$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: GHFmPXUsvwZT/P22xNOPPDOaWA9aTLzPRo8TpvYXQxE= Subject key identifier: 0D:90:13:75:9B:3E:7A:A4:4B:1E:6B:F7:D6:54:3F:D4:66:BA:0C:B2 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: 01A2 Signing time: Fri 17 Apr 2026 03:56:52 +0000 Manifest this update: Fri 17 Apr 2026 03:56:52 +0000 Manifest next update: Fri 24 Apr 2026 03:56:52 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: 82+XToY4ZJeJAaqVpRODh7mT5b0VkkxqHapzKO2IbpE=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Apr 17 03:56:52 2026 GMT Not After : Apr 24 03:56:52 2026 GMT Subject: CN=69e1af84-8c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:11:47:06:d1:5f:dd:67:0b:b2:39:78:a7: 99:6b:35:a6:8b:33:bf:58:18:23:1e:2a:94:16:e9: f1:95:7b:9a:4b:7e:5b:16:f0:f4:d9:ef:14:fa:c1: a4:eb:aa:d9:58:ce:59:47:96:03:18:65:d9:fc:fd: 26:da:89:36:ac:09:75:09:db:d1:a5:10:ed:71:6e: f3:a2:9b:aa:4f:c1:0a:4e:b0:d4:ca:ae:01:01:ac: cc:46:00:0c:2e:22:a3:90:9b:a7:d2:cc:73:d2:de: 6f:2a:f2:3c:2a:73:cf:2b:92:53:e3:07:93:70:f6: 09:e3:f5:93:b7:35:31:23:5e:61:10:f3:23:07:40: b0:d6:7d:74:dd:60:20:17:c7:41:b7:9d:b7:25:3a: a9:f8:21:4c:0e:45:e7:4d:c7:b6:c9:36:21:ba:80: 8d:96:65:85:37:04:24:89:50:26:73:10:40:b2:50: 28:2c:27:ec:72:a1:7f:4d:1b:a9:4b:98:b4:76:57: 23:1e:bd:0a:1c:9d:15:21:28:fd:29:b2:5f:4f:52: d4:8e:d8:c7:8f:42:70:ac:e6:8c:1c:22:1d:ae:31: 68:e3:5f:9e:56:2e:f6:b2:b5:97:1c:37:dd:2b:dc: 23:e1:fe:65:ea:88:da:4c:89:af:8b:6f:69:e0:5d: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:13:75:9B:3E:7A:A4:4B:1E:6B:F7:D6:54:3F:D4:66:BA:0C:B2 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fb:d0:20:cc:da:12:3e:91:65:4b:c2:4a:1a:a5:70:d4:67: 5d:5d:f0:29:16:5b:e7:ab:39:c0:76:b8:60:af:37:fc:00:d9: be:3d:d9:17:00:fa:a1:c3:38:bf:f4:09:c9:10:c2:44:12:b1: 16:78:68:16:6a:2d:5e:a7:c2:27:a9:d1:e6:e9:d7:e8:f4:ec: 45:5f:91:5f:24:fa:4a:52:91:68:ee:e2:69:d6:45:f6:7c:b2: 31:48:c7:d5:2e:a3:d0:d8:e8:eb:46:f9:af:cb:fa:a6:96:46: 87:92:6c:f1:89:f0:dd:63:b4:2a:24:90:97:02:fe:0f:d0:93: b4:f5:fb:47:6e:e9:be:93:5e:ab:4d:c7:a2:bf:72:48:1d:4b: 1b:09:41:c2:70:27:47:dc:68:ba:86:c8:b6:66:05:59:ab:66: bf:0e:de:97:4d:71:9a:4d:8f:ae:12:3a:40:f2:72:de:0f:36: 24:00:2d:59:ae:77:d5:ed:45:8e:41:1f:35:64:dc:43:b8:90: b3:96:d1:b6:90:35:ae:7c:0c:9c:5f:39:b4:36:46:8e:ac:7d: 2e:88:4b:d4:8e:d8:71:18:24:bc:29:48:9f:fe:c4:4e:84:6e: 1e:61:f6:14:24:bc:ff:e7:a5:5f:06:38:b4:91:32:6a:e8:35: 1d:13:a7:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjYwNDE3MDM1NjUyWhcNMjYwNDI0MDM1NjUyWjAYMRYwFAYD VQQDEw02OWUxYWY4NC04YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1q8RRwbRX91nC7I5eKeZazWmizO/WBgjHiqUFunxlXuaS35bFvD02e8U+sGk 66rZWM5ZR5YDGGXZ/P0m2ok2rAl1CdvRpRDtcW7zopuqT8EKTrDUyq4BAazMRgAM LiKjkJun0sxz0t5vKvI8KnPPK5JT4weTcPYJ4/WTtzUxI15hEPMjB0Cw1n103WAg F8dBt523JTqp+CFMDkXnTce2yTYhuoCNlmWFNwQkiVAmcxBAslAoLCfscqF/TRup S5i0dlcjHr0KHJ0VISj9KbJfT1LUjtjHj0JwrOaMHCIdrjFo41+eVi72srWXHDfd K9wj4f5l6ojaTImvi29p4F0lBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2QE3Wb PnqkSx5r99ZUP9RmugyyMB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ/vQIMzaEj6RZUvCShqlcNRnXV3wKRZb56s5wHa4YK83/ADZvj3ZFwD6ocM4 v/QJyRDCRBKxFnhoFmotXqfCJ6nR5unX6PTsRV+RXyT6SlKRaO7iadZF9nyyMUjH 1S6j0Njo60b5r8v6ppZGh5Js8Ynw3WO0KiSQlwL+D9CTtPX7R27pvpNeq03Hor9y SB1LGwlBwnAnR9xouobItmYFWatmvw7el01xmk2PrhI6QPJy3g82JAAtWa531e1F jkEfNWTcQ7iQs5bRtpA1rnwMnF85tDZGjqx9LohL1I7YcRgkvClIn/7EToRuHmH2 FCS8/+elXwY4tJEyaug1HROnkw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:30:29 2026 by rpki-client