$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json) Hash identifier: 1ddqAlA8vFTWbX6t9vp88BY2NOArpgP1QcC3fHDj3GA= Subject key identifier: 99:F9:A9:88:5A:85:62:36:A9:14:63:27:62:2F:8B:E2:9C:46:AD:20 Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft Manifest number: 0187 Signing time: Fri 17 Apr 2026 04:13:37 +0000 Manifest this update: Fri 17 Apr 2026 04:13:37 +0000 Manifest next update: Fri 24 Apr 2026 04:13:37 +0000 Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: 7Io7vl8/5aDXr9Sb5IL6mulcH8isWssZnS9Bw1rmnIw=) 2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: X9BXQVXdacHKtE65WWjF1sZIjnf6Hwqrn91/87XDVa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Validity Not Before: Apr 17 04:13:37 2026 GMT Not After : Apr 24 04:13:37 2026 GMT Subject: CN=69e1b371-1ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:ae:22:87:da:3c:02:43:fe:10:26:41:71: 11:60:ee:a5:dc:d3:b9:50:66:da:7c:a2:36:95:34: b3:a6:90:3c:a5:d6:9c:3a:69:71:37:e4:40:cd:82: 3b:8c:0a:80:5d:47:af:15:e4:5b:7b:d3:51:33:59: 9a:5c:e8:e7:77:0e:15:03:6a:18:29:4c:14:23:d2: df:68:d7:f2:18:bb:5a:42:37:80:bd:0e:40:b0:c5: 9b:2a:4a:49:88:d2:5b:1f:20:45:52:c8:47:72:21: ce:df:a3:e0:b6:24:07:0b:a3:a1:5c:d9:65:c3:72: d4:12:e8:e9:94:c2:e5:62:e4:89:62:cd:03:11:59: fe:3c:51:f0:b2:ae:c5:a2:05:d5:d0:6a:a7:6c:86: 85:e4:74:9d:a8:92:cc:6a:7c:2d:8b:75:e4:ab:8a: ed:5c:bc:7c:ba:d8:e1:73:66:42:ed:9f:76:41:66: b2:ca:1b:cf:4e:bc:19:c4:7d:06:b1:e6:c1:6d:93: 47:a3:34:a4:a7:d5:c5:be:74:c5:db:fd:74:7a:63: 98:cc:24:16:92:45:c3:37:09:c1:d0:8f:0b:3c:e6: e3:8c:bf:f6:7e:2c:ac:7d:d4:17:19:0c:56:de:cd: c8:b5:ab:ec:cf:dc:fb:49:96:4e:38:13:aa:42:c5: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:A9:88:5A:85:62:36:A9:14:63:27:62:2F:8B:E2:9C:46:AD:20 X509v3 Authority Key Identifier: keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ae:ae:e6:79:bc:c4:7c:c3:d1:47:d0:b5:c9:64:ed:a4:c1: 27:95:d3:62:0d:e1:01:fa:df:1b:c1:f7:99:f8:8e:5f:7b:03: 86:23:3d:3e:57:da:13:1c:80:9b:de:0e:ad:50:00:63:57:17: a2:a0:e6:f1:98:7a:89:59:d4:d8:99:2b:25:1f:b6:a0:6f:28: 78:c5:bf:21:7e:c0:94:e6:9d:fe:e6:9d:f9:4e:39:25:cb:e0: 93:4a:e6:f8:eb:80:5f:f3:9a:65:b6:44:87:af:91:02:b7:ec: c3:aa:ad:2a:bf:98:b7:a8:b6:9e:f7:12:8f:49:d7:d1:ac:5e: b7:f7:6f:03:85:3a:49:94:ba:c4:ab:86:95:08:ef:69:04:93: 71:ac:3d:a4:db:3a:cd:ae:e1:08:a6:6a:44:ea:e6:18:09:d1: 5a:ea:ab:b4:e2:58:38:62:65:0d:85:14:27:68:97:12:0d:80: 6a:93:70:d3:80:01:fb:ac:39:66:ee:d9:8d:d7:90:2b:79:aa: f6:96:aa:a0:b2:46:9b:10:13:cd:d8:11:fa:cc:38:98:db:21: 97:e8:29:ba:9d:f5:ee:60:c5:ae:75:7e:67:d0:ef:18:90:a0: 27:68:1d:6c:71:0d:95:6e:46:1f:d6:e0:e0:19:40:04:0a:13: 21:c2:9b:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBGMUFEMEMwMTgz QTYwNzdDMzQwHhcNMjYwNDE3MDQxMzM3WhcNMjYwNDI0MDQxMzM3WjAYMRYwFAYD VQQDEw02OWUxYjM3MS0xYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn2uIofaPAJD/hAmQXERYO6l3NO5UGbafKI2lTSzppA8pdacOmlxN+RAzYI7 jAqAXUevFeRbe9NRM1maXOjndw4VA2oYKUwUI9LfaNfyGLtaQjeAvQ5AsMWbKkpJ iNJbHyBFUshHciHO36PgtiQHC6OhXNllw3LUEujplMLlYuSJYs0DEVn+PFHwsq7F ogXV0GqnbIaF5HSdqJLManwti3Xkq4rtXLx8utjhc2ZC7Z92QWayyhvPTrwZxH0G sebBbZNHozSkp9XFvnTF2/10emOYzCQWkkXDNwnB0I8LPObjjL/2fiysfdQXGQxW 3s3Itavsz9z7SZZOOBOqQsXjqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJn5qYha hWI2qRRjJ2Ivi+KcRq0gMB8GA1UdIwQYMBaAFAUBR7lNydbL6MCw8a0MAYOmB3w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjlBQS81RjA2OTNGNEU3 NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFzdm93TER4clF3Qmc2WUhm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRRkh1VTNKMXN2b3dMRHhyUXdCZzZZSGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjlBQS81RjA2OTNGNEU3NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFz dm93TER4clF3Qmc2WUhmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeq6u5nm8xHzD0UfQtclk7aTBJ5XTYg3hAfrfG8H3mfiOX3sDhiM9PlfaExyA m94OrVAAY1cXoqDm8Zh6iVnU2JkrJR+2oG8oeMW/IX7AlOad/uad+U45Jcvgk0rm +OuAX/OaZbZEh6+RArfsw6qtKr+Yt6i2nvcSj0nX0axet/dvA4U6SZS6xKuGlQjv aQSTcaw9pNs6za7hCKZqROrmGAnRWuqrtOJYOGJlDYUUJ2iXEg2AapNw04AB+6w5 Zu7ZjdeQK3mq9paqoLJGmxATzdgR+sw4mNshl+gpup317mDFrnV+Z9DvGJCgJ2gd bHENlW5GH9bg4BlABAoTIcKb7A== -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:50 2026 by rpki-client