$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json) Hash identifier: LyPsrKbQSH/JzeW0T2wf8sAT5NsmizrIxuZqMdpj9/Y= Subject key identifier: 63:C5:0C:A3:41:A2:61:E4:91:5E:5C:5C:30:70:E1:A4:94:1D:BE:8D Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft Manifest number: 77 Signing time: Sun 19 Apr 2026 07:22:33 +0000 Manifest this update: Sun 19 Apr 2026 07:22:32 +0000 Manifest next update: Sun 26 Apr 2026 07:22:32 +0000 Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: B1E++CM5hABXLlSgfAqMZzpPm1AMCOOX1IdAnTBl+Mc=) 2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Apr 19 07:22:32 2026 GMT Not After : Apr 26 07:22:32 2026 GMT Subject: CN=69e482b9-8293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:2a:e5:fa:df:4d:d4:e8:d5:fa:fb:9c:10: 63:b4:13:e7:59:bf:a5:25:cf:a2:12:6e:62:94:60: cc:a8:fe:21:d7:88:f9:e3:4e:22:95:1a:5c:b3:78: 10:66:5e:47:77:ae:c9:54:cd:c0:f6:fd:fa:3a:4b: 26:5d:cb:bf:54:54:43:d3:e1:14:31:62:ff:fb:76: 03:d7:97:ba:8f:81:95:ec:38:7d:11:85:27:6e:70: 30:89:9e:78:a4:82:1b:95:64:c2:bc:8c:ac:f8:08: 72:7d:ed:55:b3:a5:85:b0:3b:36:d6:c3:5a:57:64: 8f:57:19:0b:e6:fd:19:7e:b8:86:2e:44:cc:48:71: 5b:25:5c:5c:c1:20:2f:44:e2:34:da:78:db:48:d7: 59:07:30:b7:0e:5e:00:f1:e7:68:ff:5f:94:33:f6: 21:a8:45:a5:e3:67:32:56:c5:14:b1:ec:4f:0e:31: 6b:25:64:80:e2:eb:fc:e6:34:10:84:5b:04:67:f9: 74:35:37:c7:62:e5:cd:49:e9:21:88:ea:0d:cb:33: f9:c9:00:d5:07:71:ea:e3:6b:15:83:2c:00:d4:09: 53:ce:06:25:7b:fd:23:fd:28:bc:ed:0e:93:10:ca: 39:45:77:a1:5b:48:03:f4:eb:b8:10:84:9d:0c:30: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C5:0C:A3:41:A2:61:E4:91:5E:5C:5C:30:70:E1:A4:94:1D:BE:8D X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5e:e4:fe:b6:6c:ae:7b:30:fe:cd:6d:b4:0a:ec:59:10:e1: f0:e4:95:90:8c:22:3b:44:27:51:25:9c:0b:7a:61:1c:85:93: 48:c8:42:e4:f2:e2:9a:fd:09:e8:b1:58:e8:74:22:b8:32:e7: 5f:25:c7:47:26:8e:59:0d:bf:22:2b:fd:c5:17:ea:c6:85:5d: fc:08:e7:56:30:ae:e5:39:b7:01:8f:d9:9b:66:e2:42:ad:37: 6f:b6:57:36:6f:18:de:34:ee:e5:25:0b:6d:f8:fc:fe:10:1f: 4b:16:ba:9b:7b:eb:96:ea:48:62:2c:fb:cf:11:2f:e2:4c:64: 89:4b:a1:72:2c:00:eb:af:ae:d4:14:d6:85:19:15:50:03:1f: cd:33:c4:a8:62:2a:8f:9f:1f:dd:4d:c3:2e:51:12:07:be:50: 11:5c:43:5d:60:18:fb:48:73:40:ed:ee:bf:cc:92:b0:b0:cb: 4d:85:55:d4:cb:e9:68:d1:e5:56:43:79:f8:12:02:44:7e:f7: e2:5d:8a:36:db:9a:35:8b:cd:a6:43:92:f6:5a:c8:4e:aa:54: e5:87:73:73:87:7a:75:af:75:65:07:13:64:2b:06:ee:16:54: 9d:44:d5:70:4d:39:c2:61:20:ed:8d:fc:38:ea:2e:5e:a3:63: 24:67:32:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNjA0MTkwNzIyMzJaFw0yNjA0MjYwNzIyMzJaMBgxFjAUBgNV BAMTDTY5ZTQ4MmI5LTgyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxeSrl+t9N1OjV+vucEGO0E+dZv6Ulz6ISbmKUYMyo/iHXiPnjTiKVGlyzeBBm Xkd3rslUzcD2/fo6SyZdy79UVEPT4RQxYv/7dgPXl7qPgZXsOH0RhSducDCJnnik ghuVZMK8jKz4CHJ97VWzpYWwOzbWw1pXZI9XGQvm/Rl+uIYuRMxIcVslXFzBIC9E 4jTaeNtI11kHMLcOXgDx52j/X5Qz9iGoRaXjZzJWxRSx7E8OMWslZIDi6/zmNBCE WwRn+XQ1N8di5c1J6SGI6g3LM/nJANUHcerjaxWDLADUCVPOBiV7/SP9KLztDpMQ yjlFd6FbSAP067gQhJ0MMBv1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY8UMo0Gi YeSRXlxcMHDhpJQdvo0wHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw QkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pG bnJNa0RETDdhMktuRUY3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALXuT+tmyuezD+zW20CuxZEOHw5JWQjCI7RCdRJZwLemEchZNIyELk8uKa/Qno sVjodCK4MudfJcdHJo5ZDb8iK/3FF+rGhV38COdWMK7lObcBj9mbZuJCrTdvtlc2 bxjeNO7lJQtt+Pz+EB9LFrqbe+uW6khiLPvPES/iTGSJS6FyLADrr67UFNaFGRVQ Ax/NM8SoYiqPnx/dTcMuURIHvlARXENdYBj7SHNA7e6/zJKwsMtNhVXUy+lo0eVW Q3n4EgJEfvfiXYo225o1i82mQ5L2WshOqlTlh3Nzh3p1r3VlBxNkKwbuFlSdRNVw TTnCYSDtjfw46i5eo2MkZzLR -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:56 2026 by rpki-client