$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: 9ptOE8NUnRpW65KRncd6rYr5p8Q3At6YpiNnjEWl7a0= Subject key identifier: 17:DD:82:71:B2:69:80:60:0E:AF:8A:CF:6F:31:30:80:D1:49:4A:CF Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: 0170 Signing time: Fri 17 Apr 2026 04:30:49 +0000 Manifest this update: Fri 17 Apr 2026 04:30:48 +0000 Manifest next update: Fri 24 Apr 2026 04:30:48 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: U6tOK2OcrQ1YPu3XKNg+jgk0QuFb/LM6OYmfLbwreTY=) 2: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=) 3: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Apr 17 04:30:48 2026 GMT Not After : Apr 24 04:30:48 2026 GMT Subject: CN=69e1b779-62aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:90:8c:bd:6f:c2:28:c7:4a:e5:36:0d:42: d4:68:0e:b5:16:c5:c6:2a:55:62:c4:fc:05:ab:2a: d1:a1:d2:aa:bf:1a:b4:27:bf:62:8e:92:58:86:df: a3:47:34:53:47:dc:d3:99:00:4b:1b:22:9d:38:96: e5:c2:19:23:98:47:0f:5a:b8:fd:0e:bd:f6:29:bb: 93:76:ce:62:ee:8e:58:9e:cc:73:b8:5a:80:a0:cb: 3f:4b:a8:56:14:49:a7:2e:f1:07:77:87:21:5f:81: ae:a2:2b:2b:63:09:91:db:32:b6:a8:e6:96:3f:55: c3:9e:77:41:44:f9:07:b7:05:ea:ea:a8:36:9a:28: d8:3f:c7:b6:ab:48:5b:5b:70:60:59:0c:4f:61:0e: 61:65:9f:2e:b3:6d:5b:8a:83:9c:74:14:45:5f:bf: f9:df:9e:19:75:4a:07:88:43:c9:b2:09:ea:85:28: 99:e4:55:b2:bf:fe:80:c7:c7:b6:5a:80:3e:39:ea: 27:d2:98:44:8d:93:04:97:db:51:ba:ec:bd:3d:9a: 87:09:7c:a6:59:8a:8f:77:00:a7:cb:17:e9:49:c1: 33:7a:e9:5a:3b:1d:5f:10:24:64:c6:49:4a:36:1f: df:c3:1c:07:12:1b:09:90:08:2c:34:51:0e:b3:7b: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:82:71:B2:69:80:60:0E:AF:8A:CF:6F:31:30:80:D1:49:4A:CF X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:8a:04:31:0b:9b:e9:30:1b:6a:d9:18:3a:78:1c:03:c3: a0:57:35:91:7e:a3:57:23:9b:02:7a:6d:57:3a:80:81:80:29: 1a:1b:18:ae:ff:3d:d4:83:89:d2:4c:8e:5a:fa:36:ce:fe:7d: 1e:9c:3d:a8:19:98:7d:19:c9:77:18:1a:28:1d:d8:fa:3c:bb: 52:99:24:ce:bc:cd:12:66:b8:74:ec:49:e2:fa:f2:c2:dc:42: 4c:b2:08:52:4e:fc:15:23:5d:d1:a7:30:e3:5a:68:d3:fa:41: 48:77:13:b0:9a:b4:32:4d:76:c7:fa:87:33:24:99:74:db:53: 76:6e:4a:9f:a5:74:94:a4:01:c0:7c:cd:e9:3d:95:f3:ca:88: f5:81:e4:45:9d:c1:17:89:e8:fb:88:a9:51:28:28:fa:19:7c: 4d:09:f5:d2:c9:1f:34:9c:68:d6:78:99:02:54:3d:45:5c:7b: 8a:e0:6c:76:84:d2:18:3b:98:cd:3f:36:b5:12:09:26:de:cd: de:96:27:c1:7e:8b:86:be:d0:5f:dd:7e:39:32:25:e6:a2:20: a0:10:10:8f:90:da:fd:a5:57:57:dd:73:ed:4a:85:01:ef:73: 48:31:d5:01:b0:fe:cc:67:1c:03:d4:18:3a:89:c7:6f:a2:b4: b5:e2:44:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjYwNDE3MDQzMDQ4WhcNMjYwNDI0MDQzMDQ4WjAYMRYwFAYD VQQDEw02OWUxYjc3OS02MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiaCQjL1vwijHSuU2DULUaA61FsXGKlVixPwFqyrRodKqvxq0J79ijpJYht+j RzRTR9zTmQBLGyKdOJblwhkjmEcPWrj9Dr32KbuTds5i7o5YnsxzuFqAoMs/S6hW FEmnLvEHd4chX4GuoisrYwmR2zK2qOaWP1XDnndBRPkHtwXq6qg2mijYP8e2q0hb W3BgWQxPYQ5hZZ8us21bioOcdBRFX7/5354ZdUoHiEPJsgnqhSiZ5FWyv/6Ax8e2 WoA+Oeon0phEjZMEl9tRuuy9PZqHCXymWYqPdwCnyxfpScEzeulaOx1fECRkxklK Nh/fwxwHEhsJkAgsNFEOs3unMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfdgnGy aYBgDq+Kz28xMIDRSUrPMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8WKBDELm+kwG2rZGDp4HAPDoFc1kX6jVyObAnptVzqAgYApGhsYrv891IOJ 0kyOWvo2zv59Hpw9qBmYfRnJdxgaKB3Y+jy7UpkkzrzNEma4dOxJ4vrywtxCTLII Uk78FSNd0acw41po0/pBSHcTsJq0Mk12x/qHMySZdNtTdm5Kn6V0lKQBwHzN6T2V 88qI9YHkRZ3BF4no+4ipUSgo+hl8TQn10skfNJxo1niZAlQ9RVx7iuBsdoTSGDuY zT82tRIJJt7N3pYnwX6Lhr7QX91+OTIl5qIgoBAQj5Da/aVXV91z7UqFAe9zSDHV AbD+zGccA9QYOonHb6K0teJEVQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:19:49 2026 by rpki-client