFMQdonPL/rcPbRREXWKLuloTxXmALNMJ aqqRxFemVB6/3N6PXF7/NUueGGSp5ISxZwgzsp0q1UDh7Kx3oEap60KW9UgiSEGZ NoI+j/wqYHndT/LYgI5G9qfuGKkvKDMOvM4PVLtdLuYX9FgzP26EhnnYa4C6Aicp N7DUqAWSuclMhgDECbNzaHKYgg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:19 2026 by rpki-client