$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json) Hash identifier: ejpGJjrtejGrqyP+d1GrwkGiGmcCCdenAHoH7pfJjNk= Subject key identifier: 69:D1:18:60:61:8A:0D:B5:B8:D8:17:66:65:A6:BD:B2:9D:14:59:D2 Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft Manifest number: D1 Signing time: Wed 25 Mar 2026 05:56:37 +0000 Manifest this update: Wed 25 Mar 2026 05:56:37 +0000 Manifest next update: Wed 01 Apr 2026 05:56:37 +0000 Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: fcsmPDiJnJD8HYlU9t2WxxhMBZ+hFx8p4GY1fVJ2qVk=) 2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: XVr7WTe1j1MpPcQH4gqklIeU34mco9nl+Lc+ZXIEmsM=) 3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: HA6wbPJXOPCFectJ914UjnxY1MnEDrS01d2CFAwWibA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: Mar 25 05:56:37 2026 GMT Not After : Apr 1 05:56:37 2026 GMT Subject: CN=69c37915-648a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:8d:52:18:aa:15:f6:af:75:5b:32:e4:d6: 3b:42:83:1b:cc:13:20:bf:e4:b7:97:bc:33:14:42: fd:fe:26:08:98:7e:44:9e:d6:cb:c5:fe:5d:e6:0c: 41:7b:29:c9:8d:2c:91:6c:7b:f7:52:e3:81:4d:30: df:c0:b2:56:b3:34:64:5f:3a:76:89:d0:4a:9a:7d: 31:a3:b4:7f:84:d0:3b:fd:8c:af:24:3c:5c:8d:04: 7d:3e:27:ac:eb:63:13:88:86:68:fa:a2:2e:50:9a: dd:51:bb:93:d1:e1:9a:00:ff:34:8d:24:cb:b2:ea: c6:e0:ac:db:bd:49:70:7f:44:88:8c:33:89:71:1e: a0:62:51:e8:09:23:8d:59:38:7a:63:23:66:be:36: af:18:2e:b7:a5:b8:c3:84:3c:67:57:36:23:10:68: bc:0c:5f:5f:d4:f3:b6:6f:7e:b8:0c:eb:e9:1a:72: be:53:c4:1f:49:77:a8:bb:35:2a:12:18:d2:4c:ba: 98:0f:69:e7:8b:42:f1:77:6b:df:9c:bf:8d:41:8e: ce:64:b3:3d:80:42:c2:2e:c9:8a:39:80:0a:42:ba: 9b:e3:89:e8:26:ef:55:d9:12:ec:c6:30:f5:c0:bd: 71:82:78:3e:c1:b2:b0:57:c5:1a:58:f4:f6:79:a8: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:18:60:61:8A:0D:B5:B8:D8:17:66:65:A6:BD:B2:9D:14:59:D2 X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6c:9b:02:6b:a6:d4:a2:7a:1d:04:27:94:9a:c0:fb:b2:6c: 5f:a0:1e:29:df:f4:a6:63:d3:2c:2d:25:7d:e2:fd:2e:4b:37: 15:a4:30:06:98:53:49:a4:80:3c:64:07:86:5b:69:8a:3f:22: 7a:74:f0:d6:97:ee:c9:2f:b0:77:9c:c3:86:cc:46:78:12:b9: 3f:d8:48:c6:f1:ae:ab:b8:ba:0d:55:aa:27:fe:c3:cc:5f:3e: fb:d4:f9:11:35:32:6e:cd:2e:e2:48:b6:90:f0:d0:7a:7e:e3: 0c:f5:d9:f7:7e:59:a6:68:c9:f7:48:bc:75:5e:41:b4:4b:4e: 9d:03:8c:24:ad:f1:d7:9e:39:a5:fc:99:8c:79:cf:4e:65:cf: 03:76:12:03:32:e3:f5:88:5b:d0:9c:3b:ed:8c:30:a6:52:6b: ac:a4:1d:dc:87:b1:f9:29:5d:d8:d5:cb:86:7e:5a:29:0d:c0: 0e:0d:3f:61:fe:84:44:ea:44:dd:cb:54:58:d2:83:94:9a:98: 99:1f:d1:4c:db:06:93:5d:67:db:62:26:bd:61:b1:d9:42:20: 9f:1f:da:0b:73:3c:78:46:58:0b:36:7b:b1:b7:96:34:88:f5: 3d:68:66:87:e8:95:b4:e5:9d:35:de:07:b0:28:5e:b6:a9:23: 2e:27:11:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDQjExMTAvBgNVBAUTKDA2M0UwMTI3NDcyQTdFMkE2Rjg0NzA0MDlDOUI4MjM5 MDVGQUZFOEUwHhcNMjYwMzI1MDU1NjM3WhcNMjYwNDAxMDU1NjM3WjAYMRYwFAYD VQQDEw02OWMzNzkxNS02NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukCNUhiqFfavdVsy5NY7QoMbzBMgv+S3l7wzFEL9/iYImH5EntbLxf5d5gxB eynJjSyRbHv3UuOBTTDfwLJWszRkXzp2idBKmn0xo7R/hNA7/YyvJDxcjQR9Pies 62MTiIZo+qIuUJrdUbuT0eGaAP80jSTLsurG4KzbvUlwf0SIjDOJcR6gYlHoCSON WTh6YyNmvjavGC63pbjDhDxnVzYjEGi8DF9f1PO2b364DOvpGnK+U8QfSXeouzUq EhjSTLqYD2nni0Lxd2vfnL+NQY7OZLM9gELCLsmKOYAKQrqb44noJu9V2RLsxjD1 wL1xgng+wbKwV8UaWPT2eajHzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnRGGBh ig21uNgXZmWmvbKdFFnSMB8GA1UdIwQYMBaAFAY+ASdHKn4qb4RwQJybgjkF+v6O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUNCMS8zRjRBNUEyRUVB MDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZpcHZoSEJBbkp1Q09RWDZf bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9vNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUNCMS8zRjRBNUEyRUVBMDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZp cHZoSEJBbkp1Q09RWDZfbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARmybAmum1KJ6HQQnlJrA+7JsX6AeKd/0pmPTLC0lfeL9Lks3FaQwBphTSaSA PGQHhltpij8ienTw1pfuyS+wd5zDhsxGeBK5P9hIxvGuq7i6DVWqJ/7DzF8++9T5 ETUybs0u4ki2kPDQen7jDPXZ935ZpmjJ90i8dV5BtEtOnQOMJK3x1545pfyZjHnP TmXPA3YSAzLj9Yhb0Jw77YwwplJrrKQd3Iex+Sld2NXLhn5aKQ3ADg0/Yf6EROpE 3ctUWNKDlJqYmR/RTNsGk11n22ImvWGx2UIgnx/aC3M8eEZYCzZ7sbeWNIj1PWhm h+iVtOWdNd4HsChetqkjLicRrg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:54 2026 by rpki-client