$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: iCLaVkw2OEoxA+Aq7ut8Tf7j3iy5c+IQ5pBJaC8N6WY= Subject key identifier: 07:15:A1:25:22:E2:9F:AC:91:1E:9F:F0:B1:4E:42:4D:D1:F9:A9:75 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0168 Signing time: Fri 17 Apr 2026 04:38:32 +0000 Manifest this update: Fri 17 Apr 2026 04:38:32 +0000 Manifest next update: Fri 24 Apr 2026 04:38:32 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: EkIUapP+vQbtXg3OkKgvBj4h0nf/kMaVCrYbx8HkA8U=) 2: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=) 3: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=) 4: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=) 5: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=) 6: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Apr 17 04:38:32 2026 GMT Not After : Apr 24 04:38:32 2026 GMT Subject: CN=69e1b948-d27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:f3:16:2d:63:25:55:99:e2:71:c0:33:26: 0f:0f:21:7a:0d:c0:bc:8f:4a:a9:98:48:97:30:ea: ef:20:39:68:37:a4:41:63:a0:77:98:ed:65:43:fd: f0:e8:ad:dc:e8:22:95:a0:80:c8:79:f4:db:f3:b2: 65:61:85:a4:6b:cb:d9:45:5f:74:dd:37:37:1d:33: 39:99:f0:85:46:42:46:ba:8d:fd:3b:0f:96:5a:24: a8:8f:b1:a4:28:f0:35:25:d1:f9:ea:6f:0e:89:df: 97:ac:f7:36:b1:4e:eb:e3:60:53:07:15:ef:26:09: 8c:6b:c7:27:51:92:e9:74:78:e2:cb:09:79:0c:f4: 6d:bb:36:18:0f:d3:9d:9c:14:6f:e4:e0:f7:b9:5f: 79:0f:f2:2c:70:cc:65:a6:00:46:b4:8f:37:9e:81: cc:0d:9a:89:ad:d8:d8:37:e6:73:9d:10:6f:77:d2: e0:f2:2c:d6:16:ee:c3:02:e8:d9:c5:87:20:e6:3a: 85:2b:95:ae:7a:f9:f7:d7:d2:66:3e:f5:78:c1:ba: 62:4d:3a:00:0a:0c:91:f7:1b:49:35:69:fc:3d:06: b9:03:0c:db:8e:39:36:65:cc:3c:cf:f3:b6:78:86: 8e:f5:af:33:a8:60:64:ea:1c:f1:d7:1a:27:9f:ec: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:A1:25:22:E2:9F:AC:91:1E:9F:F0:B1:4E:42:4D:D1:F9:A9:75 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:9f:43:d7:03:5d:cd:57:90:a5:cf:c7:61:76:94:0a:22: ef:dd:15:dc:06:a1:fe:6e:bb:92:d7:81:6d:1d:96:12:d2:a7: b0:a1:e9:a1:a4:97:59:6f:e6:6a:4d:bd:6b:6b:6e:b9:5c:07: 91:4e:e4:a7:f0:63:98:87:54:bf:56:1f:7c:bb:cd:dc:de:2e: c9:14:4a:b7:b4:1d:78:80:42:a8:78:95:6a:4a:7b:00:35:03: 61:9e:dd:5e:79:7c:b2:b9:46:1b:84:b4:4d:d3:0c:a4:89:9d: 5f:33:d0:95:76:19:c6:6b:65:87:a7:60:39:b8:6b:93:5e:fa: 2c:07:18:e5:ef:3c:bd:b5:0d:2e:83:c0:06:4f:2c:cb:aa:88: 56:3a:25:d9:6c:de:8a:2e:7d:a1:eb:1b:17:4a:fa:ab:ae:6d: 55:6c:67:54:9c:e1:a0:51:78:5c:06:90:f7:17:30:76:81:e3: 63:7d:c2:46:0a:b9:d2:a5:b3:a0:19:e5:6a:a6:f9:c8:97:9d: 11:6f:ab:05:79:08:9f:52:ac:53:e1:bb:d3:04:ce:1c:06:15: 30:d6:e7:a9:79:a9:8e:53:bf:ce:3d:8f:49:49:d4:25:ea:22: 7c:d2:da:db:3b:06:ee:7d:0c:6f:ce:90:a3:4e:22:2f:1a:f3: d2:35:ec:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjYwNDE3MDQzODMyWhcNMjYwNDI0MDQzODMyWjAYMRYwFAYD VQQDEw02OWUxYjk0OC1kMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DvzFi1jJVWZ4nHAMyYPDyF6DcC8j0qpmEiXMOrvIDloN6RBY6B3mO1lQ/3w 6K3c6CKVoIDIefTb87JlYYWka8vZRV903Tc3HTM5mfCFRkJGuo39Ow+WWiSoj7Gk KPA1JdH56m8Oid+XrPc2sU7r42BTBxXvJgmMa8cnUZLpdHjiywl5DPRtuzYYD9Od nBRv5OD3uV95D/IscMxlpgBGtI83noHMDZqJrdjYN+ZznRBvd9Lg8izWFu7DAujZ xYcg5jqFK5Wuevn319JmPvV4wbpiTToACgyR9xtJNWn8PQa5Awzbjjk2Zcw8z/O2 eIaO9a8zqGBk6hzx1xonn+xu+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcVoSUi 4p+skR6f8LFOQk3R+al1MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABAGfQ9cDXc1XkKXPx2F2lAoi790V3Aah/m67kteBbR2WEtKnsKHpoaSXWW/m ak29a2tuuVwHkU7kp/BjmIdUv1YffLvN3N4uyRRKt7QdeIBCqHiVakp7ADUDYZ7d Xnl8srlGG4S0TdMMpImdXzPQlXYZxmtlh6dgObhrk176LAcY5e88vbUNLoPABk8s y6qIVjol2Wzeii59oesbF0r6q65tVWxnVJzhoFF4XAaQ9xcwdoHjY33CRgq50qWz oBnlaqb5yJedEW+rBXkIn1KsU+G70wTOHAYVMNbnqXmpjlO/zj2PSUnUJeoifNLa 2zsG7n0Mb86Qo04iLxrz0jXsfw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:49:44 2026 by rpki-client