$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: YE4Hw/kK2UzouNF14TkWOMUAwOY7ddS5HqBJ2dnhwEE= Subject key identifier: 3F:D2:5C:67:93:20:78:5A:13:DC:65:A3:3F:C4:12:3C:52:2E:82:D0 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 0450 Signing time: Tue 24 Mar 2026 23:54:36 +0000 Manifest this update: Tue 24 Mar 2026 23:54:36 +0000 Manifest next update: Tue 31 Mar 2026 23:54:36 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: U97MtC/HhoW4NABBEsVbt8UANWXu60y4KnXNRgKkIuA=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Mar 24 23:54:36 2026 GMT Not After : Mar 31 23:54:36 2026 GMT Subject: CN=69c3243c-5d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:e4:2c:8c:46:c7:a6:5a:54:d0:5c:7b:92: 57:0a:fa:3c:2e:f2:e3:bd:a6:d2:76:ee:91:fd:11: 35:fb:9b:32:32:5d:d0:e8:d3:dd:74:61:86:53:3b: 44:d3:8c:46:44:e6:2f:16:da:31:f8:ca:cc:2b:be: 11:35:9a:f4:7d:ad:f0:24:d2:9a:06:49:8b:e8:0d: fb:3b:13:69:22:22:69:97:41:5c:95:01:13:7d:7f: e9:46:57:1d:7e:78:04:0d:71:d9:fa:a8:e3:eb:51: 7c:e0:2c:f5:95:9c:cf:1f:cc:25:bc:a9:5e:7b:ec: b2:d0:9b:e9:d8:af:3e:30:f8:c8:2e:9d:e3:af:17: 42:aa:34:6d:8f:31:a1:5e:70:19:b2:70:e9:67:21: 6a:7a:bb:6b:48:6c:40:44:3b:5e:ac:b6:a6:61:fc: 17:fb:bc:6e:e1:b7:b1:99:34:70:80:d2:8c:ac:f8: 47:ff:e7:54:7d:7e:fe:0d:71:cc:89:1d:c4:67:85: 46:fa:50:57:00:78:4f:b3:1a:b3:66:71:ab:fa:20: ca:47:60:c2:a6:f8:e4:a6:46:7c:07:aa:c4:18:0c: a6:4b:6a:f1:18:2a:65:85:b8:29:0d:34:bf:c4:da: 42:5b:47:3a:79:a9:65:86:fb:ac:6d:2d:14:c3:72: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:5C:67:93:20:78:5A:13:DC:65:A3:3F:C4:12:3C:52:2E:82:D0 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:f6:56:d6:fb:3c:27:eb:56:65:d4:3f:d9:bf:25:ba:fd:db: 93:32:28:d2:df:c6:00:33:81:ab:43:98:4b:40:56:a9:af:11: 66:3c:a5:3a:fe:91:bf:2b:b3:33:bb:02:7d:ca:d5:bd:20:63: b6:9b:12:95:f3:88:a9:53:a3:fe:a0:55:ef:f0:91:50:36:3d: 75:e8:9d:f3:e5:55:65:95:ff:5b:fb:a6:95:ff:99:19:ca:3d: 38:27:1f:ac:de:98:a3:a8:e3:9c:eb:32:fd:41:17:8b:27:dc: d0:c1:b9:e1:19:ea:f3:01:2f:41:a0:9c:83:81:a8:f8:7e:e9: 31:46:98:99:c0:7e:ad:0c:0a:bd:a8:bd:b7:f4:13:96:c7:c5: 87:2b:6e:9e:3a:dd:07:f9:84:2b:72:1f:be:28:bd:b4:b5:e9: 3f:90:d2:c1:97:38:ab:86:a1:44:dd:df:c6:97:61:e3:fa:22: 94:a4:4d:c3:8f:f8:aa:1e:7e:ad:92:44:0d:a9:2d:f0:f3:ec: ce:cd:03:11:ba:22:c1:b0:df:9c:8c:a1:13:1a:15:39:cc:af: 8f:ad:f1:32:bd:5e:72:68:2f:b4:fc:18:a2:e4:ec:ea:6d:be: 4b:3f:88:0d:16:2e:7e:41:f8:88:ec:db:9f:2e:e6:c8:ec:55: 33:1c:ca:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjYwMzI0MjM1NDM2WhcNMjYwMzMxMjM1NDM2WjAYMRYwFAYD VQQDEw02OWMzMjQzYy01ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXHkLIxGx6ZaVNBce5JXCvo8LvLjvabSdu6R/RE1+5syMl3Q6NPddGGGUztE 04xGROYvFtox+MrMK74RNZr0fa3wJNKaBkmL6A37OxNpIiJpl0FclQETfX/pRlcd fngEDXHZ+qjj61F84Cz1lZzPH8wlvKlee+yy0Jvp2K8+MPjILp3jrxdCqjRtjzGh XnAZsnDpZyFqertrSGxARDterLamYfwX+7xu4bexmTRwgNKMrPhH/+dUfX7+DXHM iR3EZ4VG+lBXAHhPsxqzZnGr+iDKR2DCpvjkpkZ8B6rEGAymS2rxGCplhbgpDTS/ xNpCW0c6eallhvusbS0Uw3KG+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/SXGeT IHhaE9xloz/EEjxSLoLQMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0PZW1vs8J+tWZdQ/2b8luv3bkzIo0t/GADOBq0OYS0BWqa8RZjylOv6Rvyuz M7sCfcrVvSBjtpsSlfOIqVOj/qBV7/CRUDY9deid8+VVZZX/W/umlf+ZGco9OCcf rN6Yo6jjnOsy/UEXiyfc0MG54Rnq8wEvQaCcg4Go+H7pMUaYmcB+rQwKvai9t/QT lsfFhytunjrdB/mEK3Ifvii9tLXpP5DSwZc4q4ahRN3fxpdh4/oilKRNw4/4qh5+ rZJEDakt8PPszs0DEboiwbDfnIyhExoVOcyvj63xMr1ecmgvtPwYouTs6m2+Sz+I DRYufkH4iOzbny7myOxVMxzKqw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:08 2026 by rpki-client