$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: NrjQM2PN+hJwDXRaUCcHCuwjkrXgQ9Yf+7fpx5mnV2U= Subject key identifier: 97:DE:7A:34:A1:2C:4C:6F:FB:55:D0:33:8B:9A:83:C1:41:66:B2:5E Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 0A54 Signing time: Tue 24 Mar 2026 19:26:46 +0000 Manifest this update: Tue 24 Mar 2026 19:26:46 +0000 Manifest next update: Tue 31 Mar 2026 19:26:46 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: lH2aAZi2lBFHlpl7u7wHnpD1arzvv2M7p5jsQkeFcgc=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Mar 24 19:26:46 2026 GMT Not After : Mar 31 19:26:46 2026 GMT Subject: CN=69c2e576-d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:7c:fd:11:74:30:f8:c5:f4:47:cc:23:d3: 03:a3:b5:10:52:f7:94:44:ba:30:53:66:38:b4:37: d4:da:84:d7:04:54:2e:9b:9e:54:fd:7f:08:3a:68: 38:21:b3:8d:e2:fe:c0:3a:c2:4f:79:f6:97:53:2a: c4:a4:21:f5:06:6b:6f:82:fd:b4:b8:4e:8c:52:a9: 17:77:02:db:de:e6:87:9f:9d:b4:0f:37:92:96:1e: 71:ae:aa:5c:3a:c6:c3:4f:1d:ae:e8:99:10:93:98: ea:6f:f9:09:c5:f2:2b:d3:61:31:4e:48:dd:b2:ba: e6:10:53:f3:da:51:2a:dd:74:b8:9a:98:7c:5a:28: 03:fd:ad:1e:26:80:b7:29:d7:a1:82:a5:92:2a:ea: af:d9:c8:1e:42:f6:2f:fd:83:10:3f:86:14:26:bc: 7e:11:a0:2b:8a:5a:ac:e4:10:1a:4f:4a:9e:45:a1: 4d:64:54:8f:dc:b0:8c:87:4d:14:43:e4:da:60:d3: 97:0f:86:d1:25:19:36:2c:71:e8:fb:d0:b3:30:6d: b1:3a:93:49:9f:09:85:51:b4:87:bf:57:a0:f3:79: 9c:45:4a:96:df:a2:a1:bc:d4:2d:8e:89:c7:0d:86: e7:e6:7b:d2:5b:1f:1f:8d:57:e5:5c:b7:97:32:49: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:7A:34:A1:2C:4C:6F:FB:55:D0:33:8B:9A:83:C1:41:66:B2:5E X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a9:41:d4:7e:2b:31:ba:63:4f:b2:36:44:e4:72:ef:72:79: ed:60:22:6e:b4:74:e9:9b:38:6b:87:7d:a9:30:0a:69:fe:66: 25:78:e9:16:3d:54:50:3f:ac:e9:4c:b9:24:05:6b:a5:a3:67: 47:f5:9c:9b:e7:ea:70:83:4e:1a:4a:ca:35:b5:71:96:45:b9: 3c:65:60:ef:a0:7c:7e:d4:82:87:ac:8c:8c:fa:d1:d3:38:90: e7:c9:0b:69:22:a6:38:0e:c1:12:3e:c9:38:5d:7e:45:0c:df: 67:00:9e:d0:52:93:b8:b7:be:2e:d3:d5:5e:0b:45:f7:cb:fb: 47:7e:2b:34:25:55:bc:22:f0:58:cc:2d:c1:e7:f0:3e:94:cc: fa:5c:88:db:b9:5a:47:d7:bc:e7:42:57:0e:d7:dc:5a:2c:ed: 29:a2:62:43:22:bf:08:b4:11:5d:95:f9:89:ec:b5:e2:dd:86: 84:5c:ea:66:ef:eb:e5:7b:d1:ed:c7:b9:fa:a9:42:06:ae:3b: 0c:dd:22:74:37:cf:b6:bf:94:db:73:fa:1c:42:37:90:4f:45: 99:4c:18:cd:e4:a2:cc:d5:31:dc:9e:13:48:49:9a:54:03:b7: bc:58:2c:30:ee:f8:29:37:b6:80:d8:30:48:73:fd:57:93:2a: b9:63:4d:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjYwMzI0MTkyNjQ2WhcNMjYwMzMxMTkyNjQ2WjAYMRYwFAYD VQQDEw02OWMyZTU3Ni1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKB8/RF0MPjF9EfMI9MDo7UQUveURLowU2Y4tDfU2oTXBFQum55U/X8IOmg4 IbON4v7AOsJPefaXUyrEpCH1Bmtvgv20uE6MUqkXdwLb3uaHn520DzeSlh5xrqpc OsbDTx2u6JkQk5jqb/kJxfIr02ExTkjdsrrmEFPz2lEq3XS4mph8WigD/a0eJoC3 KdehgqWSKuqv2cgeQvYv/YMQP4YUJrx+EaArilqs5BAaT0qeRaFNZFSP3LCMh00U Q+TaYNOXD4bRJRk2LHHo+9CzMG2xOpNJnwmFUbSHv1eg83mcRUqW36KhvNQtjonH DYbn5nvSWx8fjVflXLeXMkly/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfeejSh LExv+1XQM4uag8FBZrJeMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB6lB1H4rMbpjT7I2RORy73J57WAibrR06Zs4a4d9qTAKaf5mJXjpFj1UUD+s 6Uy5JAVrpaNnR/Wcm+fqcINOGkrKNbVxlkW5PGVg76B8ftSCh6yMjPrR0ziQ58kL aSKmOA7BEj7JOF1+RQzfZwCe0FKTuLe+LtPVXgtF98v7R34rNCVVvCLwWMwtwefw PpTM+lyI27laR9e850JXDtfcWiztKaJiQyK/CLQRXZX5iey14t2GhFzqZu/r5XvR 7ce5+qlCBq47DN0idDfPtr+U23P6HEI3kE9FmUwYzeSizNUx3J4TSEmaVAO3vFgs MO74KTe2gNgwSHP9V5MquWNNow== -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:54 2026 by rpki-client