$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: hmjcarhj0peJ4qhj2tIQDeZG2HJS3RTEvhfasFo4trY= Subject key identifier: A2:CD:41:12:12:5C:F7:B5:8B:03:25:01:B1:45:19:59:33:0C:A0:88 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: 0156 Signing time: Fri 17 Apr 2026 04:42:03 +0000 Manifest this update: Fri 17 Apr 2026 04:42:03 +0000 Manifest next update: Fri 24 Apr 2026 04:42:03 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: fZuYYH0JNHqQkGrKyX7DUdCFvisrACrPxpnqaAHlKN0=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: eFqoSUC3CBG2LpBUw/aigLIa86LE66amw5wsVo9Bfuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Apr 17 04:42:03 2026 GMT Not After : Apr 24 04:42:03 2026 GMT Subject: CN=69e1ba1b-1686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:da:fd:e7:cf:2d:f6:d6:67:64:ee:c3:37: 3b:9c:1d:15:77:89:b0:62:b8:11:b2:18:71:fc:a3: db:39:a7:1a:aa:90:26:ff:a5:0a:73:6f:a1:b9:ef: ff:27:f7:c8:52:be:2f:d8:05:87:18:15:99:bc:b3: 5f:7f:4c:4f:8b:53:be:76:7d:ed:f1:68:db:fb:ad: b1:19:3e:d7:0d:ed:20:75:a0:51:a7:51:36:21:3f: ec:dc:45:d0:a2:7d:74:37:9a:a8:94:38:c9:78:5c: 2c:36:5a:69:b8:27:9e:ff:81:58:5c:1b:e2:c9:6b: 03:d1:be:d3:a1:e1:d3:11:50:58:d4:9e:db:84:e4: 96:a5:2c:ae:8c:36:3c:4b:7c:39:17:03:4a:a7:11: 1e:9a:c7:c7:5e:e5:e9:3b:fd:51:50:81:35:ca:e8: 22:fe:3b:f0:68:09:10:59:76:d0:ac:80:59:ee:61: 30:f7:2b:37:70:71:53:ed:a6:3b:68:02:8d:94:a1: 10:42:9d:31:3d:88:89:23:b9:22:66:c6:99:50:c3: 64:80:81:74:fb:4c:22:40:04:c5:c6:cc:52:2a:82: 06:08:47:2e:e3:9c:30:c3:05:e6:e9:3e:26:57:c9: 97:1b:f7:d2:d9:3b:24:cc:45:f5:b1:74:a2:ce:f4: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:41:12:12:5C:F7:B5:8B:03:25:01:B1:45:19:59:33:0C:A0:88 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b5:8e:5b:bd:5d:24:ab:94:7f:04:f1:db:dc:b0:f2:0b:04: f7:5c:db:b3:86:52:29:15:04:93:44:e6:08:8c:31:aa:9c:1d: c5:dc:ec:18:37:41:ab:f1:28:d7:d8:94:8e:5f:9c:a2:fd:3c: 9f:1b:18:65:14:ba:c7:a9:0e:b7:8f:ad:f2:e0:05:55:e7:44: fe:cb:45:09:5f:61:0a:6d:e3:ae:9e:18:74:9e:da:88:27:af: 17:ea:bb:55:72:d4:ba:be:09:cc:23:81:51:b2:32:ed:6b:0d: 0e:ed:7b:a1:58:28:98:8e:4a:2e:61:b5:ce:e7:6d:70:2a:d7: f9:54:a3:21:59:81:de:48:6c:d0:b9:fa:2c:1f:7b:76:74:88: 76:c8:94:b4:92:8a:7b:11:62:05:02:eb:05:da:08:0b:68:35: 41:47:56:3c:8a:d4:ab:01:85:df:b7:e1:4c:e6:b4:a0:0b:26: 8a:7a:d6:aa:fa:3f:24:ae:65:fc:b5:2c:24:58:9f:c7:39:66: 6d:9c:0a:10:bb:92:46:74:fb:2d:d0:2a:54:6d:e0:64:a7:ee: 8a:19:03:b4:a0:b3:79:f1:02:e6:d6:d9:a8:b3:21:32:01:70: 83:77:65:9a:f8:b6:14:20:39:41:90:4c:9a:40:c7:f3:16:a4: 2f:7d:01:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjYwNDE3MDQ0MjAzWhcNMjYwNDI0MDQ0MjAzWjAYMRYwFAYD VQQDEw02OWUxYmExYi0xNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqLa/efPLfbWZ2Tuwzc7nB0Vd4mwYrgRshhx/KPbOacaqpAm/6UKc2+hue// J/fIUr4v2AWHGBWZvLNff0xPi1O+dn3t8Wjb+62xGT7XDe0gdaBRp1E2IT/s3EXQ on10N5qolDjJeFwsNlppuCee/4FYXBviyWsD0b7ToeHTEVBY1J7bhOSWpSyujDY8 S3w5FwNKpxEemsfHXuXpO/1RUIE1yugi/jvwaAkQWXbQrIBZ7mEw9ys3cHFT7aY7 aAKNlKEQQp0xPYiJI7kiZsaZUMNkgIF0+0wiQATFxsxSKoIGCEcu45wwwwXm6T4m V8mXG/fS2TskzEX1sXSizvSFPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLNQRIS XPe1iwMlAbFFGVkzDKCIMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrWOW71dJKuUfwTx29yw8gsE91zbs4ZSKRUEk0TmCIwxqpwdxdzsGDdBq/Eo 19iUjl+cov08nxsYZRS6x6kOt4+t8uAFVedE/stFCV9hCm3jrp4YdJ7aiCevF+q7 VXLUur4JzCOBUbIy7WsNDu17oVgomI5KLmG1zudtcCrX+VSjIVmB3khs0Ln6LB97 dnSIdsiUtJKKexFiBQLrBdoIC2g1QUdWPIrUqwGF37fhTOa0oAsminrWqvo/JK5l /LUsJFifxzlmbZwKELuSRnT7LdAqVG3gZKfuihkDtKCzefEC5tbZqLMhMgFwg3dl mvi2FCA5QZBMmkDH8xakL30B8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:10 2026 by rpki-client