$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json) Hash identifier: ff0r7zPOZSm3ojd+RK2lDQgpuAUzG0GLVHQOYwPnF5Y= Subject key identifier: DE:7C:07:57:0E:9F:17:80:5E:30:7F:D8:F8:83:A1:74:95:5C:68:6F Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Certificate serial: 2226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft Manifest number: 2E4C Signing time: Thu 16 Apr 2026 15:28:25 +0000 Manifest this update: Thu 16 Apr 2026 15:28:24 +0000 Manifest next update: Thu 23 Apr 2026 15:28:24 +0000 Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: MQTfTV+TfCfv5RaYDF7o1MoNr0a3hfhqyU4GCUgwwzM=) 2: 44A88C482CA611F1A847C919C5833773.roa (hash: XIvcZhXRx87BSwov/Ulx76fwgEzGaA5I0TxUrYuAlrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8742 (0x2226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Validity Not Before: Apr 16 15:28:24 2026 GMT Not After : Apr 23 15:28:24 2026 GMT Subject: CN=69e10019-6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:c9:2f:93:3d:2f:16:8c:a7:62:7e:59:c9: e4:f8:5f:d5:86:84:ab:3e:97:57:6a:a9:0b:3b:40: e3:a5:c1:0f:07:7c:a9:36:34:75:2a:59:26:a6:9b: ee:4b:37:1d:7d:67:10:d1:d6:7f:1e:a4:ea:d7:45: c1:9b:c3:65:30:a3:80:42:82:68:6d:0a:04:73:15: 64:48:9b:9d:a2:ea:db:96:96:65:28:75:59:ab:c6: 3f:d2:df:a7:1e:88:fa:19:50:e3:6c:49:d1:ed:07: 98:3b:34:bd:2d:47:76:bc:e6:9d:73:fc:27:99:af: b1:cf:97:1f:46:e1:da:c2:d6:29:15:01:77:53:f0: 24:aa:ad:2f:6e:d2:2a:e4:50:bc:aa:d9:aa:de:b0: e0:73:a2:e1:7b:ee:f0:03:b5:15:95:48:c8:1d:22: 22:0f:a0:86:d4:53:ae:7c:ce:45:cd:c4:82:3e:fb: aa:48:f0:ca:4a:64:1b:65:60:20:2d:20:6f:12:b9: ff:61:93:96:1f:06:8b:88:d4:fa:e3:e1:fa:8b:e3: c8:07:c3:3b:38:20:b7:76:c0:6d:19:3d:a8:0d:81: f5:81:3b:1d:24:cf:1a:86:65:0a:ee:5a:b5:b4:21: 26:b9:95:1f:da:7a:31:d4:52:6e:5c:36:28:b6:21: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:07:57:0E:9F:17:80:5E:30:7F:D8:F8:83:A1:74:95:5C:68:6F X509v3 Authority Key Identifier: keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a5:61:db:af:47:6d:8c:94:cf:30:f4:46:47:32:5e:18:73: 53:61:f5:e9:29:7d:a7:1e:8f:24:7e:b9:cf:23:6a:6a:1c:5d: c1:b2:6c:95:42:b0:67:84:ef:17:c3:4a:15:d9:e0:25:9a:eb: 1f:fd:02:69:57:b0:4d:34:49:63:55:c1:19:5d:32:d2:6f:2e: 2d:b0:a2:11:9e:f1:8d:c0:43:2f:29:f8:c5:77:b7:30:53:68: c7:d5:f9:f4:1f:43:7c:75:95:ca:9f:24:9b:ae:79:f8:c5:81: ac:90:fd:de:a0:1a:15:21:bf:5e:e5:a5:a0:58:8f:df:4c:cf: de:95:97:f1:71:36:a4:ab:c4:2f:5e:99:06:b5:28:f8:25:21: 6c:c1:ef:41:cc:ab:28:1d:6a:c0:a8:f6:cf:52:7f:d2:de:5b: d2:e7:9c:98:c3:bf:d5:c7:8f:e3:56:b6:f4:0b:ef:e8:19:c1: a0:0f:4d:fd:54:0d:ce:95:8b:7c:65:ec:0e:47:f8:87:ae:0c: 2f:94:9c:c2:00:eb:81:fc:fc:5f:3c:cb:39:ec:4f:18:b3:b4: f7:5e:00:33:d8:42:40:61:b9:79:00:98:e1:b0:b5:f6:23:10: e6:e3:62:e1:bf:03:a7:ce:06:af:0c:39:df:1c:69:14:f4:7f: 7e:f7:24:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4 NzYzMjhDRDkwHhcNMjYwNDE2MTUyODI0WhcNMjYwNDIzMTUyODI0WjAYMRYwFAYD VQQDEw02OWUxMDAxOS02YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0/JL5M9LxaMp2J+Wcnk+F/VhoSrPpdXaqkLO0DjpcEPB3ypNjR1Klkmppvu SzcdfWcQ0dZ/HqTq10XBm8NlMKOAQoJobQoEcxVkSJudourblpZlKHVZq8Y/0t+n Hoj6GVDjbEnR7QeYOzS9LUd2vOadc/wnma+xz5cfRuHawtYpFQF3U/Akqq0vbtIq 5FC8qtmq3rDgc6Lhe+7wA7UVlUjIHSIiD6CG1FOufM5FzcSCPvuqSPDKSmQbZWAg LSBvErn/YZOWHwaLiNT64+H6i+PIB8M7OCC3dsBtGT2oDYH1gTsdJM8ahmUK7lq1 tCEmuZUf2nox1FJuXDYotiFCtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN58B1cO nxeAXjB/2PiDoXSVXGhvMB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUyNS9GNDM0NDExNjhBMkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9Z dHdnVDF0cmN0VWFIWXlqTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvqVh269HbYyUzzD0RkcyXhhzU2H16Sl9px6PJH65zyNqahxdwbJslUKwZ4Tv F8NKFdngJZrrH/0CaVewTTRJY1XBGV0y0m8uLbCiEZ7xjcBDLyn4xXe3MFNox9X5 9B9DfHWVyp8km655+MWBrJD93qAaFSG/XuWloFiP30zP3pWX8XE2pKvEL16ZBrUo +CUhbMHvQcyrKB1qwKj2z1J/0t5b0uecmMO/1ceP41a29Avv6BnBoA9N/VQNzpWL fGXsDkf4h64ML5ScwgDrgfz8XzzLOexPGLO0914AM9hCQGG5eQCY4bC19iMQ5uNi 4b8Dp84Grww53xxpFPR/fvckBw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:32:10 2026 by rpki-client