$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json) Hash identifier: LnkOXd7j5U/n6u7J0ESZc+EYFyjWMj8nP++qauT2CK0= Subject key identifier: 43:A0:63:E9:06:73:C9:EF:0C:A0:46:05:CA:9B:40:0D:B2:B2:B8:B4 Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Certificate serial: 2218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft Manifest number: 2E3F Signing time: Thu 26 Mar 2026 15:30:59 +0000 Manifest this update: Thu 26 Mar 2026 15:30:58 +0000 Manifest next update: Thu 02 Apr 2026 15:30:58 +0000 Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: DP7Bo1ZAsGCF70aQdwJ9OmFphObfNCoYJLPzqIPz3XI=) 2: 80FC5BF2212011F1A03CA2C1293D8C67.roa (hash: HjMroyClrQ1lSezZf19S89Tl/NsSxkOTSAds2FsbWLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8728 (0x2218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Validity Not Before: Mar 26 15:30:58 2026 GMT Not After : Apr 2 15:30:58 2026 GMT Subject: CN=69c55133-b67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:92:8e:95:78:98:76:75:ef:b2:90:07:cc: 39:2f:9a:4e:9b:f1:c3:14:d0:bf:3c:19:2d:a9:cb: f0:3e:c2:c5:fc:ea:35:fd:a2:c5:e5:4e:3a:fa:81: 33:3f:2d:06:b4:61:34:07:7c:68:18:b1:a4:aa:d6: 41:2d:09:09:29:08:89:f2:ac:af:1e:03:82:cf:1d: 8d:55:45:34:90:ff:8a:dc:f7:4b:03:92:ff:66:c0: f2:bb:85:2f:93:5d:80:32:b6:69:08:c5:2f:94:3c: d0:93:8a:18:30:ca:86:6d:bc:d2:6e:5e:60:32:ec: 2c:e8:a8:2a:21:cf:2e:fb:64:f5:14:ea:54:2e:46: 04:da:7d:a9:59:0b:74:50:79:38:54:eb:49:7a:f4: 56:b2:d9:41:af:0c:f0:76:52:df:53:5a:88:b7:c0: 47:41:69:0b:b2:7a:51:50:7f:72:42:3e:4c:99:b6: d9:4a:21:ab:6f:27:bf:25:58:6e:1a:7c:22:e8:70: ca:56:57:c3:03:0b:f7:90:0b:f0:38:b3:bf:f9:2f: 53:67:ea:4c:55:27:0f:33:8c:58:1a:6c:c7:ea:5b: 6e:53:e4:a1:40:ff:30:6a:de:ad:bf:df:54:7d:5f: 6d:bb:c8:25:d4:92:8c:5d:77:5e:ed:fa:96:9d:12: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:63:E9:06:73:C9:EF:0C:A0:46:05:CA:9B:40:0D:B2:B2:B8:B4 X509v3 Authority Key Identifier: keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c8:a3:3c:a6:c3:26:8d:52:69:fc:59:cb:a6:51:0c:72:21: fc:03:1b:65:30:a6:61:5e:81:f0:9d:64:75:1f:4e:03:78:79: bf:9a:47:bf:ec:0e:42:ce:e5:97:72:65:e0:8f:4f:75:23:b9: 0f:0e:8c:d0:7a:c9:29:fe:97:26:ff:ca:48:f7:c8:65:cf:77: 49:09:ff:7c:fd:bf:2b:0e:54:64:94:3f:21:47:4d:9e:c0:80: 65:b1:df:3d:b6:33:4e:f1:3c:b6:13:9e:8f:e3:4e:e2:9a:43: c2:15:ce:fd:d9:89:22:10:74:df:b2:f0:e8:43:cc:6c:28:2b: e5:64:35:ea:e4:bd:2c:78:3b:3f:65:1c:68:3c:ef:e2:9b:fc: 2e:e3:2b:95:9b:f3:30:80:74:8a:25:fc:9c:34:34:b1:61:bb: 52:60:84:a0:e0:e5:ac:21:64:a6:99:4e:0a:57:10:4c:8f:05: 71:4d:fc:ff:07:22:6a:b3:71:f0:e3:b6:a4:f0:3b:39:3c:a9: c0:66:37:67:2e:28:47:4e:25:06:34:fe:cf:b9:d3:2e:ed:1d: 38:d5:8c:26:e3:02:d8:51:53:e0:9a:c2:2a:98:85:91:1c:4d: 4f:36:cc:c9:15:35:e3:8f:33:2d:1a:9d:12:03:87:6d:1b:06: 1c:da:f1:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4 NzYzMjhDRDkwHhcNMjYwMzI2MTUzMDU4WhcNMjYwNDAyMTUzMDU4WjAYMRYwFAYD VQQDEw02OWM1NTEzMy1iNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAml6SjpV4mHZ177KQB8w5L5pOm/HDFNC/PBktqcvwPsLF/Oo1/aLF5U46+oEz Py0GtGE0B3xoGLGkqtZBLQkJKQiJ8qyvHgOCzx2NVUU0kP+K3PdLA5L/ZsDyu4Uv k12AMrZpCMUvlDzQk4oYMMqGbbzSbl5gMuws6KgqIc8u+2T1FOpULkYE2n2pWQt0 UHk4VOtJevRWstlBrwzwdlLfU1qIt8BHQWkLsnpRUH9yQj5MmbbZSiGrbye/JVhu Gnwi6HDKVlfDAwv3kAvwOLO/+S9TZ+pMVScPM4xYGmzH6ltuU+ShQP8wat6tv99U fV9tu8gl1JKMXXde7fqWnRK9WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOgY+kG c8nvDKBGBcqbQA2ysri0MB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUyNS9GNDM0NDExNjhBMkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9Z dHdnVDF0cmN0VWFIWXlqTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAysijPKbDJo1SafxZy6ZRDHIh/AMbZTCmYV6B8J1kdR9OA3h5v5pHv+wOQs7l l3Jl4I9PdSO5Dw6M0HrJKf6XJv/KSPfIZc93SQn/fP2/Kw5UZJQ/IUdNnsCAZbHf PbYzTvE8thOej+NO4ppDwhXO/dmJIhB037Lw6EPMbCgr5WQ16uS9LHg7P2UcaDzv 4pv8LuMrlZvzMIB0iiX8nDQ0sWG7UmCEoODlrCFkpplOClcQTI8FcU38/wciarNx 8OO2pPA7OTypwGY3Zy4oR04lBjT+z7nTLu0dONWMJuMC2FFT4JrCKpiFkRxNTzbM yRU1448zLRqdEgOHbRsGHNrxdw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:35 2026 by rpki-client