$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: y9U4cC3w/j5eCi1/POlAm+/OGKBFTzPpOre3zBMxAp4= Subject key identifier: 9B:25:F5:D1:1E:1A:04:33:73:6A:B3:89:AE:3E:D7:A3:FD:08:C9:CC Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D56 Signing time: Wed 22 Jul 2026 18:27:08 +0000 Manifest this update: Wed 22 Jul 2026 18:27:07 +0000 Manifest next update: Wed 29 Jul 2026 18:27:07 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: pwKIVXNexo1Xkn6mBFnYJIHzDVtNIaIXNG0lJzQPZk4=) 2: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=) 3: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=) 4: lhlS5_TEJHo3UVrOxBep1TpMUiA.asa (hash: LeBm2quaHok7A5PLZUmdjey6RQlm/dDEh2VyeIlI3tQ=) 5: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=) 6: 1Tpg7YzcQziHe-csGNB6dRnrmak.asa (hash: sbQuTo/lyfQ4HCZCJQERF/0zsihc9Q3a5ZscI3SwxpQ=) 7: ZalB4shFIqzfzkOMiSb08RSiuXk.asa (hash: PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=) 8: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3484 (0xd9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Jul 22 18:27:07 2026 GMT Not After : Jul 29 18:27:07 2026 GMT Subject: CN=6a610b7b-4455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:fb:e7:f2:f4:d6:9c:7b:c4:04:c7:5d:47: 6c:8d:6f:96:a2:9e:07:b7:27:40:97:2c:10:83:3b: 6a:8c:75:24:ed:0d:b2:53:e7:69:62:59:04:da:e3: cc:8c:7e:60:fc:3e:35:fc:b6:e3:d2:2d:c8:b3:7c: b5:5a:86:c8:a1:b2:80:b9:0f:4f:55:ea:37:40:45: e2:0d:0f:01:ce:13:a6:16:9f:72:19:5f:2c:94:40: 92:98:70:c9:29:50:16:83:30:12:70:d6:72:e9:56: fb:4d:1b:2f:33:db:bc:ba:9c:7d:fe:6d:ee:ca:08: 2b:79:f5:3a:7a:4a:3c:1a:ce:ee:47:11:af:d6:b2: 0f:1d:a9:e6:19:ae:57:e5:13:38:6b:fe:89:09:62: a8:a3:f2:80:e6:6a:90:c6:37:c5:95:2c:d6:1e:ae: 41:18:a9:79:a2:37:52:c6:e8:6e:c2:18:a4:7a:95: be:34:f1:75:fb:56:4b:ff:36:a0:20:f9:2b:1f:79: 77:e0:f7:1f:2e:97:a6:79:65:f5:87:f2:5d:4b:c2: 4a:34:63:77:75:0f:2c:0e:45:84:69:83:46:18:d0: 17:9b:63:cc:56:eb:57:fd:26:29:53:f9:a6:f8:6b: 99:55:1d:ca:f0:45:e3:22:91:da:43:3a:89:10:ae: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:25:F5:D1:1E:1A:04:33:73:6A:B3:89:AE:3E:D7:A3:FD:08:C9:CC X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:ca:46:f0:d8:91:35:7e:bb:a2:aa:2a:52:6d:e6:9c:5c: 86:c4:58:a9:a5:ba:de:d1:37:ab:d4:c0:9e:37:7a:09:7f:ba: 95:a0:24:f3:cf:90:6e:1e:64:96:bc:8d:32:9a:59:30:22:e2: fb:c1:49:71:94:a9:4c:da:29:42:ee:04:6c:39:ca:ac:53:27: 5f:51:1f:d2:b8:d0:7a:d1:fe:ba:45:b8:33:65:54:79:0f:d8: ab:21:54:7c:3a:cf:a7:8f:3e:46:7d:07:8c:68:38:9f:33:77: 79:19:7b:32:a6:52:ba:32:dc:73:2e:4d:12:1d:1c:be:a9:b3: 73:3f:97:14:1a:ad:f7:6b:d7:06:9a:3a:99:1b:7f:ba:5e:57: 68:19:27:fd:aa:70:39:57:60:d7:6c:0d:16:95:62:68:f9:72: 2e:38:0c:ff:ef:0b:37:e3:91:30:9f:af:99:b3:9a:8f:b4:4d: 87:92:6e:2f:6e:65:b3:dc:d0:20:5a:e6:85:e3:ff:c9:48:48: d4:f4:90:cd:76:47:c5:2b:f2:f9:fa:62:b4:96:a7:7c:93:fc: 9c:1b:96:23:14:3c:e9:55:af:bc:a1:0b:2e:41:65:d6:33:e8: 94:b5:cb:c4:73:ca:10:c9:39:c4:cd:9d:76:3d:52:fc:41:15: be:14:22:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwNzIyMTgyNzA3WhcNMjYwNzI5MTgyNzA3WjAYMRYwFAYD VQQDEw02YTYxMGI3Yi00NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozf75/L01px7xATHXUdsjW+Wop4HtydAlywQgztqjHUk7Q2yU+dpYlkE2uPM jH5g/D41/Lbj0i3Is3y1WobIobKAuQ9PVeo3QEXiDQ8BzhOmFp9yGV8slECSmHDJ KVAWgzAScNZy6Vb7TRsvM9u8upx9/m3uyggrefU6eko8Gs7uRxGv1rIPHanmGa5X 5RM4a/6JCWKoo/KA5mqQxjfFlSzWHq5BGKl5ojdSxuhuwhikepW+NPF1+1ZL/zag IPkrH3l34PcfLpemeWX1h/JdS8JKNGN3dQ8sDkWEaYNGGNAXm2PMVutX/SYpU/mm +GuZVR3K8EXjIpHaQzqJEK5/TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsl9dEe GgQzc2qzia4+16P9CMnMMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXTKRvDYkTV+u6KqKlJt5pxchsRYqaW63tE3q9TAnjd6CX+6laAk88+Qbh5k lryNMppZMCLi+8FJcZSpTNopQu4EbDnKrFMnX1Ef0rjQetH+ukW4M2VUeQ/YqyFU fDrPp48+Rn0HjGg4nzN3eRl7MqZSujLccy5NEh0cvqmzcz+XFBqt92vXBpo6mRt/ ul5XaBkn/apwOVdg12wNFpViaPlyLjgM/+8LN+ORMJ+vmbOaj7RNh5JuL25ls9zQ IFrmheP/yUhI1PSQzXZHxSvy+fpitJanfJP8nBuWIxQ86VWvvKELLkFl1jPolLXL xHPKEMk5xM2ddj1S/EEVvhQiwQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:37 2026 by rpki-client