$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: w7A90NwHxoFzyO22vzecCM1LtvO0o+fwojS1vjPf7kI= Subject key identifier: E8:52:FC:DA:A4:EB:BD:FC:DC:76:0F:E5:11:72:28:F8:3E:25:B4:A3 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 0131 Signing time: Fri 17 Apr 2026 05:27:37 +0000 Manifest this update: Fri 17 Apr 2026 05:27:36 +0000 Manifest next update: Fri 24 Apr 2026 05:27:36 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: Y30SHqw/OhLyfupkEDudKcEpjLJdhsGCDKdARDa9t2E=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Apr 17 05:27:36 2026 GMT Not After : Apr 24 05:27:36 2026 GMT Subject: CN=69e1c4c9-7f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:14:cc:fb:09:ed:f2:79:6a:06:95:ed:a5: 57:1a:a1:4e:98:46:9e:d0:26:6d:c1:d3:7a:00:2a: 0d:a3:42:5a:2c:ea:30:ad:32:04:9c:e6:6f:97:2c: 08:ec:25:b3:0b:4a:08:a2:48:54:27:43:bc:50:01: cb:27:61:3d:57:ee:ba:53:f6:92:ff:36:45:19:ed: 88:6f:1e:18:a6:a0:4b:7b:a3:c5:e7:5d:61:e2:0e: 58:a9:b5:79:25:6d:58:14:60:b2:41:75:82:56:9a: 55:d6:f5:a5:bb:92:0e:7d:2b:52:50:55:3e:26:05: cb:52:d5:8d:14:7e:88:fb:72:d2:42:86:cc:2f:b2: 8a:e9:9f:32:e7:6d:69:28:2e:94:4a:8d:0d:f1:93: a3:35:bb:ac:7b:d6:fa:07:c4:04:8b:bf:02:82:e0: 1e:62:c6:28:e5:93:cb:b5:aa:8c:06:88:05:b5:70: f9:e7:e9:46:67:5b:a1:fb:2d:75:5a:4f:78:08:96: e4:aa:e0:a7:08:6d:d7:2f:bc:76:43:f0:68:7e:9b: ba:57:bd:db:83:64:c8:e7:f6:2c:56:f0:87:62:95: fb:05:ba:1d:f0:36:f2:f6:aa:0f:0b:85:2e:1b:90: 85:73:11:79:72:e3:5b:5b:ea:c6:7a:78:b8:aa:1a: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:52:FC:DA:A4:EB:BD:FC:DC:76:0F:E5:11:72:28:F8:3E:25:B4:A3 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:7f:1a:82:ae:66:ee:44:7f:b6:b4:a1:18:98:04:6f:6d: 6a:b9:49:33:07:49:b7:a7:40:90:84:9a:0a:d9:84:2e:18:13: 66:bb:c3:ed:77:26:ad:ee:f7:8e:66:1b:67:9c:55:05:d4:5c: 11:da:eb:de:70:e7:ee:42:ea:4b:2c:c0:c9:83:13:8d:b5:eb: 5b:00:e2:7d:4b:15:61:bd:f1:49:bf:d2:73:0c:d5:2f:23:f3: a6:dd:05:44:48:12:cf:27:37:91:08:2b:d0:77:24:48:17:11: 62:c7:b0:a6:7c:4b:b0:13:55:f4:72:fc:29:c1:92:2f:0c:03: b7:cb:5a:29:ba:40:e5:4b:4d:c2:12:0b:1a:05:73:f8:6d:69: 8d:43:ec:aa:7d:62:0d:5e:ef:5d:50:3b:42:a9:ad:61:24:9e: 6a:d7:6c:0b:53:32:b5:54:0b:d8:76:39:71:f1:7f:08:34:60: 69:0a:f5:e5:03:c8:5a:7f:58:5e:d0:d9:18:0b:06:9a:cf:79: dd:94:8f:5f:a1:f1:f7:91:5c:05:42:78:64:62:9f:e4:4d:d5: 81:76:ce:f0:78:00:60:68:94:21:1d:f4:bf:cd:62:0e:17:d7: 46:ea:ea:61:f7:7d:37:00:1e:44:e0:ab:cc:dc:22:9f:8e:f1: ff:ea:f9:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjYwNDE3MDUyNzM2WhcNMjYwNDI0MDUyNzM2WjAYMRYwFAYD VQQDEw02OWUxYzRjOS03ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlsUzPsJ7fJ5agaV7aVXGqFOmEae0CZtwdN6ACoNo0JaLOowrTIEnOZvlywI 7CWzC0oIokhUJ0O8UAHLJ2E9V+66U/aS/zZFGe2Ibx4YpqBLe6PF511h4g5YqbV5 JW1YFGCyQXWCVppV1vWlu5IOfStSUFU+JgXLUtWNFH6I+3LSQobML7KK6Z8y521p KC6USo0N8ZOjNbuse9b6B8QEi78CguAeYsYo5ZPLtaqMBogFtXD55+lGZ1uh+y11 Wk94CJbkquCnCG3XL7x2Q/Bofpu6V73bg2TI5/YsVvCHYpX7Bbod8Dby9qoPC4Uu G5CFcxF5cuNbW+rGeni4qhrEYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhS/Nqk 67383HYP5RFyKPg+JbSjMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJt/GoKuZu5Ef7a0oRiYBG9tarlJMwdJt6dAkISaCtmELhgTZrvD7Xcmre73 jmYbZ5xVBdRcEdrr3nDn7kLqSyzAyYMTjbXrWwDifUsVYb3xSb/ScwzVLyPzpt0F REgSzyc3kQgr0HckSBcRYsewpnxLsBNV9HL8KcGSLwwDt8taKbpA5UtNwhILGgVz +G1pjUPsqn1iDV7vXVA7QqmtYSSeatdsC1MytVQL2HY5cfF/CDRgaQr15QPIWn9Y XtDZGAsGms953ZSPX6Hx95FcBUJ4ZGKf5E3VgXbO8HgAYGiUIR30v81iDhfXRurq Yfd9NwAeROCrzNwin47x/+r5cw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:50:01 2026 by rpki-client