$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: AsDdZcTYhMt5q15vPnQ5uQROqOHqiVplEV1drL2aYVk= Subject key identifier: AF:65:FD:90:F7:EB:8A:DD:1C:A9:AB:56:21:D0:80:58:AF:E2:71:2E Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09E2 Signing time: Tue 22 Sep 2026 19:46:12 +0000 Manifest this update: Tue 22 Sep 2026 19:46:11 +0000 Manifest next update: Tue 29 Sep 2026 19:46:11 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: h1dxIfM0v7igDqf0cl2Tch9xjBbjbrAvt7vr0cUVanc=) 2: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 3: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 4: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 5: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) 6: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 7: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Sep 22 19:46:11 2026 GMT Not After : Sep 29 19:46:11 2026 GMT Subject: CN=6ab2db04-087f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4d:97:db:67:84:0b:bb:bf:31:1a:a4:cc:44: 66:c0:51:1e:e2:eb:48:89:97:fb:e6:82:f5:d0:35: 34:4f:f5:9c:50:7b:67:44:25:18:e3:74:17:89:92: 0f:7b:46:68:12:86:05:9f:72:da:14:d9:6e:ca:4d: 3b:02:3b:11:fd:55:63:c0:de:17:57:eb:c7:d3:e3: 21:18:27:66:83:1f:e0:d9:0a:c2:fa:54:48:14:f3: c8:b6:06:76:f2:10:49:14:8c:26:44:75:41:ec:a4: 4d:21:aa:bb:e1:56:a3:c4:37:fa:01:40:c9:74:e7: 47:0c:77:f6:38:8d:3b:ba:94:f6:83:e9:61:fd:14: 0b:1b:03:53:33:4b:26:81:18:22:86:2c:b9:8a:9b: ed:58:4b:36:13:2b:59:3d:05:49:6a:4b:6b:61:fd: 22:4b:50:76:fc:be:e8:d8:0d:98:11:a0:33:b8:a1: 84:4a:f0:66:e8:a6:5f:c3:b7:8b:66:a5:6b:6f:4c: 5d:9c:2c:b9:a5:6b:4b:57:2a:be:42:1c:30:20:2b: d1:8a:7e:32:c3:12:34:3f:1d:bf:10:0c:74:2d:43: 62:54:86:8d:1e:a6:a3:2a:ab:1e:20:b9:d0:5f:80: ec:d9:4d:7d:81:49:e7:61:4b:e1:93:76:3d:43:27: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:FD:90:F7:EB:8A:DD:1C:A9:AB:56:21:D0:80:58:AF:E2:71:2E X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:61:9b:97:3c:f5:49:7a:51:70:10:de:5d:bd:84:85:a7:13: 60:81:4d:06:6f:e7:66:dc:5e:05:71:1e:1e:08:30:55:fc:57: 5b:d1:02:eb:61:e4:63:0e:f8:88:e7:1c:36:25:d1:55:b0:24: 70:eb:a5:69:8b:6b:32:64:16:cb:04:c3:bf:ed:1b:e0:af:d4: db:99:c4:ad:06:3e:0e:91:6a:4b:22:02:bc:d7:9b:2d:ec:09: db:97:77:72:f4:a5:d4:d2:28:50:98:20:e1:ab:50:2e:5b:a9: 1c:88:48:8c:c8:e5:2c:f1:9e:10:dd:52:65:9e:d0:db:59:31: e2:59:6d:b0:f9:7a:cc:17:a3:2b:40:4a:e7:6a:55:af:b8:b8: 6d:57:2a:cf:a8:c7:56:19:0c:87:07:dd:3c:79:3b:eb:34:68: c2:04:68:1d:ce:2e:e5:4b:89:9a:d2:6f:8f:e2:62:13:5a:55: 2f:6b:ff:9b:86:45:41:66:e3:c2:55:16:db:54:d8:be:ac:41: 6a:f2:59:fc:f9:0c:e7:b4:0e:05:83:89:80:29:4b:52:47:0b: 79:b3:9a:e9:02:1c:57:76:11:ed:5b:8f:b1:54:f4:63:7d:d0: f2:07:03:f2:32:85:a1:2f:c2:98:63:b7:64:e1:41:c7:5a:b5: 24:f0:30:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwOTIyMTk0NjExWhcNMjYwOTI5MTk0NjExWjAYMRYwFAYD VQQDEw02YWIyZGIwNC0wODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh02X22eEC7u/MRqkzERmwFEe4utIiZf75oL10DU0T/WcUHtnRCUY43QXiZIP e0ZoEoYFn3LaFNluyk07AjsR/VVjwN4XV+vH0+MhGCdmgx/g2QrC+lRIFPPItgZ2 8hBJFIwmRHVB7KRNIaq74VajxDf6AUDJdOdHDHf2OI07upT2g+lh/RQLGwNTM0sm gRgihiy5ipvtWEs2EytZPQVJaktrYf0iS1B2/L7o2A2YEaAzuKGESvBm6KZfw7eL ZqVrb0xdnCy5pWtLVyq+QhwwICvRin4ywxI0Px2/EAx0LUNiVIaNHqajKqseILnQ X4Ds2U19gUnnYUvhk3Y9QyewTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9l/ZD3 64rdHKmrViHQgFiv4nEuMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuGGblzz1SXpRcBDeXb2EhacTYIFNBm/nZtxeBXEeHggwVfxXW9EC62HkYw74 iOccNiXRVbAkcOulaYtrMmQWywTDv+0b4K/U25nErQY+DpFqSyICvNebLewJ25d3 cvSl1NIoUJgg4atQLlupHIhIjMjlLPGeEN1SZZ7Q21kx4lltsPl6zBejK0BK52pV r7i4bVcqz6jHVhkMhwfdPHk76zRowgRoHc4u5UuJmtJvj+JiE1pVL2v/m4ZFQWbj wlUW21TYvqxBavJZ/PkM57QOBYOJgClLUkcLebOa6QIcV3YR7VuPsVT0Y33Q8gcD 8jKFoS/CmGO3ZOFBx1q1JPAw/w== -----END CERTIFICATE-----Generated at Thu Sep 24 19:08:31 2026 by rpki-client