$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: D+63MlYO4am4a0V95WRXpZNGIE2SRO5LpJDyRY6pm4Y= Subject key identifier: 32:D4:2A:3E:9A:D1:08:B2:FD:0C:74:46:29:95:67:5C:AB:7D:CF:BE Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A95 Signing time: Thu 16 Apr 2026 19:27:35 +0000 Manifest this update: Thu 16 Apr 2026 19:27:34 +0000 Manifest next update: Thu 23 Apr 2026 19:27:34 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: pmzwIdgVRWrxQOxU5aRbYdo0+MVSipmy8X8/kuZe7LE=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 6zwL+CyahpyzOQDZ6R2F0afujTGC0qWAsIklrEXhVhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Apr 16 19:27:34 2026 GMT Not After : Apr 23 19:27:34 2026 GMT Subject: CN=69e13827-a84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:9a:69:1f:10:92:ea:25:10:d0:45:c3:a3: 3a:73:20:60:2c:05:72:4c:3f:e7:c5:48:d7:c0:ac: f6:ed:d8:68:94:44:e7:00:e1:6e:c8:fd:43:08:56: 6c:b2:f3:aa:84:20:79:68:16:7e:2d:22:67:8a:0f: 68:be:ec:71:36:78:a5:58:a7:7e:50:6d:06:e8:15: ba:52:51:bb:b9:be:12:8b:cd:18:92:b4:83:ba:bb: b6:2b:fe:84:ce:85:61:67:30:d6:ec:dd:74:13:90: cf:6b:92:4b:aa:5f:81:1a:d7:6e:bd:b5:7d:f1:4a: df:45:26:67:3a:03:c4:35:4b:e7:72:78:b2:b0:72: d1:98:25:03:33:69:fd:de:85:db:6f:ed:fc:fe:fc: a0:50:b3:5e:ce:d7:87:bf:4d:ed:82:ff:32:fb:64: aa:44:b1:68:7f:7f:41:40:55:91:6b:8d:0e:a0:91: d9:88:6f:f2:b6:d1:a7:d0:d0:53:91:e4:96:7d:c6: 7e:6e:fb:f2:b9:12:7a:ac:1d:c1:49:d9:bf:b7:ac: f0:09:cc:57:e8:ab:d3:36:a7:bf:5a:03:66:e8:64: c6:b4:fd:79:fb:0a:ea:d6:e2:76:83:a0:d8:b3:d2: 5f:91:36:c9:4b:87:b6:4b:c3:74:41:48:99:e6:60: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:2A:3E:9A:D1:08:B2:FD:0C:74:46:29:95:67:5C:AB:7D:CF:BE X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:89:6d:ea:75:a0:d7:e9:03:84:7a:5f:fa:2e:ff:3d:39:d8: 3b:6c:83:a3:cb:d8:2c:f4:7b:8a:3b:1e:31:c2:8a:9f:49:47: 6a:ae:0d:c7:43:1b:58:f6:7d:36:df:ae:80:e3:23:15:ab:cd: a3:90:9e:48:cf:c6:67:3e:c7:31:35:2a:f2:f6:16:fb:e4:72: e2:46:21:fc:7b:1c:94:47:5c:00:33:6b:da:f6:ff:5b:c8:cf: 19:ff:bb:36:89:a1:a0:64:e2:27:6d:45:12:18:f6:7e:62:cf: 74:27:b3:ff:4f:ff:f7:ea:3d:67:e2:12:e2:05:39:8a:af:67: 6a:44:92:80:28:48:ce:7f:c5:d2:c3:95:a4:74:89:7a:38:e5: aa:75:61:ac:63:36:3b:e9:d7:f9:19:86:7d:2a:0e:66:b8:c1: a0:57:4e:45:74:b4:c4:47:73:3d:5a:7e:6e:b0:8c:13:1f:df: 18:61:e7:b8:4a:69:f5:65:9c:ea:41:7c:86:cc:45:a6:12:7c: 23:9a:51:67:b6:91:8e:1f:29:df:f5:87:a8:71:6b:4b:cd:10: a4:a2:a2:b6:3a:c9:ea:90:d1:24:2b:3f:d9:4d:be:1b:c9:4c: ea:e1:a3:5f:21:2a:47:9a:6a:b4:57:09:fb:d4:d6:bd:41:36: 09:87:07:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjYwNDE2MTkyNzM0WhcNMjYwNDIzMTkyNzM0WjAYMRYwFAYD VQQDEw02OWUxMzgyNy1hODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVeaaR8QkuolENBFw6M6cyBgLAVyTD/nxUjXwKz27dholETnAOFuyP1DCFZs svOqhCB5aBZ+LSJnig9ovuxxNnilWKd+UG0G6BW6UlG7ub4Si80YkrSDuru2K/6E zoVhZzDW7N10E5DPa5JLql+BGtduvbV98UrfRSZnOgPENUvncniysHLRmCUDM2n9 3oXbb+38/vygULNezteHv03tgv8y+2SqRLFof39BQFWRa40OoJHZiG/yttGn0NBT keSWfcZ+bvvyuRJ6rB3BSdm/t6zwCcxX6KvTNqe/WgNm6GTGtP15+wrq1uJ2g6DY s9JfkTbJS4e2S8N0QUiZ5mCSbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLUKj6a 0Qiy/Qx0RimVZ1yrfc++MB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPolt6nWg1+kDhHpf+i7/PTnYO2yDo8vYLPR7ijseMcKKn0lHaq4Nx0MbWPZ9 Nt+ugOMjFavNo5CeSM/GZz7HMTUq8vYW++Ry4kYh/HsclEdcADNr2vb/W8jPGf+7 NomhoGTiJ21FEhj2fmLPdCez/0//9+o9Z+IS4gU5iq9nakSSgChIzn/F0sOVpHSJ ejjlqnVhrGM2O+nX+RmGfSoOZrjBoFdORXS0xEdzPVp+brCMEx/fGGHnuEpp9WWc 6kF8hsxFphJ8I5pRZ7aRjh8p3/WHqHFrS80QpKKitjrJ6pDRJCs/2U2+G8lM6uGj XyEqR5pqtFcJ+9TWvUE2CYcHFA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:04:03 2026 by rpki-client