$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: V/N9+omtbbXrXHu8SxK1pznika2I5Gc3XI3SBRkUu8M= Subject key identifier: 33:A9:76:95:FE:A4:45:57:24:4D:44:EA:94:2F:05:0F:5B:0B:73:C2 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0A31 Signing time: Thu 16 Apr 2026 17:09:57 +0000 Manifest this update: Thu 16 Apr 2026 17:09:57 +0000 Manifest next update: Thu 23 Apr 2026 17:09:57 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: r/CBVP4rd2qzhkftaKz9S1oGmUEEeDnGNKimDvDGqGs=) 2: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=) 3: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Apr 16 17:09:57 2026 GMT Not After : Apr 23 17:09:57 2026 GMT Subject: CN=69e117e5-01fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:68:b2:f9:86:bb:b0:00:23:dc:cf:e6:be: 97:95:67:5d:57:fb:2e:c9:d7:20:50:5f:4c:67:26: 19:c4:e7:9f:78:54:c0:79:63:62:ce:e2:4a:87:c9: 23:86:83:d1:38:e1:94:6f:f5:99:04:bf:f7:64:de: 89:8a:07:cc:75:e0:6c:17:d8:f5:25:89:34:aa:01: 93:5e:04:97:1b:8e:64:b4:3f:7d:e0:14:a4:64:6d: c7:f8:2a:ab:23:fd:15:84:58:25:9b:9c:ae:a0:d8: a1:40:f2:3b:c9:87:6e:00:c7:6d:07:14:65:6e:ee: 8a:4c:ab:86:b6:f1:8e:36:0e:b9:b1:15:a0:82:1b: ed:48:ea:6a:43:c3:46:bc:21:f6:56:63:a2:48:71: 5e:d0:4a:6e:a6:25:87:ae:26:1f:15:b8:10:1b:7b: 41:8d:4a:f9:67:8b:39:07:82:2c:8a:77:46:4f:f4: e7:7b:52:db:27:fb:e7:78:57:b6:2c:56:61:aa:de: 1f:aa:f9:4e:1c:0f:b5:5f:e3:ae:8a:33:74:ae:e1: 6b:2a:d2:88:71:de:c0:03:97:85:4f:91:09:37:26: 5e:04:06:a2:2b:87:be:6c:53:9a:db:91:e2:43:c0: 98:a3:17:0a:2d:4b:e6:b9:af:51:ba:bb:2a:a4:33: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:76:95:FE:A4:45:57:24:4D:44:EA:94:2F:05:0F:5B:0B:73:C2 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:91:40:1d:aa:8a:f1:00:50:a4:5d:af:2f:e5:bc:18:a2:41: df:f1:a3:98:48:7e:e9:c5:f7:0a:59:f8:de:63:30:7d:29:b7: a5:01:fa:41:bf:75:b6:0c:34:6f:2a:70:84:20:41:4b:f8:06: 3b:23:f1:9b:cb:82:21:30:57:ff:2c:21:8f:7a:78:d6:22:a2: 4a:eb:12:71:5a:8b:a0:bf:46:8b:75:13:21:c8:3d:09:25:51: e8:cb:aa:99:a9:41:05:79:54:d4:cf:6f:f3:c6:6c:dc:01:94: a9:d2:75:86:ea:e2:ee:80:f9:41:b1:bc:d8:e5:99:c7:cd:cc: d5:c7:a4:1b:2b:69:8d:6d:77:92:ff:29:01:3e:69:02:b1:56: d5:34:4b:97:4a:c7:e8:6a:b3:2a:b5:1f:ba:db:78:94:a0:3c: b4:76:77:90:8f:99:2e:66:91:bb:ae:14:6c:1f:5b:ce:9c:ba: 87:8c:bb:31:57:b5:c2:ec:fe:c9:75:dc:85:3a:78:dc:71:6d: cd:2c:ed:b0:5d:8b:07:85:a4:61:b2:b3:51:50:15:b8:e3:9e: 3e:a7:75:2d:57:17:69:0a:9e:b1:2e:01:e8:7f:e3:37:01:fa: 61:33:cf:d4:bc:48:cc:ff:ef:f6:9c:ad:b0:f7:43:b4:fc:e5: 14:e2:93:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjYwNDE2MTcwOTU3WhcNMjYwNDIzMTcwOTU3WjAYMRYwFAYD VQQDEw02OWUxMTdlNS0wMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlZosvmGu7AAI9zP5r6XlWddV/suydcgUF9MZyYZxOefeFTAeWNizuJKh8kj hoPROOGUb/WZBL/3ZN6JigfMdeBsF9j1JYk0qgGTXgSXG45ktD994BSkZG3H+Cqr I/0VhFglm5yuoNihQPI7yYduAMdtBxRlbu6KTKuGtvGONg65sRWgghvtSOpqQ8NG vCH2VmOiSHFe0EpupiWHriYfFbgQG3tBjUr5Z4s5B4IsindGT/Tne1LbJ/vneFe2 LFZhqt4fqvlOHA+1X+OuijN0ruFrKtKIcd7AA5eFT5EJNyZeBAaiK4e+bFOa25Hi Q8CYoxcKLUvmua9RursqpDPE8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOpdpX+ pEVXJE1E6pQvBQ9bC3PCMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPJFAHaqK8QBQpF2vL+W8GKJB3/GjmEh+6cX3Cln43mMwfSm3pQH6Qb91tgw0 bypwhCBBS/gGOyPxm8uCITBX/ywhj3p41iKiSusScVqLoL9Gi3UTIcg9CSVR6Muq malBBXlU1M9v88Zs3AGUqdJ1huri7oD5QbG82OWZx83M1cekGytpjW13kv8pAT5p ArFW1TRLl0rH6GqzKrUfutt4lKA8tHZ3kI+ZLmaRu64UbB9bzpy6h4y7MVe1wuz+ yXXchTp43HFtzSztsF2LB4WkYbKzUVAVuOOePqd1LVcXaQqesS4B6H/jNwH6YTPP 1LxIzP/v9pytsPdDtPzlFOKTbQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:38:39 2026 by rpki-client