$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: J3bbl38TCxh0EFb5UiY7NapUDdJlWW6k3jIfTWTF/70= Subject key identifier: 9E:C6:99:D8:7C:57:10:7E:6B:D9:D5:75:8B:2A:64:DF:EB:21:E3:DB Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 0142 Signing time: Fri 09 Oct 2026 06:04:36 +0000 Manifest this update: Fri 09 Oct 2026 06:04:35 +0000 Manifest next update: Fri 16 Oct 2026 06:04:35 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: jiGpj6Ou+e2B7e3N5gXn4IVK8tei7rrIC/XnEt77OZ0=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Oct 9 06:04:35 2026 GMT Not After : Oct 16 06:04:35 2026 GMT Subject: CN=6ac883f4-1004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:42:24:46:32:d5:ff:23:4f:57:3f:ce:c3: ae:ac:34:d7:38:1e:2b:23:33:72:97:d1:ef:66:07: 14:48:2c:79:e8:1c:fd:74:ef:4f:53:2c:8d:26:c7: d9:82:45:fa:fa:de:12:d7:86:c3:b4:2f:f0:37:13: 8a:dc:83:7d:6f:7d:60:f4:ff:76:92:ad:65:bf:e4: fa:92:29:35:31:b9:74:3e:e0:f0:ee:13:66:84:86: 2f:73:a0:36:d3:2c:cc:6a:d5:8d:42:00:ee:66:c9: 84:f3:92:00:9e:bf:a0:5f:cd:d7:10:f6:bf:63:5b: 7a:b7:d3:02:dc:dd:f9:34:fb:6a:a9:60:d6:d9:5c: 77:9f:9a:e3:54:db:2d:1e:ba:ae:73:dc:27:92:97: 8c:89:95:0c:b2:4a:90:cc:d2:d4:c8:0b:07:4e:0e: c1:a1:af:7e:84:2c:66:06:ee:e2:c5:a7:50:93:b8: 84:3c:dd:c8:6d:b2:a5:cf:b6:f1:d1:c0:5b:bd:b1: ac:28:b1:1e:48:6c:6e:92:29:c4:35:60:b9:57:78: f7:d4:72:c1:2d:07:4a:a4:65:f0:46:7f:45:0d:0f: 1b:d7:aa:1b:09:90:19:09:88:0f:3f:8e:16:aa:7c: 0a:61:b2:82:3d:b3:5c:f2:a7:02:e2:ea:c0:88:2f: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:99:D8:7C:57:10:7E:6B:D9:D5:75:8B:2A:64:DF:EB:21:E3:DB X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:98:6d:52:9b:ee:a2:50:c4:8a:a3:21:ea:b5:07:a9:49: 99:84:19:9c:fd:38:a9:c2:d7:3b:37:e2:5d:05:e5:54:7e:4a: b7:d5:06:14:a5:19:15:b7:0b:93:3c:3d:75:3a:78:24:03:06: 38:94:65:ad:a8:cc:96:b4:e5:24:68:53:a1:f0:13:fc:df:7b: 9f:e9:96:a1:29:57:3f:52:f4:31:86:a9:aa:45:3b:75:4d:4b: 15:1d:33:4b:20:d6:23:7a:ac:37:bd:9c:f9:04:eb:b8:78:43: 45:56:85:89:11:65:42:dc:0d:01:a2:7c:98:af:24:3a:84:58: de:0d:74:c3:ad:8f:a5:c9:8e:f0:d7:b9:e2:b8:55:8e:4d:27: 36:26:c3:46:9d:f3:ce:70:44:d9:ed:71:a9:db:43:2c:0b:90: 48:9a:b7:34:07:63:ec:df:f7:85:76:ae:a7:78:b1:25:1c:6b: 47:32:b3:7b:82:0a:fd:b8:82:51:04:71:fb:43:c9:eb:3c:a2: 26:0d:ac:60:3c:bc:99:17:93:4d:9c:27:8b:01:f7:94:8e:da: 06:f5:98:ea:f9:8d:ce:85:e6:74:4f:2b:42:e6:b3:b4:f4:64: 10:1f:8a:3b:89:d9:03:23:e5:e4:c5:01:72:d4:00:7c:e4:2f: 39:99:16:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjYxMDA5MDYwNDM1WhcNMjYxMDE2MDYwNDM1WjAYMRYwFAYD VQQDEw02YWM4ODNmNC0xMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx79CJEYy1f8jT1c/zsOurDTXOB4rIzNyl9HvZgcUSCx56Bz9dO9PUyyNJsfZ gkX6+t4S14bDtC/wNxOK3IN9b31g9P92kq1lv+T6kik1Mbl0PuDw7hNmhIYvc6A2 0yzMatWNQgDuZsmE85IAnr+gX83XEPa/Y1t6t9MC3N35NPtqqWDW2Vx3n5rjVNst Hrquc9wnkpeMiZUMskqQzNLUyAsHTg7Boa9+hCxmBu7ixadQk7iEPN3IbbKlz7bx 0cBbvbGsKLEeSGxukinENWC5V3j31HLBLQdKpGXwRn9FDQ8b16obCZAZCYgPP44W qnwKYbKCPbNc8qcC4urAiC+a0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7Gmdh8 VxB+a9nVdYsqZN/rIePbMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF c3RsQW05OEg4bFJmNXRDeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0eYbVKb7qJQxIqjIeq1B6lJmYQZnP04qcLXOzfiXQXlVH5Kt9UGFKUZFbcL kzw9dTp4JAMGOJRlrajMlrTlJGhTofAT/N97n+mWoSlXP1L0MYapqkU7dU1LFR0z SyDWI3qsN72c+QTruHhDRVaFiRFlQtwNAaJ8mK8kOoRY3g10w62PpcmO8Ne54rhV jk0nNibDRp3zznBE2e1xqdtDLAuQSJq3NAdj7N/3hXaup3ixJRxrRzKze4IK/biC UQRx+0PJ6zyiJg2sYDy8mReTTZwniwH3lI7aBvWY6vmNzoXmdE8rQuaztPRkEB+K O4nZAyPl5MUBctQAfOQvOZkW0A== -----END CERTIFICATE-----Generated at Fri Oct 9 14:48:25 2026 by rpki-client