$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: ar/aTlUI3p1+eIFbW4PBAnHDG/2fFR56cylrAxFH5S8= Subject key identifier: E5:6A:41:74:16:D3:E5:0D:8D:EF:48:50:C8:24:A9:A6:50:93:54:23 Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 01A2 Signing time: Sun 19 Apr 2026 03:52:41 +0000 Manifest this update: Sun 19 Apr 2026 03:52:41 +0000 Manifest next update: Sun 26 Apr 2026 03:52:41 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: QL9dGkKQzW5jwhktb8ajuKszUTjz2ByuCBcxioYX8bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Apr 19 03:52:41 2026 GMT Not After : Apr 26 03:52:41 2026 GMT Subject: CN=69e45189-f82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:fb:44:81:d4:25:29:39:55:73:05:14:8d: f7:2d:3d:c0:2f:c0:d6:dd:70:4a:0a:cd:ce:98:9c: e9:87:49:66:cd:0a:c4:bb:1a:89:ff:c0:e5:88:a3: aa:b5:9f:4f:ed:72:3a:08:7f:fe:c3:a8:d5:a8:87: f8:07:ff:87:06:24:ed:81:a4:36:a7:42:d9:a7:39: 55:a0:b5:1c:51:6b:b2:26:d6:b4:c2:64:78:94:b8: 1c:c3:6b:b0:c3:30:84:0e:c2:18:fb:f8:9f:10:19: d9:94:d8:79:58:52:ae:be:7b:b6:c2:f9:d3:3a:3a: 8a:c8:07:84:91:96:2b:e2:e0:f8:3f:90:5e:2b:1e: f1:b9:dd:7c:68:66:07:5e:a4:63:11:59:c8:c8:88: b3:62:19:b2:68:38:9b:85:ce:50:52:65:87:9e:c7: e1:72:d5:99:2b:c0:55:db:38:ee:25:74:84:6e:18: 47:35:37:87:c9:8f:83:04:17:98:a9:9d:94:6b:6f: 54:cf:98:24:12:93:c2:16:39:a6:8c:74:ab:9d:a6: 4c:97:9f:d6:6e:cd:42:35:97:cd:b1:d1:05:b0:fa: 1c:01:f4:49:b7:1c:b8:91:0c:95:eb:3a:37:a3:de: 0e:26:ee:75:9e:7a:89:33:32:7c:fb:95:8a:f3:bb: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:41:74:16:D3:E5:0D:8D:EF:48:50:C8:24:A9:A6:50:93:54:23 X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:72:b4:93:44:17:77:be:7a:8f:4c:a5:48:ad:95:fe:c8:26: da:54:11:31:06:c4:b1:be:ef:cf:c7:0e:a8:4c:ce:86:10:04: 42:73:cb:2f:74:f3:d7:0a:b4:25:7d:14:49:a8:74:9f:b3:0b: 9e:c1:39:e3:ed:d9:a1:6d:cc:de:42:67:c5:62:41:a8:02:5f: ca:cf:cb:4c:d9:5e:88:e3:4b:5f:02:53:94:8a:0f:c8:84:06: 59:91:22:e0:2b:59:b4:1c:d7:cd:f6:f7:5e:ef:94:8d:92:5a: 0a:cb:c8:dc:a6:21:59:2b:e2:9b:e5:c1:14:16:57:c9:fc:d1: 14:b0:ef:d0:f2:6b:f2:b2:6d:00:82:fd:09:59:df:21:87:ca: 9a:4e:ef:91:20:49:e3:38:f7:8f:1f:e5:a8:82:49:d6:1b:e7: 3d:f4:dc:ff:cd:2d:65:2e:e4:65:cd:65:f3:01:44:dd:10:c3: 54:21:f3:bf:cc:e8:ef:f3:f4:bb:71:76:a5:e9:18:e5:0f:f5: b5:ed:f1:ef:34:bb:c6:55:39:42:f0:5d:8c:36:3c:98:8e:8c: 1b:78:2a:88:40:90:c5:43:57:40:4a:8f:0c:5c:99:c3:63:28: f5:6c:7f:5c:0d:de:af:73:25:23:1f:d7:2b:f3:f4:46:db:17: fe:0e:68:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjYwNDE5MDM1MjQxWhcNMjYwNDI2MDM1MjQxWjAYMRYwFAYD VQQDEw02OWU0NTE4OS1mODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPD7RIHUJSk5VXMFFI33LT3AL8DW3XBKCs3OmJzph0lmzQrEuxqJ/8DliKOq tZ9P7XI6CH/+w6jVqIf4B/+HBiTtgaQ2p0LZpzlVoLUcUWuyJta0wmR4lLgcw2uw wzCEDsIY+/ifEBnZlNh5WFKuvnu2wvnTOjqKyAeEkZYr4uD4P5BeKx7xud18aGYH XqRjEVnIyIizYhmyaDibhc5QUmWHnsfhctWZK8BV2zjuJXSEbhhHNTeHyY+DBBeY qZ2Ua29Uz5gkEpPCFjmmjHSrnaZMl5/Wbs1CNZfNsdEFsPocAfRJtxy4kQyV6zo3 o94OJu51nnqJMzJ8+5WK87uzIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVqQXQW 0+UNje9IUMgkqaZQk1QjMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwnK0k0QXd756j0ylSK2V/sgm2lQRMQbEsb7vz8cOqEzOhhAEQnPLL3Tz1wq0 JX0USah0n7MLnsE54+3ZoW3M3kJnxWJBqAJfys/LTNleiONLXwJTlIoPyIQGWZEi 4CtZtBzXzfb3Xu+UjZJaCsvI3KYhWSvim+XBFBZXyfzRFLDv0PJr8rJtAIL9CVnf IYfKmk7vkSBJ4zj3jx/lqIJJ1hvnPfTc/80tZS7kZc1l8wFE3RDDVCHzv8zo7/P0 u3F2pekY5Q/1te3x7zS7xlU5QvBdjDY8mI6MG3gqiECQxUNXQEqPDFyZw2Mo9Wx/ XA3er3MlIx/XK/P0RtsX/g5oRg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:25 2026 by rpki-client