$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft File: bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json) Hash identifier: cj9eo9kkrXsovClOTkYfTJ99bno6G+VMEyXgg6QD7AA= Subject key identifier: 20:45:35:D3:F5:0B:48:69:8A:FF:01:E4:89:3C:C5:BF:06:EF:67:F9 Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 Certificate issuer: /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft Manifest number: 12 Signing time: Sun 01 Mar 2026 10:34:07 +0000 Manifest this update: Sun 01 Mar 2026 10:34:07 +0000 Manifest next update: Sun 08 Mar 2026 10:34:07 +0000 Files and hashes: 1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: BBW9Ga5O6xjVYse9+2k8n1sTDtk/KrdlbJ6vLcAa3X8=) 2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1 Validity Not Before: Mar 1 10:34:07 2026 GMT Not After : Mar 8 10:34:07 2026 GMT Subject: CN=69a4161f-cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:00:18:f3:9d:01:d0:2f:6e:b6:d4:63:fc: cb:f1:15:96:ce:75:18:32:4a:87:b9:bc:b7:3e:87: e1:a0:5d:03:f2:e0:70:ec:3c:e0:12:31:94:a6:d4: 03:ce:ee:5d:c6:9c:f6:3e:a8:2a:19:36:65:aa:30: 3c:bd:a7:34:21:23:a7:2e:a6:5e:cb:35:fb:48:d8: 5f:99:54:e5:97:bc:5a:3c:1c:fb:e5:d2:8b:2c:97: e0:53:b8:bc:1f:3e:52:c7:a5:f0:e3:89:43:5e:0b: bd:fd:97:79:d7:38:16:41:ce:76:82:93:c9:8b:54: ea:6b:c9:60:e4:4c:aa:4c:fe:e8:ec:12:b6:73:d1: d7:a0:b3:52:1c:12:ee:f8:56:be:43:e6:6c:6d:36: c9:f5:cd:18:de:92:da:8c:76:db:4c:d3:6b:b2:6d: d9:d2:0c:e1:46:af:b8:24:ad:f5:92:5f:4c:2c:b7: a2:89:4f:c9:f3:98:e0:33:49:2e:71:46:77:3f:62: ef:88:25:e6:0d:6f:5a:bc:f4:aa:dc:f3:88:b6:a4: e7:35:2a:22:ba:6f:6e:c0:16:52:20:46:8b:65:4d: 4c:36:55:bf:97:83:18:1d:1c:f0:76:3d:77:98:54: 12:c9:b7:60:34:1d:f9:b0:07:9c:59:10:b0:5a:dd: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:35:D3:F5:0B:48:69:8A:FF:01:E4:89:3C:C5:BF:06:EF:67:F9 X509v3 Authority Key Identifier: keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:61:63:ba:ee:b0:09:5b:af:23:c2:17:20:63:bc:de:78: 50:d0:e3:37:99:e8:bc:35:e6:21:06:90:61:43:b0:cc:d1:83: ad:7c:b9:38:6d:3e:e1:89:d6:cb:f8:6f:1b:66:70:77:f9:11: 5c:01:a2:0c:b7:b4:cb:7c:3c:dc:2f:d7:8b:54:93:79:e0:69: bc:2f:75:59:19:f7:9f:4a:48:02:c3:4e:1a:9f:72:66:a2:5f: 81:1d:32:64:1a:bf:75:7c:8e:63:c9:47:48:fd:df:45:66:16: 85:a6:72:92:fa:88:0b:50:19:8e:0a:5f:2b:b1:83:0b:c5:dc: ca:06:ba:10:ca:c9:d1:ae:31:20:3e:7d:c7:38:27:86:06:42: 9b:47:2c:85:a1:a8:79:e5:51:70:d3:62:0a:d8:61:be:59:96: b6:e1:51:9c:57:4a:77:5a:12:0d:a6:0b:fe:f3:69:9f:f8:93: 3c:89:65:8f:87:86:91:bc:8c:3a:17:b9:2c:71:91:ff:a3:02: 8f:96:96:14:ec:9a:41:b3:05:cc:06:50:a6:bc:17:86:6d:4f: 7f:bb:0a:30:2c:3c:d9:4d:0f:05:1b:41:1a:28:d1:eb:18:9c: 03:4e:cf:60:ce:a7:d8:99:c3:11:e4:e2:33:2d:46:79:51:a3: 81:46:49:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMwODExMC8GA1UEBRMoNkUxNDMyNEM3RkVCOUJDODk5MkQ0QTFDM0U0NTlFODZB M0YxOEVFMTAeFw0yNjAzMDExMDM0MDdaFw0yNjAzMDgxMDM0MDdaMBgxFjAUBgNV BAMTDTY5YTQxNjFmLWNhZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLaQAY850B0C9uttRj/MvxFZbOdRgySoe5vLc+h+GgXQPy4HDsPOASMZSm1APO 7l3GnPY+qCoZNmWqMDy9pzQhI6cupl7LNftI2F+ZVOWXvFo8HPvl0ossl+BTuLwf PlLHpfDjiUNeC739l3nXOBZBznaCk8mLVOpryWDkTKpM/ujsErZz0degs1IcEu74 Vr5D5mxtNsn1zRjektqMdttM02uybdnSDOFGr7gkrfWSX0wst6KJT8nzmOAzSS5x Rnc/Yu+IJeYNb1q89Krc84i2pOc1KiK6b27AFlIgRotlTUw2Vb+XgxgdHPB2PXeY VBLJt2A0HfmwB5xZELBa3UshAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIEU10/UL SGmK/wHkiTzFvwbvZ/kwHwYDVR0jBBgwFoAUbhQyTH/rm8iZLUocPkWehqPxjuEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzA4L0YzRTY1N0ZDMDAx NTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThpWkxVb2NQa1dlaHFQeGp1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmhReVRIX3JtOGlaTFVvY1BrV2VocVB4anVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QzA4L0YzRTY1N0ZDMDAxNTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThp WkxVb2NQa1dlaHFQeGp1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdgWFjuu6wCVuvI8IXIGO83nhQ0OM3mei8NeYhBpBhQ7DM0YOtfLk4bT7hidbL +G8bZnB3+RFcAaIMt7TLfDzcL9eLVJN54Gm8L3VZGfefSkgCw04an3Jmol+BHTJk Gr91fI5jyUdI/d9FZhaFpnKS+ogLUBmOCl8rsYMLxdzKBroQysnRrjEgPn3HOCeG BkKbRyyFoah55VFw02IK2GG+WZa24VGcV0p3WhINpgv+82mf+JM8iWWPh4aRvIw6 F7kscZH/owKPlpYU7JpBswXMBlCmvBeGbU9/uwowLDzZTQ8FG0EaKNHrGJwDTs9g zqfYmcMR5OIzLUZ5UaOBRkl6 -----END CERTIFICATE-----Generated at Sun Mar 1 20:05:34 2026 by rpki-client