$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: 9DdVVflDXm7VM48pqN6pUPd+YK1LTzp/bv9osc29DGc= Subject key identifier: BD:45:4A:A0:CE:25:F8:4B:65:EA:41:EC:93:65:81:9F:4C:B5:04:77 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 07E1 Signing time: Tue 24 Mar 2026 21:02:48 +0000 Manifest this update: Tue 24 Mar 2026 21:02:47 +0000 Manifest next update: Tue 31 Mar 2026 21:02:47 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: nuYbKIOTGJgP3UDZH3C7Qnwtp5NtcdkxatCa9Wti9qA=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: ezMjWZQ+amBAOJReLf6SLQyIzexobHRKhq9YImsmKVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Mar 24 21:02:47 2026 GMT Not After : Mar 31 21:02:47 2026 GMT Subject: CN=69c2fbf8-e54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:8d:b5:1f:1c:e7:07:d2:14:a1:83:74:46: f6:6f:03:b3:86:d1:8c:21:9f:d1:29:ec:77:a1:9e: 70:71:73:39:7d:8d:cd:eb:93:29:25:c5:14:50:ac: a1:ef:7d:f7:d9:77:94:23:b2:3e:5f:a2:75:e3:a7: 0a:46:4a:1c:80:34:c7:aa:98:96:ea:fc:83:96:9d: 89:87:7e:1a:ec:c8:06:1a:9a:2a:77:17:02:81:e7: 65:e5:bc:9c:29:58:ea:cb:ce:db:9c:90:2c:7c:87: 00:0e:42:81:13:51:72:a0:37:8d:42:97:f7:37:7f: b1:df:7c:0f:45:2b:7b:56:b8:d7:12:41:14:a5:55: f6:70:20:05:87:be:fa:ad:a1:4a:bf:25:65:e4:22: df:c8:00:1b:96:6a:f8:b0:83:55:dd:57:5c:33:cb: c1:65:a6:f6:65:82:88:f9:98:84:d3:df:ab:6c:f5: 5b:c9:20:9e:56:2e:81:c0:d7:ff:3b:87:db:c9:63: 48:c3:66:4c:3e:e1:fe:8e:1d:8c:c8:6f:51:9c:5e: 54:32:15:89:9c:10:6d:b1:9f:d0:7f:3e:07:da:64: 1b:a5:72:5a:5d:3d:89:5f:b0:c3:f8:90:fc:c2:53: 0e:40:92:7e:fd:38:24:f4:9a:5d:66:9f:01:b7:7a: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:4A:A0:CE:25:F8:4B:65:EA:41:EC:93:65:81:9F:4C:B5:04:77 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:65:75:d4:2a:e4:6a:b4:89:33:1b:e3:cf:06:f2:a9:8c:3a: 61:dd:92:23:6b:9f:a5:2c:e5:ea:af:ef:d5:ac:6a:d0:07:04: b8:ad:dd:1f:36:6d:c8:21:36:0f:8c:ed:fc:fb:17:a1:55:7c: 1e:6d:f9:e6:3b:90:1a:74:c0:e8:75:ca:d4:4d:f3:2a:37:8c: b4:af:d9:90:a9:e4:3a:3d:51:5d:ff:f8:56:a3:2c:c2:0f:60: ba:28:41:11:c6:1b:06:93:ba:b7:49:08:4e:f6:cf:ce:50:f4: 54:7e:6c:1c:3c:e7:d8:00:d2:cc:b3:72:2f:01:71:9d:a2:66: a3:3c:be:2b:68:67:38:a3:d7:42:32:b0:6c:aa:4a:79:ce:1a: 2e:9c:b8:62:7c:e9:a9:fd:ac:d4:8d:aa:ac:35:ab:35:7c:bc: dd:44:64:c1:8a:d7:c1:d4:5f:42:82:70:db:25:66:99:32:7f: 0c:0c:32:dd:4f:7e:c1:f6:2d:c2:c3:53:c9:85:57:98:60:f2: e2:3b:1b:3a:79:a7:ef:f8:01:14:93:b7:df:06:dc:3c:af:67: d9:b3:cd:4e:68:29:ad:07:86:78:19:80:b4:f0:90:50:52:c4: e2:ce:96:5e:fa:7c:06:8a:95:ad:20:88:84:30:d3:e4:a6:41: 86:42:a0:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjYwMzI0MjEwMjQ3WhcNMjYwMzMxMjEwMjQ3WjAYMRYwFAYD VQQDEw02OWMyZmJmOC1lNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwmNtR8c5wfSFKGDdEb2bwOzhtGMIZ/RKex3oZ5wcXM5fY3N65MpJcUUUKyh 73332XeUI7I+X6J146cKRkocgDTHqpiW6vyDlp2Jh34a7MgGGpoqdxcCgedl5byc KVjqy87bnJAsfIcADkKBE1FyoDeNQpf3N3+x33wPRSt7VrjXEkEUpVX2cCAFh776 raFKvyVl5CLfyAAblmr4sINV3VdcM8vBZab2ZYKI+ZiE09+rbPVbySCeVi6BwNf/ O4fbyWNIw2ZMPuH+jh2MyG9RnF5UMhWJnBBtsZ/Qfz4H2mQbpXJaXT2JX7DD+JD8 wlMOQJJ+/Tgk9JpdZp8Bt3qY9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1FSqDO JfhLZepB7JNlgZ9MtQR3MB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATmV11CrkarSJMxvjzwbyqYw6Yd2SI2ufpSzl6q/v1axq0AcEuK3dHzZtyCE2 D4zt/PsXoVV8Hm355juQGnTA6HXK1E3zKjeMtK/ZkKnkOj1RXf/4VqMswg9guihB EcYbBpO6t0kITvbPzlD0VH5sHDzn2ADSzLNyLwFxnaJmozy+K2hnOKPXQjKwbKpK ec4aLpy4Ynzpqf2s1I2qrDWrNXy83URkwYrXwdRfQoJw2yVmmTJ/DAwy3U9+wfYt wsNTyYVXmGDy4jsbOnmn7/gBFJO33wbcPK9n2bPNTmgprQeGeBmAtPCQUFLE4s6W Xvp8BoqVrSCIhDDT5KZBhkKgTw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:47 2026 by rpki-client