$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft File: bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json) Hash identifier: 0M2bwgiT0BSzOXL3ZAHLqO7qlnm3ewpIPimOJfKPk0w= Subject key identifier: D7:73:00:A8:08:3B:D7:86:FF:89:F4:7D:DB:16:F8:13:AD:CB:D7:6F Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft Manifest number: 0AC2 Signing time: Thu 16 Apr 2026 19:23:17 +0000 Manifest this update: Thu 16 Apr 2026 19:23:17 +0000 Manifest next update: Thu 23 Apr 2026 19:23:17 +0000 Files and hashes: 1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: Oai41YNYKWjT0TvEmTRSysoQ1vyXgDDv+2eAPWMV3L8=) 2: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 2CxBlSEZ4s9h+CG+sdkPtbZiMyYV71gXHZ/DNWmS4OY=) 3: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: fFsNR12R3pP/AJUsoiljuBLUKnPB5wu9KTa5f+JWnzE=) 4: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: 3zmhoqDN3914HCGCg2WBUkiHp98MLEWrF9AHJiv1VWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Apr 16 19:23:17 2026 GMT Not After : Apr 23 19:23:17 2026 GMT Subject: CN=69e13725-4b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:06:55:c9:b2:dd:0e:03:00:e9:d3:66:ba: b6:20:62:37:27:47:bc:d1:3d:69:c2:d6:d0:df:e1: f3:87:01:5f:4a:45:17:e6:d8:e8:b7:e5:28:f0:92: c9:95:02:82:02:1e:d9:0b:25:c4:4a:ba:ff:0c:80: 85:9e:42:04:71:ab:9a:4c:e0:a5:42:28:09:52:e0: cd:16:a7:61:cc:62:f4:25:ff:a9:9b:78:27:3a:04: b5:2a:bc:e9:3f:89:f1:9d:81:e9:fa:ae:0f:5a:d2: 1e:cf:5c:58:89:09:24:68:f2:a3:71:ec:96:79:04: c7:12:12:ff:a7:02:42:c1:fd:96:55:a6:f8:66:49: 77:ff:50:74:a4:39:dd:15:87:bc:b7:0d:b9:b5:8e: 25:15:64:c1:37:7b:78:87:fd:65:6c:d3:3c:94:a2: c3:1f:5b:75:ce:e4:3e:22:ab:07:99:52:51:de:36: c2:8e:63:ce:76:6d:2d:46:84:dc:59:72:9e:af:41: fd:0b:3d:a5:84:be:43:be:51:13:70:bc:01:ad:f3: 6d:83:ac:9b:a8:71:25:80:22:f7:22:80:7c:7e:99: d8:b4:11:34:fa:98:50:06:6d:3e:b0:44:0d:4d:4c: 8d:98:61:fa:e2:f2:bb:95:f0:a8:39:81:99:11:59: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:73:00:A8:08:3B:D7:86:FF:89:F4:7D:DB:16:F8:13:AD:CB:D7:6F X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:05:24:d3:50:bf:74:74:b3:3e:d5:72:b7:68:78:fd:63: ee:e2:fd:63:97:ee:9c:34:67:6a:2f:5d:9a:df:e5:d1:c1:69: e3:ee:4b:4c:fa:57:7f:dc:33:77:3d:c3:2e:71:ad:34:27:f6: 2d:21:2c:a3:88:12:22:1c:17:67:65:c0:db:84:b4:ea:3a:b6: 46:bc:da:d2:b7:bf:a0:95:6e:51:5c:fa:85:11:d1:8d:ea:d4: 38:6b:da:7a:39:95:4d:53:d8:e7:e4:b1:4c:b8:e9:38:b5:5f: 21:79:13:5d:03:99:0a:c3:b1:7b:1a:c3:68:24:e9:f9:f3:69: 8a:9d:14:c1:e7:56:3c:74:20:5e:ce:4d:17:59:de:24:5a:a3: ff:4b:e7:49:e8:19:e9:bf:ea:39:cc:d8:c2:57:ad:fe:83:dc: 5f:a9:53:0b:8e:2e:ca:79:bd:9a:98:a4:17:60:a0:fa:d9:26: 7a:13:6c:7c:87:56:30:53:9a:16:4d:59:25:50:07:0d:dd:4e: 60:82:cd:2b:da:a5:10:3b:e7:7f:7b:8b:0a:78:fb:d9:1c:fb: 0d:5c:0a:90:f6:e9:f4:91:5d:a5:75:83:e8:f4:02:8e:ec:fd: 8b:65:0b:f3:a2:91:2a:b5:2a:ea:c3:2c:63:a3:92:55:31:cc: c7:f6:21:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjYwNDE2MTkyMzE3WhcNMjYwNDIzMTkyMzE3WjAYMRYwFAYD VQQDEw02OWUxMzcyNS00YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw4GVcmy3Q4DAOnTZrq2IGI3J0e80T1pwtbQ3+HzhwFfSkUX5tjot+Uo8JLJ lQKCAh7ZCyXESrr/DICFnkIEcauaTOClQigJUuDNFqdhzGL0Jf+pm3gnOgS1Krzp P4nxnYHp+q4PWtIez1xYiQkkaPKjceyWeQTHEhL/pwJCwf2WVab4Zkl3/1B0pDnd FYe8tw25tY4lFWTBN3t4h/1lbNM8lKLDH1t1zuQ+IqsHmVJR3jbCjmPOdm0tRoTc WXKer0H9Cz2lhL5DvlETcLwBrfNtg6ybqHElgCL3IoB8fpnYtBE0+phQBm0+sEQN TUyNmGH64vK7lfCoOYGZEVl6vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdzAKgI O9eG/4n0fdsW+BOty9dvMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2 TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATXEFJNNQv3R0sz7VcrdoeP1j7uL9Y5funDRnai9dmt/l0cFp4+5LTPpXf9wz dz3DLnGtNCf2LSEso4gSIhwXZ2XA24S06jq2Rrza0re/oJVuUVz6hRHRjerUOGva ejmVTVPY5+SxTLjpOLVfIXkTXQOZCsOxexrDaCTp+fNpip0UwedWPHQgXs5NF1ne JFqj/0vnSegZ6b/qOczYwlet/oPcX6lTC44uynm9mpikF2Cg+tkmehNsfIdWMFOa Fk1ZJVAHDd1OYILNK9qlEDvnf3uLCnj72Rz7DVwKkPbp9JFdpXWD6PQCjuz9i2UL 86KRKrUq6sMsY6OSVTHMx/Yhug== -----END CERTIFICATE-----Generated at Fri Apr 17 10:03:13 2026 by rpki-client