$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: h1t1MU8UPqvapHiSg9L3u2YQIhw4rnmFSsRvOb0lIxI= Subject key identifier: 9A:89:66:EE:6D:1B:42:3A:93:80:2A:F1:FF:AB:5F:27:1E:C8:E6:0A Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 033E Signing time: Mon 05 Oct 2026 01:00:02 +0000 Manifest this update: Mon 05 Oct 2026 01:00:01 +0000 Manifest next update: Mon 12 Oct 2026 01:00:01 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: aEZrm7HPIfDWOjUBeZTZPQ44wHMvWIxMGPxIQXAByvE=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Oct 5 01:00:01 2026 GMT Not After : Oct 12 01:00:01 2026 GMT Subject: CN=6ac2f691-a138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:40:54:58:01:2c:96:08:fb:c7:34:82:1d: d3:d9:fb:1b:67:d2:0c:4e:44:74:d5:e0:e0:ac:be: db:73:cc:41:60:11:64:b0:7b:d7:da:27:a9:c9:78: a0:9f:3c:86:82:47:29:d0:a3:01:e3:47:7f:a3:27: 7c:9b:e1:78:88:d5:50:4c:cf:66:41:d0:a8:3e:cd: 71:65:92:d2:14:ae:c9:9d:31:13:d3:73:25:da:87: fd:bd:99:48:c8:da:f1:ea:5a:b7:e6:14:57:c1:bc: 72:0d:a0:78:fa:93:b2:8a:f0:88:13:40:3b:06:73: 86:2d:9b:77:23:d9:ae:71:30:20:27:73:3b:76:3f: 7f:96:ed:da:9c:c4:f8:fd:bf:3b:d3:4d:25:39:ff: ce:2c:df:71:8e:85:86:d8:61:ea:3e:2e:48:45:2e: 63:a2:1d:80:82:da:6e:54:93:8d:53:0b:25:af:d7: 68:b3:67:f2:9f:eb:dd:cb:19:4f:93:e4:22:19:4e: 4b:39:9f:9a:7b:ad:6e:61:c1:53:82:24:38:cc:8d: 74:2e:4f:16:ba:f5:39:d3:97:17:b1:53:42:c2:71: 2d:6c:db:2d:5b:03:8e:9b:23:1e:f5:be:a3:9c:b8: 8e:4f:95:d5:bb:a8:04:24:50:c3:e6:eb:a6:0d:12: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:89:66:EE:6D:1B:42:3A:93:80:2A:F1:FF:AB:5F:27:1E:C8:E6:0A X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:11:0b:36:f3:41:0b:e2:00:4f:ad:27:bd:20:62:d5:3b:d5: 6e:c3:6b:bd:8f:1f:c0:9f:6b:24:af:2d:2e:f4:fd:ab:f4:ce: 42:e5:a3:eb:cb:dc:e0:f0:83:2f:6e:8a:41:af:c2:f9:9e:8b: 28:d2:d9:e1:d4:cf:c6:96:0c:46:ca:6c:15:1a:bc:e0:c0:b0: 4b:2c:c0:fd:5f:0b:6e:97:f3:9c:9b:bc:57:d3:24:1c:eb:eb: 9b:08:da:0d:a3:dd:66:d0:62:c5:8a:ad:75:52:96:0c:75:ff: 6a:f9:89:70:82:9d:8f:f2:0d:f7:9c:da:8a:0c:0e:73:1a:23: 2a:cb:6b:47:4b:e8:e1:e5:86:8d:e6:ef:92:14:eb:72:81:4e: b2:6e:0e:4f:59:f4:9b:30:6e:be:3a:58:7e:6a:d4:62:34:06: 1a:d7:89:98:b1:9e:d3:23:26:b1:82:62:10:81:8b:e8:7f:6d: ca:99:7c:71:11:51:ac:d7:66:6b:64:49:1d:92:01:38:9b:24: 2a:ca:c0:49:1b:91:3a:67:f7:af:a2:fa:a4:25:fc:12:19:9c: 7d:9c:9c:6a:40:ee:b4:6e:6c:a7:5f:2e:01:13:64:33:70:22: 5b:61:e2:5b:0b:eb:28:12:8f:d2:3a:1c:cd:5b:f5:ad:1c:f6: 0f:ce:5f:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjYxMDA1MDEwMDAxWhcNMjYxMDEyMDEwMDAxWjAYMRYwFAYD VQQDEw02YWMyZjY5MS1hMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6w9AVFgBLJYI+8c0gh3T2fsbZ9IMTkR01eDgrL7bc8xBYBFksHvX2iepyXig nzyGgkcp0KMB40d/oyd8m+F4iNVQTM9mQdCoPs1xZZLSFK7JnTET03Ml2of9vZlI yNrx6lq35hRXwbxyDaB4+pOyivCIE0A7BnOGLZt3I9mucTAgJ3M7dj9/lu3anMT4 /b87000lOf/OLN9xjoWG2GHqPi5IRS5joh2AgtpuVJONUwslr9dos2fyn+vdyxlP k+QiGU5LOZ+ae61uYcFTgiQ4zI10Lk8WuvU505cXsVNCwnEtbNstWwOOmyMe9b6j nLiOT5XVu6gEJFDD5uumDRJLxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqJZu5t G0I6k4Aq8f+rXyceyOYKMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuxELNvNBC+IAT60nvSBi1TvVbsNrvY8fwJ9rJK8tLvT9q/TOQuWj68vc4PCD L26KQa/C+Z6LKNLZ4dTPxpYMRspsFRq84MCwSyzA/V8LbpfznJu8V9MkHOvrmwja DaPdZtBixYqtdVKWDHX/avmJcIKdj/IN95zaigwOcxojKstrR0vo4eWGjebvkhTr coFOsm4OT1n0mzBuvjpYfmrUYjQGGteJmLGe0yMmsYJiEIGL6H9typl8cRFRrNdm a2RJHZIBOJskKsrASRuROmf3r6L6pCX8EhmcfZycakDutG5sp18uARNkM3AiW2Hi WwvrKBKP0joczVv1rRz2D85fuQ== -----END CERTIFICATE-----Generated at Tue Oct 6 22:52:56 2026 by rpki-client