$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: +fwYzMmCp71FfdmfWBUwyDTV5HtLiGd6T8N66y58bng= Subject key identifier: 9C:12:A2:54:B3:92:82:58:2E:63:D4:74:C0:5C:22:1E:51:11:EE:F7 Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: 0179 Signing time: Fri 17 Apr 2026 04:28:45 +0000 Manifest this update: Fri 17 Apr 2026 04:28:44 +0000 Manifest next update: Fri 24 Apr 2026 04:28:44 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: bHKQiUT1Iu8NrJ0miMYcqhc2ddMAY2SqLzrHVmAqVUI=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Apr 17 04:28:44 2026 GMT Not After : Apr 24 04:28:44 2026 GMT Subject: CN=69e1b6fd-bfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:93:4c:2d:56:7c:34:f6:6a:a8:f0:d0:5a: eb:cd:5b:dd:e8:ae:fb:23:95:7e:ea:97:af:13:da: 41:48:49:5a:16:cc:c6:35:eb:c1:e2:96:f9:3e:fc: a2:9a:ee:01:b1:03:69:f3:73:2a:b3:38:33:a5:44: 59:c3:d9:b6:d3:ec:dc:e0:3a:5f:8e:db:cf:4c:8a: 0d:65:d3:7c:90:f3:9e:38:5f:34:7d:53:bb:85:ef: b7:ee:e6:7e:eb:2a:88:b4:d2:6a:51:61:70:dc:27: c5:55:1e:66:4e:8f:e9:2d:62:8f:81:96:a6:19:19: 7b:f4:b5:41:aa:fd:3d:0f:85:1a:e1:fe:9c:eb:23: 4f:75:b1:b1:4b:db:f1:10:0d:1b:c1:e5:cd:af:1b: 64:b3:ac:23:77:bb:04:23:e5:71:d1:6d:b8:58:2b: 82:77:a5:7c:95:a3:da:77:5f:c6:b6:f0:b5:50:81: 1a:77:91:c0:ff:21:b5:ab:e2:11:fa:e4:15:ff:3b: 86:49:58:b9:33:1f:db:af:84:cd:5e:b2:35:4f:70: c8:06:77:84:78:a1:48:c2:d4:82:0c:c7:38:18:28: 14:7a:54:11:d8:9e:4e:87:49:7e:bd:02:b3:a2:53: 57:0c:09:f1:a6:00:de:ad:11:ff:95:88:a9:e5:e1: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:12:A2:54:B3:92:82:58:2E:63:D4:74:C0:5C:22:1E:51:11:EE:F7 X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:44:c0:c6:8b:16:eb:73:c8:75:3c:e3:55:f8:63:7c:e3:e1: 3a:94:d1:31:ca:7c:f8:e9:d2:39:e0:bd:4c:e1:59:97:b3:68: 33:ae:e3:78:bc:fd:72:9f:75:f6:d4:2e:b2:71:c2:fb:d4:02: 6a:86:b2:ac:ce:d5:fd:6b:da:5a:02:c3:67:a8:2a:2e:1b:72: a4:3d:c5:d2:fd:dd:5b:86:15:1d:7c:0a:ef:93:90:2f:7b:78: c8:e3:c7:28:2f:2a:39:09:be:67:b6:bd:01:b5:07:cf:30:d3: 72:dd:d5:ce:5a:14:64:05:b9:16:c5:40:2a:20:09:be:d5:8a: 29:24:bd:13:9b:99:93:dd:28:09:65:ae:05:14:6a:e7:db:8d: d9:53:c6:b3:17:1b:1e:20:3c:8b:31:0c:cc:7d:bd:96:2e:e5: 5f:77:f9:0e:f1:51:d6:24:94:a4:b4:c5:c9:2a:fd:8d:1c:9b: f3:95:74:9e:73:c7:5c:41:fd:55:25:81:e7:cf:7a:e3:4b:19: 04:6b:21:bb:68:3b:72:67:18:0a:9b:77:c6:94:ca:7e:75:2d: 01:8f:84:c8:d4:e8:47:a4:34:a7:fb:c1:d6:b6:cf:8c:b2:00: 46:05:21:9a:d5:dc:9f:d0:e1:94:29:96:58:76:48:c7:9d:15: 22:c0:dd:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjYwNDE3MDQyODQ0WhcNMjYwNDI0MDQyODQ0WjAYMRYwFAYD VQQDEw02OWUxYjZmZC1iZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdyTTC1WfDT2aqjw0FrrzVvd6K77I5V+6pevE9pBSElaFszGNevB4pb5Pvyi mu4BsQNp83MqszgzpURZw9m20+zc4DpfjtvPTIoNZdN8kPOeOF80fVO7he+37uZ+ 6yqItNJqUWFw3CfFVR5mTo/pLWKPgZamGRl79LVBqv09D4Ua4f6c6yNPdbGxS9vx EA0bweXNrxtks6wjd7sEI+Vx0W24WCuCd6V8laPad1/GtvC1UIEad5HA/yG1q+IR +uQV/zuGSVi5Mx/br4TNXrI1T3DIBneEeKFIwtSCDMc4GCgUelQR2J5Oh0l+vQKz olNXDAnxpgDerRH/lYip5eE/QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwSolSz koJYLmPUdMBcIh5REe73MB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOETAxosW63PIdTzjVfhjfOPhOpTRMcp8+OnSOeC9TOFZl7NoM67jeLz9cp91 9tQusnHC+9QCaoayrM7V/WvaWgLDZ6gqLhtypD3F0v3dW4YVHXwK75OQL3t4yOPH KC8qOQm+Z7a9AbUHzzDTct3VzloUZAW5FsVAKiAJvtWKKSS9E5uZk90oCWWuBRRq 59uN2VPGsxcbHiA8izEMzH29li7lX3f5DvFR1iSUpLTFySr9jRyb85V0nnPHXEH9 VSWB589640sZBGshu2g7cmcYCpt3xpTKfnUtAY+EyNToR6Q0p/vB1rbPjLIARgUh mtXcn9DhlCmWWHZIx50VIsDdYw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:39:47 2026 by rpki-client