$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: N01eIEnQmZD+TLIxEjkzvkvzWiE/9T0H3h7TgmBC3Io= Subject key identifier: 75:1C:09:BD:F2:BC:2D:FF:87:BD:2E:E9:4F:D1:40:79:CA:51:7D:15 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0CC1 Signing time: Sat 26 Sep 2026 18:35:58 +0000 Manifest this update: Sat 26 Sep 2026 18:35:58 +0000 Manifest next update: Sat 03 Oct 2026 18:35:58 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: cdv5+mB8FAmfsGGPYoUeeR2xiOH6ABNK4QoQs+Shsok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Sep 26 18:35:58 2026 GMT Not After : Oct 3 18:35:58 2026 GMT Subject: CN=6ab8108e-a2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:40:ea:db:44:dc:70:5d:87:6c:d8:19:d6: fb:8f:eb:63:1b:a2:f0:fe:cf:54:d6:5b:c2:5e:12: 1e:20:44:a5:93:fa:63:51:28:c5:64:33:1b:cc:fa: 7d:e7:eb:79:c2:9a:2f:f3:28:a0:d1:f4:3e:c7:e6: 6d:e0:f5:46:4b:ed:53:8a:00:3b:fe:cb:31:36:fd: 44:8d:1f:36:19:c7:71:6c:47:b0:95:8d:ce:5e:38: 60:c5:11:7f:f6:50:a0:98:b4:df:92:af:90:43:c8: fa:07:80:4c:d8:37:3a:c2:74:f1:07:01:74:72:82: 3d:f4:ef:7c:b1:49:19:54:24:2f:dd:e9:35:ac:08: 8b:56:d2:5c:de:e9:da:bd:84:13:31:3e:d3:c9:0a: e7:1a:5c:6d:25:22:90:9d:56:fd:c9:6a:7c:0a:da: b5:87:32:4e:2e:6d:d9:8a:d2:15:51:f4:37:f8:96: c6:03:2a:41:67:22:67:46:fe:40:49:c0:b6:26:6a: c9:65:f5:a0:82:4a:6a:cf:52:9d:66:b7:56:c4:a3: 42:92:4e:48:7d:e5:f0:37:25:95:c2:13:b8:90:30: b0:3d:29:b6:28:29:dd:8f:67:ea:bb:75:aa:28:f0: ba:73:3b:f3:3d:ba:e4:b5:e3:01:90:3c:f0:29:b8: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:09:BD:F2:BC:2D:FF:87:BD:2E:E9:4F:D1:40:79:CA:51:7D:15 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fe:cc:5e:7e:fb:c9:95:46:e4:73:2d:9a:d0:6c:58:e5:9c: e2:c8:08:39:ce:fd:87:44:9d:b3:ba:06:08:bb:4d:91:6b:df: 1d:03:1c:06:47:fe:17:13:99:35:72:ed:2e:bb:f2:4e:eb:97: ed:2f:27:9a:e0:0e:e8:b9:79:a5:f5:c6:de:68:08:a5:f5:29: c0:38:db:6e:b0:cf:93:52:e3:fe:a6:e0:a1:6b:54:d7:ec:fa: 5a:cf:5b:22:5d:8e:97:d0:6f:59:ee:6d:3f:aa:5b:cb:65:ca: 14:44:62:ee:0e:b6:56:90:e3:da:01:4c:17:a0:2b:bd:65:6d: d0:13:26:53:c3:94:f8:45:0c:af:5f:32:a8:3a:55:84:b9:6b: 5e:d5:62:9b:3d:3c:98:99:9a:ae:88:af:7e:ab:e6:c1:58:61: 49:86:3b:94:ed:15:20:3b:30:9a:3f:ae:94:9b:0f:4b:8c:cf: 42:e4:c5:5a:d6:cb:1a:06:e9:c2:6a:8e:c5:c6:fa:8d:16:57: 0e:71:b1:03:da:87:f6:6d:ab:5b:da:62:74:02:3c:f2:59:92: 27:a4:5f:df:43:52:1b:9c:6b:81:e0:4b:b4:12:ca:0d:9a:96: fa:7b:e5:09:26:1b:b9:0d:08:d4:cd:1b:26:f0:cd:45:52:37: 6b:5f:8f:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjYwOTI2MTgzNTU4WhcNMjYxMDAzMTgzNTU4WjAYMRYwFAYD VQQDEw02YWI4MTA4ZS1hMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp5A6ttE3HBdh2zYGdb7j+tjG6Lw/s9U1lvCXhIeIESlk/pjUSjFZDMbzPp9 5+t5wpov8yig0fQ+x+Zt4PVGS+1TigA7/ssxNv1EjR82GcdxbEewlY3OXjhgxRF/ 9lCgmLTfkq+QQ8j6B4BM2Dc6wnTxBwF0coI99O98sUkZVCQv3ek1rAiLVtJc3una vYQTMT7TyQrnGlxtJSKQnVb9yWp8Ctq1hzJOLm3ZitIVUfQ3+JbGAypBZyJnRv5A ScC2JmrJZfWggkpqz1KdZrdWxKNCkk5IfeXwNyWVwhO4kDCwPSm2KCndj2fqu3Wq KPC6czvzPbrkteMBkDzwKbhtMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUcCb3y vC3/h70u6U/RQHnKUX0VMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAif7MXn77yZVG5HMtmtBsWOWc4sgIOc79h0Sds7oGCLtNkWvfHQMcBkf+FxOZ NXLtLrvyTuuX7S8nmuAO6Ll5pfXG3mgIpfUpwDjbbrDPk1Lj/qbgoWtU1+z6Ws9b Il2Ol9BvWe5tP6pby2XKFERi7g62VpDj2gFMF6ArvWVt0BMmU8OU+EUMr18yqDpV hLlrXtVimz08mJmaroivfqvmwVhhSYY7lO0VIDswmj+ulJsPS4zPQuTFWtbLGgbp wmqOxcb6jRZXDnGxA9qH9m2rW9pidAI88lmSJ6Rf30NSG5xrgeBLtBLKDZqW+nvl CSYbuQ0I1M0bJvDNRVI3a1+Pig== -----END CERTIFICATE-----Generated at Sun Sep 27 22:31:46 2026 by rpki-client