$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: kN/Bkiw58UVSYtsg4BSqAp8FPnFXhKxqsMYvDUvuL84= Subject key identifier: 78:C4:B7:39:97:EB:98:13:09:9B:7E:45:39:5F:B9:81:88:28:0C:9C Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: CB Signing time: Sun 01 Mar 2026 08:05:23 +0000 Manifest this update: Sun 01 Mar 2026 08:05:23 +0000 Manifest next update: Sun 08 Mar 2026 08:05:23 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: cJvon6HnFbQlsWu+Ubs9yVc9XLp6HK2GJsOPOaAIrho=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: jHhbEyRPQeuc0ql3FxXQd5TNE++SZnJHu3QLWjLgY8g=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: 9PsW59A9Q1knuLfocvHjnopBeCv6jOU+Iw2Q/6PZFX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Mar 1 08:05:23 2026 GMT Not After : Mar 8 08:05:23 2026 GMT Subject: CN=69a3f343-46f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:bc:46:94:8f:7b:f3:fd:05:04:98:1e:c0: f2:d3:e6:1f:1e:52:6d:b4:b1:dc:4e:d0:36:db:65: 68:55:2e:a7:c5:74:a2:b0:5e:29:40:3c:41:08:18: 7a:f5:0a:ba:e3:24:91:62:af:5a:f0:36:08:ca:12: 8f:03:44:2c:62:b6:f6:66:f5:62:ea:e2:e1:45:1c: 61:5b:7b:df:3e:49:4b:8a:15:ca:f5:4a:a7:ad:cd: 3a:68:18:e1:b2:5a:a0:9c:6f:3b:cd:ec:53:7f:b6: f2:57:a0:8c:28:5f:79:92:44:10:35:5c:6c:4f:5c: 5f:d9:66:a4:36:13:02:3a:c2:0a:98:97:52:ae:d8: 82:e5:34:73:3a:5c:7b:1b:66:2c:b0:73:77:19:16: 0a:2c:fc:ba:ce:85:6f:f8:b8:3e:de:fb:00:40:c0: 04:82:ad:f1:eb:3e:55:81:b6:8d:4a:9f:31:ad:0e: 4f:48:e2:d2:66:6e:32:30:65:67:8d:19:56:f0:2a: 28:fb:51:65:bc:79:e9:c5:f2:40:08:98:bc:05:bb: c9:39:5a:0f:64:4f:09:b1:3d:bb:c4:d9:2e:0f:69: 04:38:7b:cb:b1:05:2a:04:0b:ea:2d:87:a1:10:3e: 75:f7:06:0f:76:7e:1e:fc:65:55:27:13:0a:3d:03: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C4:B7:39:97:EB:98:13:09:9B:7E:45:39:5F:B9:81:88:28:0C:9C X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:a5:3f:b7:0d:4d:b5:31:5e:71:d0:63:8f:b6:89:b0:d3: 1e:78:8e:3d:5b:96:0e:a5:97:b9:da:2e:3c:21:58:f2:83:50: 44:1c:c2:a3:38:e1:0b:6b:6f:58:1a:ba:5f:a9:94:7a:e3:e2: f1:f5:e3:89:dc:04:33:7c:77:28:47:25:44:10:ff:f4:f2:ec: 23:71:1e:d7:e5:42:e5:24:63:3f:99:67:b1:66:06:d0:1f:e7: c6:69:1e:4a:f7:2b:81:1f:68:72:fe:36:72:5e:1c:8e:c0:5c: b9:7f:62:cf:6b:d3:01:eb:bd:d2:c6:72:cc:1e:cb:44:73:4c: 07:c9:dd:0a:2f:ab:b1:a9:53:3d:a2:5a:ce:3e:8e:aa:f2:46: 4f:d4:e7:23:5f:59:4d:56:7a:14:6d:6d:2d:58:a5:bb:31:61: 62:6e:41:72:77:99:3a:1d:a6:d3:95:27:4f:94:01:a1:04:97: ac:38:09:1e:44:2e:90:34:53:ae:af:8d:f4:1a:0e:b3:25:e3: 71:ca:7d:6f:45:2b:eb:90:48:e9:39:66:e7:a8:78:f3:43:ec: 7e:5a:55:85:28:50:ef:67:4b:19:e8:ba:c6:1f:91:d3:0f:52: 1a:04:9b:56:0f:9f:b4:57:71:12:f6:98:2d:1c:8e:f4:6f:24: da:a3:41:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwMzAxMDgwNTIzWhcNMjYwMzA4MDgwNTIzWjAYMRYwFAYD VQQDEw02OWEzZjM0My00NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuy8RpSPe/P9BQSYHsDy0+YfHlJttLHcTtA222VoVS6nxXSisF4pQDxBCBh6 9Qq64ySRYq9a8DYIyhKPA0QsYrb2ZvVi6uLhRRxhW3vfPklLihXK9Uqnrc06aBjh slqgnG87zexTf7byV6CMKF95kkQQNVxsT1xf2WakNhMCOsIKmJdSrtiC5TRzOlx7 G2YssHN3GRYKLPy6zoVv+Lg+3vsAQMAEgq3x6z5VgbaNSp8xrQ5PSOLSZm4yMGVn jRlW8Coo+1FlvHnpxfJACJi8BbvJOVoPZE8JsT27xNkuD2kEOHvLsQUqBAvqLYeh ED519wYPdn4e/GVVJxMKPQM0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjEtzmX 65gTCZt+RTlfuYGIKAycMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmSlP7cNTbUxXnHQY4+2ibDTHniOPVuWDqWXudouPCFY8oNQRBzCozjhC2tv WBq6X6mUeuPi8fXjidwEM3x3KEclRBD/9PLsI3Ee1+VC5SRjP5lnsWYG0B/nxmke SvcrgR9ocv42cl4cjsBcuX9iz2vTAeu90sZyzB7LRHNMB8ndCi+rsalTPaJazj6O qvJGT9TnI19ZTVZ6FG1tLViluzFhYm5BcneZOh2m05UnT5QBoQSXrDgJHkQukDRT rq+N9BoOsyXjccp9b0Ur65BI6Tlm56h480PsflpVhShQ72dLGei6xh+R0w9SGgSb Vg+ftFdxEvaYLRyO9G8k2qNBRQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:51 2026 by rpki-client