$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json) Hash identifier: iLIbtoqTIboS6IGx5ZukZEAP3RtJL5cgzGyH3YM7Cqw= Subject key identifier: 6C:B4:B9:D5:C0:AB:41:4B:16:E7:38:E8:D5:10:82:71:C6:72:3D:FB Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 1732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft Manifest number: 1716 Signing time: Tue 24 Mar 2026 16:32:22 +0000 Manifest this update: Tue 24 Mar 2026 16:32:21 +0000 Manifest next update: Tue 31 Mar 2026 16:32:21 +0000 Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: Gb6al073hiVHVMkHitUq2x4AAd6Tn6JbIKaKquSKYGs=) 2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5938 (0x1732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: Mar 24 16:32:21 2026 GMT Not After : Mar 31 16:32:21 2026 GMT Subject: CN=69c2bc96-c9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:f9:43:a1:32:03:35:62:5e:16:be:46:af: 0b:e0:c3:32:74:13:5e:2a:12:91:a8:df:c8:14:e4: 99:92:a2:54:5a:16:c5:af:c8:1e:a1:0f:e9:df:b8: a4:d0:13:93:2d:af:66:76:59:cc:ef:24:f9:85:4c: 8b:4c:2d:3e:bd:e9:94:37:cf:cb:1b:78:3f:fa:98: 3f:dc:53:d2:a2:31:d0:2d:4c:8a:39:7a:07:c1:b9: 5b:04:75:63:73:1c:1b:56:11:d7:d2:f5:9b:d6:fb: bb:a2:5a:40:a1:89:6e:bf:a5:88:c7:2b:38:c1:d9: f9:bd:54:03:1a:93:a3:3a:1f:5b:b0:07:89:90:e9: 26:aa:df:95:64:bc:3b:6c:10:e7:63:5f:dc:54:4d: 8f:61:e0:a0:77:fc:d1:9f:d9:b6:15:ae:9a:f6:3d: 60:e2:6f:df:16:51:6b:fe:5a:38:9a:ea:36:fe:81: f7:7a:c8:f7:1a:d0:64:c3:97:29:e6:be:ed:b0:97: 9e:f2:5b:6c:5d:bf:b2:8c:51:82:06:a6:93:6e:ae: 15:5f:84:63:50:47:5f:22:c1:10:23:cc:2c:07:c9: 70:ca:5e:34:68:be:b5:9c:34:f0:5b:fe:8a:fa:78: 19:b6:90:9b:11:85:f5:af:41:9b:85:e4:2f:19:9d: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B4:B9:D5:C0:AB:41:4B:16:E7:38:E8:D5:10:82:71:C6:72:3D:FB X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9b:e0:56:60:78:86:41:ed:54:56:6c:a3:49:06:60:31:f4: 51:ed:dc:c3:ad:ff:b4:1c:5b:9e:56:41:ff:27:c4:a0:c3:0c: 66:9c:28:b3:a9:c9:40:62:30:4e:9b:af:ad:2e:bb:f6:77:a7: c3:6a:44:d3:29:35:1e:39:f3:5c:f5:e8:b8:e3:a3:70:5c:a0: 5d:a4:93:92:43:34:a2:04:b0:d7:e2:e4:ab:e4:8e:6e:64:c5: 2b:c9:59:1a:03:63:2f:e9:ac:2b:dc:d7:dd:04:a0:9d:a3:f0: 51:93:90:7a:0f:9c:f3:60:18:01:d7:0e:4b:ee:39:09:79:d6: 17:86:c7:a5:41:94:10:fa:89:1e:81:5e:c5:b8:5b:31:b5:bc: 06:a8:3f:d9:1c:42:1c:dd:13:73:0d:35:25:ff:76:e9:51:13: 02:5a:20:43:e9:51:82:d6:e1:82:1a:26:63:dd:0f:7b:33:b2: cf:e0:3f:98:fa:57:b7:a5:b1:d6:68:0e:8f:6c:29:ec:cb:4b: 13:cf:9c:0a:6c:86:07:a3:b8:7a:db:91:99:1b:7f:89:f4:0f: fc:44:df:83:3b:81:5e:be:ad:bb:f1:6b:b1:a5:b5:be:96:fc: 79:99:45:2c:e5:c8:73:cd:7a:59:4c:fd:4f:5e:71:89:a9:11: ad:9c:51:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjYwMzI0MTYzMjIxWhcNMjYwMzMxMTYzMjIxWjAYMRYwFAYD VQQDEw02OWMyYmM5Ni1jOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTL5Q6EyAzViXha+Rq8L4MMydBNeKhKRqN/IFOSZkqJUWhbFr8geoQ/p37ik 0BOTLa9mdlnM7yT5hUyLTC0+vemUN8/LG3g/+pg/3FPSojHQLUyKOXoHwblbBHVj cxwbVhHX0vWb1vu7olpAoYluv6WIxys4wdn5vVQDGpOjOh9bsAeJkOkmqt+VZLw7 bBDnY1/cVE2PYeCgd/zRn9m2Fa6a9j1g4m/fFlFr/lo4muo2/oH3esj3GtBkw5cp 5r7tsJee8ltsXb+yjFGCBqaTbq4VX4RjUEdfIsEQI8wsB8lwyl40aL61nDTwW/6K +ngZtpCbEYX1r0GbheQvGZ251QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGy0udXA q0FLFuc46NUQgnHGcj37MB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3 UjlIRHBUdEVkVm9RcG9TSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJvgVmB4hkHtVFZso0kGYDH0Ue3cw63/tBxbnlZB/yfEoMMMZpwos6nJQGIw TpuvrS679nenw2pE0yk1HjnzXPXouOOjcFygXaSTkkM0ogSw1+Lkq+SObmTFK8lZ GgNjL+msK9zX3QSgnaPwUZOQeg+c82AYAdcOS+45CXnWF4bHpUGUEPqJHoFexbhb MbW8Bqg/2RxCHN0Tcw01Jf926VETAlogQ+lRgtbhghomY90PezOyz+A/mPpXt6Wx 1mgOj2wp7MtLE8+cCmyGB6O4etuRmRt/ifQP/ETfgzuBXr6tu/FrsaW1vpb8eZlF LOXIc816WUz9T15xiakRrZxRsQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:45 2026 by rpki-client