$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: IN5HIKKB6steC9YmGs+q2HjFTYL6AlABoKam4kUZc3A= Subject key identifier: FD:B4:00:4E:DF:B2:B0:BA:98:2E:2C:C4:FC:9B:5D:15:D8:31:A5:D8 Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 059C Signing time: Thu 16 Apr 2026 23:07:14 +0000 Manifest this update: Thu 16 Apr 2026 23:07:14 +0000 Manifest next update: Thu 23 Apr 2026 23:07:14 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: JnaMYNYvLtmea359xznnuOFDTKLGWsSlMaofKxbOYq4=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Apr 16 23:07:14 2026 GMT Not After : Apr 23 23:07:14 2026 GMT Subject: CN=69e16ba2-14d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:7e:87:79:27:7d:dc:56:da:73:e9:5f:75: 1e:53:27:1c:9f:14:26:2f:cc:52:be:5c:0e:f7:2f: d5:c8:58:a1:f5:63:9b:3a:a1:f4:2d:6b:72:b0:c4: 1f:6b:d6:a2:50:7d:e6:69:92:f0:f9:7f:f1:13:d1: 85:3b:9f:6a:10:bd:92:69:85:57:28:9e:55:1b:ec: 28:a6:09:16:59:28:c5:a5:44:d5:bf:40:a1:b1:d8: 6a:00:4d:92:fd:d0:78:c9:bf:58:87:37:c7:81:38: 0c:06:e6:ac:f5:6f:b4:a0:0b:59:d4:81:2f:aa:a5: dd:49:a3:54:70:00:4a:fb:d9:d5:e8:f4:6b:f2:51: e0:b3:3c:e5:f0:0c:8a:5d:23:75:35:4e:3e:79:03: 7f:6c:da:cd:26:20:ba:58:af:4b:23:4b:27:4e:90: 11:f5:58:7e:6e:13:b4:c3:2b:4d:8e:d9:74:8c:c6: f1:f0:1e:76:82:60:89:a1:b6:38:be:fa:e3:91:a6: 60:a0:9c:23:0d:24:d5:bf:19:a3:56:7e:5b:6b:e0: 11:8e:60:64:60:be:bf:bf:8c:ec:9c:ff:78:fa:69: 34:52:cf:0f:59:3c:f3:49:5c:c6:b6:5a:8c:2c:05: 39:d6:79:07:13:9d:5f:ce:b4:3f:16:6b:6b:30:55: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:00:4E:DF:B2:B0:BA:98:2E:2C:C4:FC:9B:5D:15:D8:31:A5:D8 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6b:5a:2c:fd:93:fd:1f:99:e8:b9:b0:5f:55:f4:01:75:cd: e3:4d:c2:3a:a8:18:56:1e:e3:2a:fb:ca:74:ba:6a:a2:8f:55: 96:6f:21:76:d0:ab:48:e4:c0:27:64:10:95:47:76:ba:82:0f: b8:22:d9:a7:12:8b:db:10:02:c7:27:0d:3f:6c:41:9e:25:5a: 9e:57:35:96:ff:e6:a4:64:07:34:1e:37:aa:38:97:3c:99:e3: 52:cd:40:f6:2e:a6:ec:f9:64:be:83:06:05:c6:63:61:3f:fb: 9e:14:04:c0:f1:9f:96:bb:61:34:96:8f:bc:ab:b6:26:72:ca: 23:dc:b7:e6:03:42:4e:e7:6e:5a:ca:99:05:55:f7:6f:c9:84: 62:31:93:c5:53:85:02:36:fc:8b:80:94:16:42:96:04:0a:64: e7:b3:2b:b7:27:1d:5d:91:75:76:fc:b6:8d:16:47:61:45:f4: b1:6f:0c:25:f5:c2:75:bc:f3:cc:45:53:93:5a:eb:05:e7:b1: 49:5b:64:e2:7d:f6:3a:f6:d6:28:8d:e1:31:d8:58:41:29:a3: 71:ac:ff:13:64:94:3f:c1:91:20:ea:97:ad:3c:cc:1d:7a:02: 44:54:81:6b:48:3b:6a:3a:6d:28:17:66:6d:76:de:53:05:fe: 7d:ad:4c:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjYwNDE2MjMwNzE0WhcNMjYwNDIzMjMwNzE0WjAYMRYwFAYD VQQDEw02OWUxNmJhMi0xNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vF+h3knfdxW2nPpX3UeUyccnxQmL8xSvlwO9y/VyFih9WObOqH0LWtysMQf a9aiUH3maZLw+X/xE9GFO59qEL2SaYVXKJ5VG+wopgkWWSjFpUTVv0ChsdhqAE2S /dB4yb9YhzfHgTgMBuas9W+0oAtZ1IEvqqXdSaNUcABK+9nV6PRr8lHgszzl8AyK XSN1NU4+eQN/bNrNJiC6WK9LI0snTpAR9Vh+bhO0wytNjtl0jMbx8B52gmCJobY4 vvrjkaZgoJwjDSTVvxmjVn5ba+ARjmBkYL6/v4zsnP94+mk0Us8PWTzzSVzGtlqM LAU51nkHE51fzrQ/FmtrMFU1hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP20AE7f srC6mC4sxPybXRXYMaXYMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABGtaLP2T/R+Z6LmwX1X0AXXN403COqgYVh7jKvvKdLpqoo9Vlm8hdtCrSOTA J2QQlUd2uoIPuCLZpxKL2xACxycNP2xBniVanlc1lv/mpGQHNB43qjiXPJnjUs1A 9i6m7PlkvoMGBcZjYT/7nhQEwPGflrthNJaPvKu2JnLKI9y35gNCTuduWsqZBVX3 b8mEYjGTxVOFAjb8i4CUFkKWBApk57MrtycdXZF1dvy2jRZHYUX0sW8MJfXCdbzz zEVTk1rrBeexSVtk4n32OvbWKI3hMdhYQSmjcaz/E2SUP8GRIOqXrTzMHXoCRFSB a0g7ajptKBdmbXbeUwX+fa1MrA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:27 2026 by rpki-client