$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: QWD6zsqx4LHSLEuVclLKb9aSOJ6fzXUdmLQvJKa+kPw= Subject key identifier: 8B:FC:E1:2B:34:65:D6:4C:8D:40:43:B9:AB:8D:87:5B:06:90:6C:4C Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 028B Signing time: Fri 17 Apr 2026 01:33:41 +0000 Manifest this update: Fri 17 Apr 2026 01:33:40 +0000 Manifest next update: Fri 24 Apr 2026 01:33:40 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: gQO8rcI0b8eLj2p0HBdchuNHZKbVtSW3ZsvcJCq6yoU=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: tvqlcJCmAFNM8ul/lcMi6vNrt3BBFQygy7dURzB2DO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Apr 17 01:33:40 2026 GMT Not After : Apr 24 01:33:40 2026 GMT Subject: CN=69e18df5-7a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:72:69:b1:c7:40:3d:16:c8:0e:34:3a:64: 46:bc:30:0b:18:f9:22:ca:7d:25:d8:f3:5d:5f:70: 9e:db:45:b2:72:b3:7a:c8:15:23:63:43:76:14:9b: 7e:3b:6b:e3:42:53:60:9d:61:df:20:00:9a:cf:3a: 93:4a:e8:da:70:65:6e:18:5f:49:60:ca:f3:83:67: d4:a6:28:04:69:e7:fa:6e:dc:e5:eb:56:ee:5f:9d: 46:0e:51:c1:f9:46:4a:d1:d8:a8:0d:78:08:4c:33: eb:ee:a0:4b:3b:10:1c:9d:47:e9:44:99:67:91:a4: 61:56:4e:06:b7:5e:b9:8e:ea:1f:70:a9:af:2c:aa: 09:19:8d:2d:3b:02:8b:36:55:4d:35:e3:41:e7:16: b8:2a:c1:9b:d0:7e:19:05:50:ce:91:4b:4e:57:05: fb:aa:4d:1d:24:93:35:b2:07:7d:5e:f6:14:f2:92: 28:76:9d:6f:1b:6c:01:ae:41:f9:ac:53:77:c8:4d: 05:43:a4:71:80:aa:78:c6:4c:16:8b:a7:0a:77:55: e6:91:eb:60:34:88:7c:83:d7:cc:39:aa:18:a5:17: 67:83:1d:d1:a4:0b:91:02:83:11:38:ed:db:5e:25: f6:bc:15:29:3a:82:32:6f:ee:d5:db:e3:d9:12:9e: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:E1:2B:34:65:D6:4C:8D:40:43:B9:AB:8D:87:5B:06:90:6C:4C X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f5:a1:d8:48:ed:5d:bb:f4:dd:4c:67:25:46:f4:30:ec:ec: 71:2f:57:61:d5:48:18:c6:dd:9a:3a:ca:60:7e:71:dd:dd:c4: 18:05:dd:29:d0:c3:03:78:cb:04:a4:54:6d:7b:ad:8e:07:1c: 50:82:ed:29:35:1a:4f:32:67:16:3d:7e:ba:56:b5:00:bd:66: 97:e9:5e:29:35:b1:f0:67:99:43:03:47:96:87:29:9d:f1:d8: bc:4a:80:02:18:d9:38:10:7b:03:94:5e:25:d6:6a:33:25:2b: 6f:05:5b:c5:65:52:4a:02:4d:dd:1c:e2:45:34:48:37:1d:8d: aa:6a:2a:bb:66:29:61:84:c6:28:d8:a8:48:e3:af:b6:a7:3f: f6:b8:07:67:de:f4:c3:08:fa:f9:bb:27:39:0b:61:46:cc:5c: e0:b1:00:66:ce:2d:03:2a:7f:c7:3b:fa:30:7f:b4:e4:a7:be: cd:a0:1b:72:36:15:ba:74:ec:91:e6:44:ae:91:bd:a0:dd:08: 71:75:a2:ff:1f:d5:e0:bd:3c:40:3b:13:76:fa:2b:21:7d:ad: 29:0b:54:6a:d6:97:a2:5d:a2:e6:20:02:1f:49:61:a6:6f:18: a0:a7:db:f4:13:73:1f:8d:ff:5b:d5:4f:30:21:5d:9c:81:95: fe:d1:bd:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjYwNDE3MDEzMzQwWhcNMjYwNDI0MDEzMzQwWjAYMRYwFAYD VQQDEw02OWUxOGRmNS03YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArElyabHHQD0WyA40OmRGvDALGPkiyn0l2PNdX3Ce20WycrN6yBUjY0N2FJt+ O2vjQlNgnWHfIACazzqTSujacGVuGF9JYMrzg2fUpigEaef6btzl61buX51GDlHB +UZK0dioDXgITDPr7qBLOxAcnUfpRJlnkaRhVk4Gt165juofcKmvLKoJGY0tOwKL NlVNNeNB5xa4KsGb0H4ZBVDOkUtOVwX7qk0dJJM1sgd9XvYU8pIodp1vG2wBrkH5 rFN3yE0FQ6RxgKp4xkwWi6cKd1XmketgNIh8g9fMOaoYpRdngx3RpAuRAoMROO3b XiX2vBUpOoIyb+7V2+PZEp4HCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIv84Ss0 ZdZMjUBDuauNh1sGkGxMMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn/Wh2EjtXbv03UxnJUb0MOzscS9XYdVIGMbdmjrKYH5x3d3EGAXdKdDDA3jL BKRUbXutjgccUILtKTUaTzJnFj1+ula1AL1ml+leKTWx8GeZQwNHlocpnfHYvEqA AhjZOBB7A5ReJdZqMyUrbwVbxWVSSgJN3RziRTRINx2Nqmoqu2YpYYTGKNioSOOv tqc/9rgHZ970wwj6+bsnOQthRsxc4LEAZs4tAyp/xzv6MH+05Ke+zaAbcjYVunTs keZErpG9oN0IcXWi/x/V4L08QDsTdvorIX2tKQtUataXol2i5iACH0lhpm8YoKfb 9BNzH43/W9VPMCFdnIGV/tG9Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:33 2026 by rpki-client