$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: abEyIDbzgEAswRFxPSJUdvn13Y1IuDsRTniroQrIVuw= Subject key identifier: 9C:21:60:8C:72:E7:F4:B9:86:83:64:D6:D6:78:CB:C5:EB:E3:E5:AC Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 016A Signing time: Mon 11 May 2026 04:52:36 +0000 Manifest this update: Mon 11 May 2026 04:52:36 +0000 Manifest next update: Mon 18 May 2026 04:52:36 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: Rycu+iGUNM2iqlRnm7Ie9lvYXzoix2Uu0Ns91EIOM7g=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: May 11 04:52:36 2026 GMT Not After : May 18 04:52:36 2026 GMT Subject: CN=6a016094-df1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:e4:27:98:62:27:e7:d9:8c:39:f8:be:92: 1b:b5:3d:e3:f1:19:6a:80:a1:a4:cf:67:be:b9:bc: c8:e1:67:e0:51:5a:aa:26:32:ed:63:b5:ab:6a:8d: ba:31:b3:b7:d6:51:f1:8c:d3:f6:be:9b:d6:61:d3: af:49:27:89:62:00:0f:4c:3f:84:8e:0c:89:eb:da: 66:c8:2e:f6:b3:5c:e6:3b:7b:63:4a:5d:37:87:64: f2:bb:f0:dd:e6:72:8f:e6:4c:18:f2:c9:10:c1:90: 12:d0:85:f2:c8:fe:a1:e9:fa:ad:35:84:f9:87:42: f1:91:3b:e8:e6:be:87:5e:13:8f:33:1e:3e:af:41: b7:8c:42:7e:fd:a5:ac:96:2f:d1:39:3e:cf:37:ce: e3:77:52:c1:4b:8a:05:72:1f:3d:60:80:1a:52:5d: 68:69:8d:40:6e:48:9d:df:75:fe:f6:ff:b7:8f:41: f1:76:89:01:25:47:88:bd:a8:ee:d5:10:b6:7d:73: 45:18:82:b7:3b:6f:2c:98:bb:0b:b8:73:c5:67:d2: 8a:14:63:ba:60:59:ad:9b:01:1d:8a:75:bb:33:82: 38:06:50:08:50:59:6c:b2:73:67:d1:69:99:7f:51: 14:3f:ab:2d:c6:fb:c0:b9:3e:2a:9f:38:2e:a3:21: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:21:60:8C:72:E7:F4:B9:86:83:64:D6:D6:78:CB:C5:EB:E3:E5:AC X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a8:3f:64:06:f6:49:56:9a:80:b9:45:78:05:28:d2:c0:16: 95:3a:ed:14:75:c0:4c:9c:3b:ff:fa:2d:4b:40:db:01:9f:c6: 35:b8:c0:d4:b4:67:2c:bf:a4:73:eb:71:10:04:ea:9e:78:fa: 88:58:64:70:1d:ac:10:33:ef:16:16:4e:55:c9:bf:dd:59:b7: 9d:c4:19:bb:98:0c:40:ec:2c:f3:e8:d3:ba:67:e0:64:b0:f1: 66:4a:5e:c0:80:5e:08:2a:1f:3e:56:15:dd:fe:86:13:34:cf: 7d:bc:2c:63:2b:75:45:15:57:a3:86:18:f3:63:2c:06:ab:42: 74:25:9f:48:f0:63:e4:fa:73:69:63:1d:7e:d4:26:28:2e:8d: 88:09:ad:bf:3d:19:b1:53:58:5a:f3:f3:c6:a3:51:53:af:e8: 52:05:25:74:a6:d9:7c:ff:19:f8:65:ac:74:70:55:a2:2b:5c: a4:cc:8d:66:ff:3c:dc:29:f5:a6:88:33:6c:b0:6e:3e:44:ec: 91:fd:59:43:6d:78:74:e7:ef:89:31:4c:6e:92:27:c2:da:79: 47:48:8e:7a:93:5a:38:af:61:14:b3:bc:e1:61:98:f8:6f:11: 0c:ef:43:10:e0:79:13:de:b5:35:1f:20:5e:57:39:e3:93:da: ab:b5:a1:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwNTExMDQ1MjM2WhcNMjYwNTE4MDQ1MjM2WjAYMRYwFAYD VQQDEw02YTAxNjA5NC1kZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI7kJ5hiJ+fZjDn4vpIbtT3j8RlqgKGkz2e+ubzI4WfgUVqqJjLtY7Wrao26 MbO31lHxjNP2vpvWYdOvSSeJYgAPTD+EjgyJ69pmyC72s1zmO3tjSl03h2Tyu/Dd 5nKP5kwY8skQwZAS0IXyyP6h6fqtNYT5h0LxkTvo5r6HXhOPMx4+r0G3jEJ+/aWs li/ROT7PN87jd1LBS4oFch89YIAaUl1oaY1Abkid33X+9v+3j0HxdokBJUeIvaju 1RC2fXNFGIK3O28smLsLuHPFZ9KKFGO6YFmtmwEdinW7M4I4BlAIUFlssnNn0WmZ f1EUP6stxvvAuT4qnzguoyHUqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwhYIxy 5/S5hoNk1tZ4y8Xr4+WsMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKg/ZAb2SVaagLlFeAUo0sAWlTrtFHXATJw7//otS0DbAZ/GNbjA1LRnLL+k c+txEATqnnj6iFhkcB2sEDPvFhZOVcm/3Vm3ncQZu5gMQOws8+jTumfgZLDxZkpe wIBeCCofPlYV3f6GEzTPfbwsYyt1RRVXo4YY82MsBqtCdCWfSPBj5PpzaWMdftQm KC6NiAmtvz0ZsVNYWvPzxqNRU6/oUgUldKbZfP8Z+GWsdHBVoitcpMyNZv883Cn1 pogzbLBuPkTskf1ZQ214dOfviTFMbpInwtp5R0iOepNaOK9hFLO84WGY+G8RDO9D EOB5E961NR8gXlc545Paq7WhGw== -----END CERTIFICATE-----Generated at Wed May 13 03:04:58 2026 by rpki-client