$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: HFPjsEheIXSFkB62BxziXB7WXBUSmjqBmniU31FxLak= Subject key identifier: EB:61:56:BE:9C:47:D6:DF:F7:ED:79:82:25:C0:62:2B:97:FF:A1:9C Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 0862 Signing time: Thu 16 Apr 2026 20:47:23 +0000 Manifest this update: Thu 16 Apr 2026 20:47:23 +0000 Manifest next update: Thu 23 Apr 2026 20:47:23 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: 2ekm9oPbby6PaPsDpL6Cdia0EOkcb1mQbnPkx2a164s=) 2: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: sMAmYlXlaGfYX483zQnKNNyggh6fdl5j3X0veZpEvVk=) 3: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: Jad+xXpbo9F1Si83r3/4thdMZxhxo4YYl8MwD9607wo=) 4: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: v7v6WaMiJJgHGJFslronZNjFXcWnrbiRDd5BXO1kv5Q=) 5: 1F5EE982235011F1ABBAE38DAE833773.roa (hash: 4vii0PEyxfAMDDStR+CEGDgcVMprRDhlhb9Z9n20u5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Apr 16 20:47:23 2026 GMT Not After : Apr 23 20:47:23 2026 GMT Subject: CN=69e14adb-49ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:b2:bd:09:4d:44:86:53:99:4b:3d:7d:cf: ca:18:4a:62:bc:c4:55:5a:51:25:d7:22:21:82:c7: dd:75:13:8b:6e:4e:83:d2:e7:d3:0a:51:2f:f2:9b: 0d:c9:9b:68:e6:8c:91:2f:4e:36:89:7d:f6:58:3e: 35:1b:36:46:ed:67:a7:d4:d4:e8:5a:80:87:d8:69: 86:e1:13:3c:bf:b8:8f:e7:28:f6:9e:92:5d:c1:d5: 05:e0:11:27:bb:c8:7c:e3:e3:2f:8e:82:d2:93:19: e2:7c:0b:f9:42:b5:0c:9a:8e:90:8f:a1:d0:61:7f: 81:94:d1:72:e4:1d:52:26:b7:d9:2c:27:38:2a:90: 9c:bf:a3:65:88:b5:88:b1:de:6b:14:7f:49:75:43: da:30:f5:91:75:6c:00:86:48:8e:37:cc:3b:13:57: 08:e1:f1:71:4e:5f:df:98:07:22:13:96:9f:7f:e8: 5e:d9:ba:a2:10:43:a7:cd:79:aa:7d:28:53:a9:c6: 26:2d:d7:69:a5:08:dd:39:c0:a8:7f:82:5d:6a:fc: 62:2c:62:f7:4b:fd:13:e8:b7:fd:51:4e:b3:be:03: 86:2f:01:d7:24:26:60:8a:93:a2:f3:86:02:d7:c9: af:4f:3b:59:25:f9:4a:90:54:75:88:f8:c1:99:ad: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:61:56:BE:9C:47:D6:DF:F7:ED:79:82:25:C0:62:2B:97:FF:A1:9C X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:59:6e:c9:c6:f3:12:85:12:b2:a0:b7:d8:c6:58:3b:1d:26: 39:b4:47:d7:67:74:28:ab:3e:5e:92:37:86:f4:96:ec:91:a2: f4:78:09:2e:b3:80:1f:d3:f9:0d:b8:72:14:20:0c:97:01:09: 89:e1:54:56:32:6c:d7:85:30:dd:7f:78:63:2c:a2:ff:a3:8f: 59:8d:e6:56:13:01:8d:e6:bb:ef:02:68:60:3d:b3:5a:45:d3: 23:9b:c9:5e:a7:f9:7f:5e:1a:fc:0e:3a:c0:e8:1c:9f:e6:f0: dd:ee:56:e2:c9:b5:bc:57:a1:d6:99:77:6e:00:e4:ee:a9:94: 05:e7:01:2f:42:04:38:47:64:be:41:9a:d0:c8:4c:4e:03:32: 46:cc:f9:83:cc:53:ab:50:4e:42:13:3d:79:89:29:fb:a2:c3: 5c:44:7c:f6:0f:f4:8a:9d:c0:ba:6e:47:f9:2e:5e:30:3c:51: d9:87:1c:bf:35:e7:fd:2e:6a:37:a8:49:5c:a7:be:8f:d0:f4: 7b:a1:1b:4b:19:03:81:03:d6:7b:ef:2f:40:fd:ed:95:d4:3e: 5e:84:ac:45:55:43:a5:bd:79:d0:4e:0d:a1:c4:a5:34:27:38: 8b:d7:5c:c7:47:e0:2b:50:1d:92:c7:92:4d:ec:de:e1:4b:8e: eb:4d:ef:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjYwNDE2MjA0NzIzWhcNMjYwNDIzMjA0NzIzWjAYMRYwFAYD VQQDEw02OWUxNGFkYi00OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9WyvQlNRIZTmUs9fc/KGEpivMRVWlEl1yIhgsfddROLbk6D0ufTClEv8psN yZto5oyRL042iX32WD41GzZG7Wen1NToWoCH2GmG4RM8v7iP5yj2npJdwdUF4BEn u8h84+MvjoLSkxnifAv5QrUMmo6Qj6HQYX+BlNFy5B1SJrfZLCc4KpCcv6NliLWI sd5rFH9JdUPaMPWRdWwAhkiON8w7E1cI4fFxTl/fmAciE5aff+he2bqiEEOnzXmq fShTqcYmLddppQjdOcCof4JdavxiLGL3S/0T6Lf9UU6zvgOGLwHXJCZgipOi84YC 18mvTztZJflKkFR1iPjBma3jKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOthVr6c R9bf9+15giXAYiuX/6GcMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf1luycbzEoUSsqC32MZYOx0mObRH12d0KKs+XpI3hvSW7JGi9HgJLrOAH9P5 DbhyFCAMlwEJieFUVjJs14Uw3X94Yyyi/6OPWY3mVhMBjea77wJoYD2zWkXTI5vJ Xqf5f14a/A46wOgcn+bw3e5W4sm1vFeh1pl3bgDk7qmUBecBL0IEOEdkvkGa0MhM TgMyRsz5g8xTq1BOQhM9eYkp+6LDXER89g/0ip3Aum5H+S5eMDxR2YccvzXn/S5q N6hJXKe+j9D0e6EbSxkDgQPWe+8vQP3tldQ+XoSsRVVDpb150E4NocSlNCc4i9dc x0fgK1AdkseSTeze4UuO603veA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:07:52 2026 by rpki-client