$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: 9Ba8maidWEpeSBBkrmMLaFFFrQeCFC567zNqLNHYew8= Subject key identifier: 9D:F4:15:43:47:5B:90:10:28:A8:1E:3F:B1:7F:0C:88:68:BE:70:3A Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: 012A Signing time: Sun 19 Apr 2026 05:17:39 +0000 Manifest this update: Sun 19 Apr 2026 05:17:38 +0000 Manifest next update: Sun 26 Apr 2026 05:17:38 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: O+WxlJQvLtGYpeI7ORBwDeQ125Gc6z2b097d/3/QT3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: Apr 19 05:17:38 2026 GMT Not After : Apr 26 05:17:38 2026 GMT Subject: CN=69e46573-1b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:c6:92:7c:d3:ca:65:78:da:8a:6b:14:f1: f3:f0:ab:6b:40:44:64:9a:70:58:34:27:bb:5c:e4: 4b:5c:68:5b:92:8e:58:e9:cb:a6:9d:4a:32:89:14: 4b:f5:f2:98:c4:c0:6d:f6:79:0a:ef:24:61:ba:f7: bc:19:16:15:f5:5e:26:0c:74:c2:27:6f:fa:5b:ea: e9:2f:fc:c0:de:2d:84:d0:40:09:87:c9:22:aa:ca: 5c:22:a6:f3:8e:9f:2e:c9:8b:37:85:68:d0:0f:4d: aa:b6:9d:aa:2c:b2:5e:d8:a4:d4:fe:c7:70:fa:81: 23:fe:3a:32:c2:90:aa:8d:d1:ef:41:bc:c6:b8:d4: 0f:67:c3:72:44:3d:3f:16:45:eb:89:ae:c6:67:16: 29:b8:d7:44:d2:f7:cd:34:01:60:14:66:94:f6:18: dd:cb:5d:15:5e:ce:fd:bf:3a:6f:4d:ec:f2:e7:2d: 62:5f:ff:1d:7e:6e:9e:eb:02:38:06:05:97:9a:48: 64:ac:60:8f:08:c2:c4:79:32:a6:52:8c:85:9d:7c: ca:04:03:c1:74:a0:7c:22:9f:c4:4a:94:5d:b2:95: 49:54:6c:23:08:a3:47:41:83:c2:6d:58:81:28:b1: dc:f7:dc:92:9d:05:17:c4:e1:53:fa:eb:0b:35:c3: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:15:43:47:5B:90:10:28:A8:1E:3F:B1:7F:0C:88:68:BE:70:3A X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:ea:53:23:90:3e:25:82:c6:ee:bf:5c:a9:aa:43:f8:c7: 24:92:cb:af:d8:13:bd:95:09:50:a7:9e:81:6d:ad:89:b9:7d: 57:25:12:4f:71:4f:97:12:ae:4f:9a:e0:5f:27:42:11:c4:4e: 56:f2:bb:3c:02:81:23:a3:dc:54:c1:23:cf:aa:de:00:fc:cc: 60:71:15:d7:19:cc:10:4f:fa:b0:ab:e5:57:88:1d:ab:d7:ca: c0:57:9e:89:3e:26:7b:9f:3f:d8:cf:da:a3:07:15:1b:86:61: 7b:20:1d:c5:63:72:f5:aa:95:17:2b:d9:f5:1d:9c:43:33:34: 9d:8d:5a:12:3b:54:70:04:b5:d2:64:ab:8d:6b:01:4c:2d:b1: 3e:66:24:b4:c1:6d:01:18:9a:14:29:bf:76:20:b9:97:28:21: 88:df:68:23:f3:fd:d4:e3:f9:a2:64:cc:13:4c:a1:17:00:a8: 00:68:3b:cf:bf:95:28:ff:05:73:2a:de:d8:25:df:8f:a6:77: 5e:a0:77:98:61:05:c5:83:9c:b4:d1:37:b8:ee:05:4f:15:04: 37:41:d1:6b:be:d0:3c:7b:db:85:18:e0:d7:c5:56:5e:89:c0: ff:13:fa:fb:53:68:e5:72:64:45:d6:5b:03:d1:1f:1f:57:f2: 77:f2:3a:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB RDg4MzgyRTMwHhcNMjYwNDE5MDUxNzM4WhcNMjYwNDI2MDUxNzM4WjAYMRYwFAYD VQQDEw02OWU0NjU3My0xYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIbGknzTymV42oprFPHz8KtrQERkmnBYNCe7XORLXGhbko5Y6cumnUoyiRRL 9fKYxMBt9nkK7yRhuve8GRYV9V4mDHTCJ2/6W+rpL/zA3i2E0EAJh8kiqspcIqbz jp8uyYs3hWjQD02qtp2qLLJe2KTU/sdw+oEj/joywpCqjdHvQbzGuNQPZ8NyRD0/ FkXria7GZxYpuNdE0vfNNAFgFGaU9hjdy10VXs79vzpvTezy5y1iX/8dfm6e6wI4 BgWXmkhkrGCPCMLEeTKmUoyFnXzKBAPBdKB8Ip/ESpRdspVJVGwjCKNHQYPCbViB KLHc99ySnQUXxOFT+usLNcNotwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ30FUNH W5AQKKgeP7F/DIhovnA6MB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR bmdLWUE2TF9KaVd0aURndU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQC/qUyOQPiWCxu6/XKmqQ/jHJJLLr9gTvZUJUKeegW2tibl9VyUST3FPlxKu T5rgXydCEcROVvK7PAKBI6PcVMEjz6reAPzMYHEV1xnMEE/6sKvlV4gdq9fKwFee iT4me58/2M/aowcVG4ZheyAdxWNy9aqVFyvZ9R2cQzM0nY1aEjtUcAS10mSrjWsB TC2xPmYktMFtARiaFCm/diC5lyghiN9oI/P91OP5omTME0yhFwCoAGg7z7+VKP8F cyre2CXfj6Z3XqB3mGEFxYOctNE3uO4FTxUEN0HRa77QPHvbhRjg18VWXonA/xP6 +1No5XJkRdZbA9EfH1fyd/I6RA== -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:27 2026 by rpki-client