$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: lhqiMbwXZjcrpSOZI4/HLuFk5W2j4cep20inomMx4U0= Subject key identifier: 3D:34:A2:A6:5B:EE:AC:AE:1F:0B:35:83:97:B2:87:C6:AA:57:9C:29 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 0431 Signing time: Fri 17 Apr 2026 00:22:51 +0000 Manifest this update: Fri 17 Apr 2026 00:22:51 +0000 Manifest next update: Fri 24 Apr 2026 00:22:51 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: o5zGLcyQayuK3zJ8V+nCGykAFmIV0ncsWMN8GPNTOCA=) 2: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=) 3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=) 4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=) 5: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Apr 17 00:22:51 2026 GMT Not After : Apr 24 00:22:51 2026 GMT Subject: CN=69e17d5b-70b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:0b:80:4f:fc:a5:7d:d2:ac:20:d6:f0:fe: 04:85:1a:92:bd:74:81:20:4f:32:0d:5b:34:cd:19: 7f:81:09:75:8e:fb:fe:3b:20:d8:f1:02:6f:c7:46: 88:3e:2d:18:a3:75:9b:54:d8:f6:23:27:44:79:1b: d0:fa:99:05:4c:9f:04:53:cc:f3:b4:a2:ea:e2:5d: d1:ff:9c:28:fd:e7:8b:c8:7d:21:45:89:90:4c:b3: 34:b2:7b:7b:ce:33:9b:04:05:31:5a:89:e7:e6:11: 7d:a5:c9:d8:2f:4f:bb:68:8a:3f:97:36:da:ee:89: 73:1d:a6:1a:4b:7a:47:58:ca:2b:7b:f8:78:78:14: e8:e8:72:f8:e9:86:bc:a3:8a:66:3a:50:c1:c3:83: 06:bf:45:f3:46:af:60:5d:09:4d:17:15:f6:ea:20: ae:1a:e3:9a:e4:97:c7:92:83:7f:49:a2:0d:3f:ee: 4b:da:5b:a7:6c:97:c4:c6:7a:bf:36:52:32:b0:a0: 8c:f4:45:f7:6e:1b:60:6d:e9:f0:16:be:6d:25:34: 21:50:94:aa:cd:39:49:71:b1:0b:48:38:05:a6:68: ab:b0:72:13:0c:ef:5c:2e:81:3c:64:46:a7:5a:f8: 3b:95:67:fd:8e:79:82:7c:c1:b4:fe:e3:de:6f:11: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:A2:A6:5B:EE:AC:AE:1F:0B:35:83:97:B2:87:C6:AA:57:9C:29 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:bc:84:ac:fd:97:16:12:16:4d:55:6d:78:6b:9b:b6:bd:65: e6:ec:68:ca:04:57:73:0c:5a:b2:f3:44:60:9f:cc:fc:17:64: 79:40:8e:25:5c:18:c9:22:76:55:86:ce:3c:55:e7:7a:f2:18: da:5d:a7:64:06:e6:e5:64:53:fa:56:64:bc:e9:3c:a3:45:ef: 0e:69:b8:e8:56:c3:0b:c7:8d:76:e6:3a:41:b7:7f:ff:bc:2b: b2:fe:df:6e:4a:1b:c6:ba:f9:a5:24:14:df:dd:1c:b3:c3:a0: eb:61:b2:38:a9:54:20:3a:41:46:80:79:5e:67:ed:18:1f:e0: b6:78:58:c3:1f:98:ad:3b:0f:71:22:8b:7e:bc:6d:a9:cb:59: 7c:05:4c:17:a5:8f:89:de:7b:e9:38:09:ef:4f:bc:73:ce:f6: 80:1c:4c:1c:1b:cb:40:26:fa:84:1f:2f:7d:b1:e5:f9:6d:f9: 79:af:cf:a4:d3:5f:ef:76:7f:c4:66:72:c6:e9:7f:89:1e:77: b0:19:e7:1c:9c:ee:49:d8:f3:a8:e3:bb:bd:89:6e:81:5e:27: 4b:9f:e5:fa:97:79:f8:68:3f:9b:cf:9e:30:fa:9d:2a:d6:1f: 45:f6:f3:f5:e6:13:e4:86:89:0b:30:f6:33:69:84:9b:43:b6: 05:3d:43:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjYwNDE3MDAyMjUxWhcNMjYwNDI0MDAyMjUxWjAYMRYwFAYD VQQDEw02OWUxN2Q1Yi03MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lQLgE/8pX3SrCDW8P4EhRqSvXSBIE8yDVs0zRl/gQl1jvv+OyDY8QJvx0aI Pi0Yo3WbVNj2IydEeRvQ+pkFTJ8EU8zztKLq4l3R/5wo/eeLyH0hRYmQTLM0snt7 zjObBAUxWonn5hF9pcnYL0+7aIo/lzba7olzHaYaS3pHWMore/h4eBTo6HL46Ya8 o4pmOlDBw4MGv0XzRq9gXQlNFxX26iCuGuOa5JfHkoN/SaINP+5L2lunbJfExnq/ NlIysKCM9EX3bhtgbenwFr5tJTQhUJSqzTlJcbELSDgFpmirsHITDO9cLoE8ZEan Wvg7lWf9jnmCfMG0/uPebxEZHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD00oqZb 7qyuHws1g5eyh8aqV5wpMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFryErP2XFhIWTVVteGubtr1l5uxoygRXcwxasvNEYJ/M/BdkeUCOJVwYySJ2 VYbOPFXnevIY2l2nZAbm5WRT+lZkvOk8o0XvDmm46FbDC8eNduY6Qbd//7wrsv7f bkobxrr5pSQU390cs8Og62GyOKlUIDpBRoB5XmftGB/gtnhYwx+YrTsPcSKLfrxt qctZfAVMF6WPid576TgJ70+8c872gBxMHBvLQCb6hB8vfbHl+W35ea/PpNNf73Z/ xGZyxul/iR53sBnnHJzuSdjzqOO7vYlugV4nS5/l+pd5+Gg/m8+eMPqdKtYfRfbz 9eYT5IaJCzD2M2mEm0O2BT1DeQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:29:29 2026 by rpki-client