$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json) Hash identifier: 2nwQGZuuIiSlS2nty7VMiM8jyz8dN0i353FtTgmvEuY= Subject key identifier: 03:0E:A3:49:CC:71:95:3A:D8:C1:53:B7:43:F7:66:FC:F0:AD:3C:3C Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft Manifest number: 02B7 Signing time: Wed 23 Sep 2026 01:19:59 +0000 Manifest this update: Wed 23 Sep 2026 01:19:59 +0000 Manifest next update: Wed 30 Sep 2026 01:19:59 +0000 Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: kwUEDQVyoL0vYSX+RWR8CYrbChGZShjw8bzhuUnpgzw=) 2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: 94M44dsN95Cfdn+68CbMlhuF5n5qBQCEV7YwA9S7Ln8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Validity Not Before: Sep 23 01:19:59 2026 GMT Not After : Sep 30 01:19:59 2026 GMT Subject: CN=6ab3293f-2f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:6a:2c:83:17:a2:20:46:67:cd:0b:92:62: 8f:92:0c:3c:97:8e:48:03:bd:69:ea:77:64:f6:0c: 20:3e:3c:7a:17:a1:8d:4e:04:41:50:96:26:2c:1c: b5:e4:77:5f:a8:d5:11:bd:57:8b:1a:c1:0f:c2:25: cb:b7:db:d7:cf:f6:88:5f:6e:f0:96:38:2f:b8:dd: ca:2e:2a:e3:fb:58:29:42:71:95:64:97:9a:fb:9b: f3:21:a0:7a:65:72:a4:61:22:6a:84:df:2c:5f:2f: e8:99:94:c7:bf:c3:bd:6d:b0:86:c2:b7:d6:c4:79: 5d:5e:cd:ad:46:49:eb:9b:84:48:85:f1:a1:45:97: 64:66:c8:90:30:0d:70:7e:2d:ff:15:da:ee:8e:85: d9:ae:d7:74:e7:9d:c5:14:7c:f5:8f:c4:a3:1a:f4: c4:74:f5:01:43:a1:df:ab:f3:1a:f5:32:6a:ac:76: 0e:65:51:6a:e1:30:19:2b:1f:5c:62:0b:7d:3f:f6: df:76:ee:ae:11:4d:b3:d9:10:50:5c:f1:fd:26:d7: 1d:49:23:f3:a2:68:be:d7:e3:8c:71:11:23:03:70: d6:36:2e:0e:5a:6d:42:43:72:bb:79:99:ab:f1:9e: 7a:ca:48:48:f9:4e:27:b5:5b:01:e3:38:76:46:96: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:A3:49:CC:71:95:3A:D8:C1:53:B7:43:F7:66:FC:F0:AD:3C:3C X509v3 Authority Key Identifier: keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:8d:e0:96:99:4c:a2:76:be:f4:f9:1c:04:76:48:a7:a5: c8:ca:75:8c:14:83:93:6b:f6:be:9b:68:40:1b:dd:3d:7f:ed: 6e:ad:b3:08:db:39:59:01:03:c9:b1:9e:da:15:57:7a:1a:c7: 10:6c:80:21:1f:03:33:25:37:f1:e5:85:05:d4:1c:d0:b0:06: 3e:9f:e4:d7:ee:fd:a3:2d:5a:47:7d:82:9a:8b:14:a9:fe:05: 05:44:e2:3f:c6:82:bc:42:21:b1:47:0a:6a:e2:60:41:17:6c: 38:bb:46:d7:23:f6:e5:c1:fd:32:c9:11:9e:0e:5e:46:8c:1f: 82:f6:6f:11:30:6a:26:79:3e:36:a8:2c:75:e6:50:4c:20:89: 78:d6:04:cf:08:69:db:a8:c9:d8:0e:29:7d:3d:91:68:87:09: cb:8d:0a:2e:4f:35:82:22:05:db:25:4d:c8:33:c9:ab:14:d8: d0:58:82:10:77:a1:40:da:de:dc:a3:72:c4:fa:5b:e4:71:b2: 98:0b:3c:59:61:a1:a2:e2:4c:e4:54:1f:c5:53:1b:77:ad:07: fd:3a:47:ad:d4:1b:1d:c1:f2:35:ea:71:63:2c:74:7a:40:2c: 30:b1:10:7e:7e:b7:9c:e3:d8:a3:b4:61:9d:a2:ed:0e:43:78: 3c:fc:e5:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4RDcxMTAvBgNVBAUTKDA1MERDMDNCNUQ1OTQ1QTMzRUFCOTUxODE3RjE2NzlC RDkxMEM2QUMwHhcNMjYwOTIzMDExOTU5WhcNMjYwOTMwMDExOTU5WjAYMRYwFAYD VQQDEw02YWIzMjkzZi0yZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFFqLIMXoiBGZ80LkmKPkgw8l45IA71p6ndk9gwgPjx6F6GNTgRBUJYmLBy1 5HdfqNURvVeLGsEPwiXLt9vXz/aIX27wljgvuN3KLirj+1gpQnGVZJea+5vzIaB6 ZXKkYSJqhN8sXy/omZTHv8O9bbCGwrfWxHldXs2tRknrm4RIhfGhRZdkZsiQMA1w fi3/FdrujoXZrtd0553FFHz1j8SjGvTEdPUBQ6Hfq/Ma9TJqrHYOZVFq4TAZKx9c Ygt9P/bfdu6uEU2z2RBQXPH9JtcdSSPzomi+1+OMcREjA3DWNi4OWm1CQ3K7eZmr 8Z56ykhI+U4ntVsB4zh2RpYJRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMOo0nM cZU62MFTt0P3ZvzwrTw8MB8GA1UdIwQYMBaAFAUNwDtdWUWjPquVGBfxZ5vZEMas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjhENy9CNjdGMzAxQTk4 OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJhTS1xNVVZRl9Gbm05a1F4 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRM0FPMTFaUmFNLXE1VVlGX0ZubTlrUXhxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjhENy9CNjdGMzAxQTk4OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJh TS1xNVVZRl9Gbm05a1F4cXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS86N4JaZTKJ2vvT5HAR2SKelyMp1jBSDk2v2vptoQBvdPX/tbq2zCNs5WQED ybGe2hVXehrHEGyAIR8DMyU38eWFBdQc0LAGPp/k1+79oy1aR32CmosUqf4FBUTi P8aCvEIhsUcKauJgQRdsOLtG1yP25cH9MskRng5eRowfgvZvETBqJnk+NqgsdeZQ TCCJeNYEzwhp26jJ2A4pfT2RaIcJy40KLk81giIF2yVNyDPJqxTY0FiCEHehQNre 3KNyxPpb5HGymAs8WWGhouJM5FQfxVMbd60H/TpHrdQbHcHyNepxYyx0ekAsMLEQ fn63nOPYo7RhnaLtDkN4PPzliA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:24:25 2026 by rpki-client