$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: zilC+rx3pCODJQ4BaXbUyBO3ha50HLjE7uhltYxN3cc= Subject key identifier: A7:FB:EF:EB:5C:8E:2C:FC:FF:1E:C7:B1:2C:E7:D7:DA:C0:41:95:23 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 0144 Signing time: Sun 01 Mar 2026 06:16:57 +0000 Manifest this update: Sun 01 Mar 2026 06:16:57 +0000 Manifest next update: Sun 08 Mar 2026 06:16:57 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: CSMpkstBfYoKjbOYQh5FLxDUxQ2qSZtiVKNB3Do7Xys=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 7PT1hzEu8yFfZFQXURAd4+p59Mps1ow7oAQ1a2yeyaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Mar 1 06:16:57 2026 GMT Not After : Mar 8 06:16:57 2026 GMT Subject: CN=69a3d9d9-33eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:90:e1:da:b4:62:7b:c8:1d:7f:44:0a:53: ae:b1:84:50:47:2c:7e:7f:e1:30:6a:f2:2b:28:18: 7f:29:cf:4c:ea:a6:6a:01:20:2d:fd:ec:51:03:b4: d4:0a:6c:00:62:86:78:a9:57:5c:a5:92:75:70:de: 67:67:f4:6e:61:ca:70:12:69:45:8f:b8:32:96:ed: 1f:17:72:33:b4:41:23:c7:e5:73:84:50:2d:8a:3e: 71:12:a1:2b:18:3e:1a:91:4f:4d:af:89:a5:3e:ea: c0:95:c5:f8:7f:e3:af:5f:e2:61:ea:4a:79:a0:63: 7f:bb:a9:03:af:e1:57:36:24:9e:dd:00:d7:2e:64: ca:53:e0:61:fc:a2:f8:40:fe:c5:05:04:53:1c:72: 98:10:8f:ec:58:04:11:aa:9c:4e:b1:61:12:1e:9d: 6e:3e:4b:61:c0:fd:25:ae:29:8f:8f:57:68:e3:3a: 88:d4:15:e5:4f:d4:55:97:90:f3:60:7a:3f:f9:84: f4:aa:45:fe:b5:e3:41:2f:12:3c:8d:51:b8:58:f1: b4:ba:3f:0d:e5:f1:0f:19:49:f9:a2:92:80:d2:bc: 3f:09:dc:cf:05:bd:d5:d0:8b:87:95:b9:12:7b:8a: 9d:21:0c:63:21:25:24:3d:3b:66:f4:66:6f:e9:f4: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:EF:EB:5C:8E:2C:FC:FF:1E:C7:B1:2C:E7:D7:DA:C0:41:95:23 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:2c:e0:96:b6:87:8a:74:e7:43:c7:1f:0b:43:89:37:63: ec:5c:d9:26:aa:01:76:ae:89:b9:ac:a3:1b:0e:33:3b:b5:97: c4:5e:cc:7f:35:10:7f:b9:f7:ea:3e:27:f0:58:4c:c3:11:dc: cb:0b:96:ab:d9:1e:4c:18:ee:6b:35:cc:5c:42:da:d2:f5:41: 8b:23:cc:97:0d:00:b2:7a:33:11:26:dd:2f:a0:b4:14:be:22: 95:a0:18:ac:94:01:28:ad:16:c8:2a:46:45:af:f7:81:06:0f: 91:b2:d6:c9:6e:d1:5f:3b:16:a2:2b:47:a4:80:34:e0:91:f8: 02:d7:6e:e5:2c:c2:90:75:f7:bb:b8:a4:b1:83:30:8f:12:e6: 52:0f:7c:9b:53:ee:76:da:48:c0:72:53:13:f1:0c:cf:36:d4: 52:cc:ea:d6:5f:89:fa:ce:de:b6:71:0b:09:66:11:25:66:e7: ce:22:85:98:64:f2:f5:7e:57:84:ae:10:c9:c6:98:a6:4d:b4: a7:1f:bf:76:3c:72:e5:fc:6f:d0:76:86:96:55:1a:3e:d7:e8: 05:7b:a9:e9:b2:ba:8d:39:7a:23:ec:e5:8e:e5:a3:34:2d:19: 29:a6:64:3a:09:2e:4a:89:8c:34:5e:46:3e:35:77:10:f6:a5: c9:54:41:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwMzAxMDYxNjU3WhcNMjYwMzA4MDYxNjU3WjAYMRYwFAYD VQQDEw02OWEzZDlkOS0zM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNGQ4dq0YnvIHX9EClOusYRQRyx+f+EwavIrKBh/Kc9M6qZqASAt/exRA7TU CmwAYoZ4qVdcpZJ1cN5nZ/RuYcpwEmlFj7gylu0fF3IztEEjx+VzhFAtij5xEqEr GD4akU9Nr4mlPurAlcX4f+OvX+Jh6kp5oGN/u6kDr+FXNiSe3QDXLmTKU+Bh/KL4 QP7FBQRTHHKYEI/sWAQRqpxOsWESHp1uPkthwP0lrimPj1do4zqI1BXlT9RVl5Dz YHo/+YT0qkX+teNBLxI8jVG4WPG0uj8N5fEPGUn5opKA0rw/CdzPBb3V0IuHlbkS e4qdIQxjISUkPTtm9GZv6fQZ0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKf77+tc jiz8/x7HsSzn19rAQZUjMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKUMs4Ja2h4p050PHHwtDiTdj7FzZJqoBdq6JuayjGw4zO7WXxF7MfzUQf7n3 6j4n8FhMwxHcywuWq9keTBjuazXMXELa0vVBiyPMlw0AsnozESbdL6C0FL4ilaAY rJQBKK0WyCpGRa/3gQYPkbLWyW7RXzsWoitHpIA04JH4Atdu5SzCkHX3u7iksYMw jxLmUg98m1PudtpIwHJTE/EMzzbUUszq1l+J+s7etnELCWYRJWbnziKFmGTy9X5X hK4QycaYpk20px+/djxy5fxv0HaGllUaPtfoBXup6bK6jTl6I+zljuWjNC0ZKaZk OgkuSomMNF5GPjV3EPalyVRB1g== -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:18 2026 by rpki-client