$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: lxcKpHRqFyCH6FkUnKJC1dnVVoSBYz9LedipGo8SrW0= Subject key identifier: D7:DD:18:7E:B6:77:A5:25:A5:96:8A:63:17:F9:70:0E:61:F4:67:9E Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 015D Signing time: Wed 15 Apr 2026 04:35:09 +0000 Manifest this update: Wed 15 Apr 2026 04:35:09 +0000 Manifest next update: Wed 22 Apr 2026 04:35:09 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: rSYY27yPI0K7LMi5uQ2kPrOWHFz/zXyP0Pf7dKAGurs=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Apr 15 04:35:09 2026 GMT Not After : Apr 22 04:35:09 2026 GMT Subject: CN=69df157d-6082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:d7:6c:34:11:e2:8f:86:50:8e:8d:ac:cc: 9f:a1:87:27:fc:51:ed:c1:9d:5a:74:b5:86:7b:22: 0e:a7:ac:20:c8:29:f8:19:24:8a:8f:bf:cc:df:2b: a6:63:df:09:08:20:d1:05:66:da:08:98:fe:cc:8a: 37:69:b3:a5:01:31:c1:6d:d1:bf:a4:0b:cc:f7:80: a9:63:35:2b:8b:42:39:19:19:47:15:fa:6e:a5:03: b4:86:d5:44:cb:0f:60:af:66:77:cb:fe:66:a2:bd: e0:c2:84:12:53:f5:66:9c:c8:37:43:4c:b7:1d:a9: ff:1d:50:a7:e1:b8:85:04:89:30:c3:e4:c0:d0:3b: 4c:6b:31:27:76:19:26:ba:8a:4c:66:5b:a8:d9:76: 6f:1b:b6:39:e2:82:48:86:11:e3:ca:2e:59:8b:97: e5:e9:51:f6:b0:da:60:ea:e8:ca:89:88:51:72:1a: a2:ed:ef:54:56:c3:04:dd:4c:e2:4b:c8:4a:1a:6e: 67:94:98:89:eb:4c:a6:9a:03:88:90:e5:ea:0f:d8: 76:87:30:8a:f3:50:a6:69:d4:da:d9:43:13:d1:89: 61:be:38:4e:ae:06:a1:35:d1:31:0b:75:e9:06:9f: 9b:7c:4f:0d:e4:9e:56:4f:0a:e8:db:f2:f6:68:db: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DD:18:7E:B6:77:A5:25:A5:96:8A:63:17:F9:70:0E:61:F4:67:9E X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:bb:b3:a5:13:63:e8:ef:a0:6f:e6:9a:7e:b5:c7:de:56:fe: 1a:fb:57:df:86:b4:87:d7:69:d1:fa:ac:68:b0:e1:ff:60:db: f7:79:83:e8:51:57:54:0b:0c:07:1e:8b:61:25:11:96:a6:c8: 83:c2:91:85:8f:9b:a0:9d:d3:3b:73:ad:ee:5a:6d:3f:71:6a: 87:64:75:e8:3f:bd:62:85:0e:1f:64:88:66:8f:46:6b:d4:ec: 9d:5c:93:e0:a7:88:8b:4d:9b:66:e5:63:23:30:93:bf:96:0c: 74:83:0e:a9:e1:99:c9:2c:e1:88:87:2b:96:07:b1:04:76:a1: 25:2f:62:17:13:4a:25:39:d4:45:04:88:d7:69:29:78:b4:f7: c5:ec:a6:2a:1a:59:25:d2:cf:a0:93:3e:ee:23:fc:b1:b8:a8: 66:b7:bf:96:cd:1a:87:34:9e:26:f5:3f:4b:6e:86:10:dd:bf: cd:da:7d:d7:7d:a2:63:aa:f9:f8:24:5b:b6:7f:b6:8a:77:e9: 1a:aa:8e:bc:34:0b:ce:60:69:8e:73:b9:9c:cc:29:b5:c6:cd: 14:c3:74:60:88:40:83:2f:67:24:61:b6:c5:87:2e:93:f0:51: 90:47:68:7a:ad:68:ef:a1:a4:36:b1:25:a8:6d:a0:dd:30:5e: e1:7a:02:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwNDE1MDQzNTA5WhcNMjYwNDIyMDQzNTA5WjAYMRYwFAYD VQQDEw02OWRmMTU3ZC02MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4HXbDQR4o+GUI6NrMyfoYcn/FHtwZ1adLWGeyIOp6wgyCn4GSSKj7/M3yum Y98JCCDRBWbaCJj+zIo3abOlATHBbdG/pAvM94CpYzUri0I5GRlHFfpupQO0htVE yw9gr2Z3y/5mor3gwoQSU/VmnMg3Q0y3Han/HVCn4biFBIkww+TA0DtMazEndhkm uopMZluo2XZvG7Y54oJIhhHjyi5Zi5fl6VH2sNpg6ujKiYhRchqi7e9UVsME3Uzi S8hKGm5nlJiJ60ymmgOIkOXqD9h2hzCK81CmadTa2UMT0YlhvjhOrgahNdExC3Xp Bp+bfE8N5J5WTwro2/L2aNvNSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfdGH62 d6UlpZaKYxf5cA5h9GeeMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo7uzpRNj6O+gb+aafrXH3lb+GvtX34a0h9dp0fqsaLDh/2Db93mD6FFXVAsM Bx6LYSURlqbIg8KRhY+boJ3TO3Ot7lptP3Fqh2R16D+9YoUOH2SIZo9Ga9TsnVyT 4KeIi02bZuVjIzCTv5YMdIMOqeGZySzhiIcrlgexBHahJS9iFxNKJTnURQSI12kp eLT3xeymKhpZJdLPoJM+7iP8sbioZre/ls0ahzSeJvU/S26GEN2/zdp9132iY6r5 +CRbtn+2infpGqqOvDQLzmBpjnO5nMwptcbNFMN0YIhAgy9nJGG2xYcuk/BRkEdo eq1o76GkNrElqG2g3TBe4XoCYA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:32:14 2026 by rpki-client