$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: 93LWEsScfhH/6ROt/f1a4Khy9AVQSVgDQCuRoJzhpII= Subject key identifier: 9F:AB:A3:D1:35:1A:11:06:09:F2:4D:AE:D2:48:A2:73:4B:AD:E5:D6 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0BBC Signing time: Thu 16 Apr 2026 18:54:13 +0000 Manifest this update: Thu 16 Apr 2026 18:54:13 +0000 Manifest next update: Thu 23 Apr 2026 18:54:13 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: KVUKCeCN3L7muqo1kPsTLfaBxqR5ZZUtDkTl3919ubU=) 2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Apr 16 18:54:13 2026 GMT Not After : Apr 23 18:54:13 2026 GMT Subject: CN=69e13055-1c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:9c:3a:20:7b:61:6a:aa:00:e9:b3:7c:e9: 11:86:9f:f3:8d:8b:70:50:11:38:99:39:e8:13:5a: eb:bf:8c:ba:9f:5d:08:9b:e2:c8:7e:c7:4a:4e:1c: 9e:50:ce:21:e1:db:47:83:fe:74:ea:35:b2:4e:a8: 0e:f9:55:57:c1:6e:61:ea:75:a7:35:fc:33:9f:12: 85:d9:5c:19:a6:29:03:7c:12:9d:7a:0c:b3:39:8c: d3:b2:58:87:9e:d2:6f:14:2d:ba:4d:27:af:c6:17: a9:2a:3e:7b:b5:ed:56:4b:6c:db:1d:28:22:69:92: aa:cd:ea:2d:8c:4a:4d:b6:26:c4:07:b2:d3:f7:ac: 06:2d:cb:21:e6:d9:fd:96:a2:2c:90:db:72:b7:0f: 3f:fb:3f:23:00:de:2d:13:5d:68:65:8a:0d:07:31: a6:e5:58:6e:2f:d5:c1:82:41:4b:55:31:e8:a9:49: 4c:e3:ca:e2:b3:50:f8:61:93:0c:ca:c4:82:21:a0: 17:22:f1:87:b9:56:51:c7:19:be:3f:71:86:35:19: 3c:2b:ff:a3:fe:c4:09:64:4f:4b:33:2f:71:3b:12: 53:33:d8:a1:da:3d:5c:30:ce:93:87:de:56:c4:80: 32:25:00:9d:a2:c6:54:4c:98:89:83:6d:4b:ed:83: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AB:A3:D1:35:1A:11:06:09:F2:4D:AE:D2:48:A2:73:4B:AD:E5:D6 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:01:f7:e8:b5:11:4a:c2:43:53:85:03:ac:28:3d:e3:4d:25: 41:cd:6e:3d:a4:e7:a6:80:aa:9a:e7:bc:ed:f0:ea:db:d5:82: 25:4c:dc:8c:df:a3:c3:a0:12:ac:12:95:7a:b7:0f:24:58:6a: da:13:a1:f9:25:50:8c:71:67:34:ba:7d:3e:a1:3b:07:e9:38: 5f:86:e5:10:4b:56:22:c7:19:c3:d1:3d:2a:b5:0e:b8:e4:09: 71:a2:60:8e:be:47:c4:07:6a:96:32:56:c0:7c:18:51:87:45: 82:c7:27:65:66:6b:15:0b:a5:1a:5e:2d:81:dc:45:9b:ca:38: e4:7c:d3:1e:3f:3d:9a:38:bf:d9:a4:de:51:4e:f9:d9:d6:ec: 30:8f:bd:ae:bb:79:f4:71:03:6d:c9:8a:75:97:0c:6c:67:a9: d5:d8:22:2e:48:d6:72:a0:90:a4:c4:42:07:e1:3d:7f:48:a5: 52:81:79:cb:78:0c:35:fc:67:c9:eb:8b:b2:0b:05:7c:b5:79: 24:80:4e:b5:e7:59:92:4b:6f:d9:e1:be:8f:b7:0a:1c:ad:c8: bf:50:df:3a:9c:26:71:ba:b2:a7:e9:bd:22:e3:4d:5a:b8:47: b6:d1:5d:0d:5a:9e:1c:08:f5:7c:8c:da:39:29:41:e2:50:6d: 73:6c:e5:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjYwNDE2MTg1NDEzWhcNMjYwNDIzMTg1NDEzWjAYMRYwFAYD VQQDEw02OWUxMzA1NS0xYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMicOiB7YWqqAOmzfOkRhp/zjYtwUBE4mTnoE1rrv4y6n10Im+LIfsdKThye UM4h4dtHg/506jWyTqgO+VVXwW5h6nWnNfwznxKF2VwZpikDfBKdegyzOYzTsliH ntJvFC26TSevxhepKj57te1WS2zbHSgiaZKqzeotjEpNtibEB7LT96wGLcsh5tn9 lqIskNtytw8/+z8jAN4tE11oZYoNBzGm5VhuL9XBgkFLVTHoqUlM48ris1D4YZMM ysSCIaAXIvGHuVZRxxm+P3GGNRk8K/+j/sQJZE9LMy9xOxJTM9ih2j1cMM6Th95W xIAyJQCdosZUTJiJg21L7YPOPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+ro9E1 GhEGCfJNrtJIonNLreXWMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtwH36LURSsJDU4UDrCg9400lQc1uPaTnpoCqmue87fDq29WCJUzcjN+jw6AS rBKVercPJFhq2hOh+SVQjHFnNLp9PqE7B+k4X4blEEtWIscZw9E9KrUOuOQJcaJg jr5HxAdqljJWwHwYUYdFgscnZWZrFQulGl4tgdxFm8o45HzTHj89mji/2aTeUU75 2dbsMI+9rrt59HEDbcmKdZcMbGep1dgiLkjWcqCQpMRCB+E9f0ilUoF5y3gMNfxn yeuLsgsFfLV5JIBOtedZkktv2eG+j7cKHK3Iv1DfOpwmcbqyp+m9IuNNWrhHttFd DVqeHAj1fIzaOSlB4lBtc2zlWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:04:30 2026 by rpki-client