$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: 3vMcGqgDuoS5ipA4NeQ/JV4J1IhChYN6SBv36CnBon4= Subject key identifier: A6:3A:8E:26:35:A5:90:9F:A4:CE:ED:E7:32:D3:66:C8:F6:08:88:0D Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 027C Signing time: Wed 23 Sep 2026 01:51:58 +0000 Manifest this update: Wed 23 Sep 2026 01:51:58 +0000 Manifest next update: Wed 30 Sep 2026 01:51:58 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: SEKB37c0EpjyHE+ARJc6BJT+TdDQhGHxP/valk7r1Jw=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=) 3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Sep 23 01:51:58 2026 GMT Not After : Sep 30 01:51:58 2026 GMT Subject: CN=6ab330be-9283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:66:a6:1e:9b:cd:09:a0:e7:6f:e2:bc:52: c5:20:9d:a2:7e:e5:b5:fa:5a:0a:04:86:b3:7a:32: d6:5f:3b:9e:66:7e:31:5a:b4:8c:9f:12:c5:00:38: 59:d4:64:88:c4:40:7c:45:77:6e:66:10:34:cf:3b: 61:53:53:d2:d2:bf:1d:ef:f4:06:d2:87:a1:8b:6b: 4f:1a:82:de:1d:4e:96:a9:98:6b:7b:c9:00:83:66: ba:73:df:94:fd:f2:1d:69:2f:07:b6:99:ac:61:fe: 28:aa:77:9e:c8:e6:37:7f:0e:7d:4c:5c:b2:42:12: 26:67:53:54:b4:38:84:ce:f9:a7:33:bc:f1:e6:f3: 19:bb:27:64:0d:4e:98:a6:0d:f4:5c:96:bc:27:d5: 56:67:aa:40:bf:1d:ce:7d:d6:8e:24:8f:ff:3f:d2: 3d:63:f4:4e:e4:df:fa:76:23:88:e4:c6:78:f3:9c: 46:4c:8c:70:ff:90:e7:aa:e1:3e:02:42:22:6b:39: e4:34:68:03:5b:e5:a5:a6:e9:7e:74:6a:75:56:e9: 54:bb:ff:34:1e:f7:07:9a:5c:2f:7d:5e:c8:58:0a: 79:01:96:13:0d:ae:28:ab:2a:10:71:ba:e7:cb:e5: 3a:72:6d:cb:fa:93:c0:0e:b1:5f:65:a1:f6:bf:b4: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:8E:26:35:A5:90:9F:A4:CE:ED:E7:32:D3:66:C8:F6:08:88:0D X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9d:f9:24:76:33:76:54:1d:83:1a:81:81:fa:0f:e4:f0:0f: 6b:eb:b6:94:b6:2d:a2:6a:19:12:b6:ca:6c:8b:b0:54:8d:6a: ba:5d:e6:6b:8a:10:76:77:84:1f:48:18:42:c1:dd:11:7a:a0: b3:10:dd:3f:04:55:29:9f:65:b9:8a:d1:cc:52:38:b9:24:d7: 2d:f2:ff:81:69:77:99:0d:dc:88:99:3f:aa:5f:7a:29:94:cb: 92:4a:18:c5:09:62:04:13:70:6f:80:03:3e:5c:94:53:ea:61: be:76:09:f2:d9:bb:a2:59:ff:46:ca:39:49:34:61:9f:1d:1c: 20:fc:40:be:31:6c:80:74:2c:c8:ac:38:85:d1:60:2a:6c:a1: e8:92:a5:b6:3e:16:c2:72:ba:76:0e:95:8f:cf:5a:d2:02:ba: 93:ea:3e:e9:2b:9c:50:5b:40:c7:aa:99:a6:28:0b:a9:f5:1f: 99:64:eb:42:4f:f6:4c:e4:0d:9d:2a:b4:a9:62:aa:04:80:41: fa:82:27:ee:05:3f:69:0e:ce:00:32:e9:fd:b9:b9:3c:d3:77: 82:4c:28:b1:59:b1:25:09:39:5a:87:1e:05:f0:50:6c:56:f5: 28:a9:5b:98:43:ff:27:ab:ea:b1:aa:9a:1f:84:f3:33:24:b6: 18:bb:54:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjYwOTIzMDE1MTU4WhcNMjYwOTMwMDE1MTU4WjAYMRYwFAYD VQQDEw02YWIzMzBiZS05MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/Fmph6bzQmg52/ivFLFIJ2ifuW1+loKBIazejLWXzueZn4xWrSMnxLFADhZ 1GSIxEB8RXduZhA0zzthU1PS0r8d7/QG0oehi2tPGoLeHU6WqZhre8kAg2a6c9+U /fIdaS8HtpmsYf4oqneeyOY3fw59TFyyQhImZ1NUtDiEzvmnM7zx5vMZuydkDU6Y pg30XJa8J9VWZ6pAvx3OfdaOJI//P9I9Y/RO5N/6diOI5MZ485xGTIxw/5DnquE+ AkIiaznkNGgDW+Wlpul+dGp1VulUu/80HvcHmlwvfV7IWAp5AZYTDa4oqyoQcbrn y+U6cm3L+pPADrFfZaH2v7S6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKY6jiY1 pZCfpM7t5zLTZsj2CIgNMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG535JHYzdlQdgxqBgfoP5PAPa+u2lLYtomoZErbKbIuwVI1qul3ma4oQdneE H0gYQsHdEXqgsxDdPwRVKZ9luYrRzFI4uSTXLfL/gWl3mQ3ciJk/ql96KZTLkkoY xQliBBNwb4ADPlyUU+phvnYJ8tm7oln/Rso5STRhnx0cIPxAvjFsgHQsyKw4hdFg Kmyh6JKltj4WwnK6dg6Vj89a0gK6k+o+6SucUFtAx6qZpigLqfUfmWTrQk/2TOQN nSq0qWKqBIBB+oIn7gU/aQ7OADLp/bm5PNN3gkwosVmxJQk5WoceBfBQbFb1KKlb mEP/J6vqsaqaH4TzMyS2GLtU0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 00:53:39 2026 by rpki-client