$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: /LCV9usHqNgVXkEgUFpySMMdBkYwBaN2gAcW0VcdRZM= Subject key identifier: CB:3C:D7:BA:0F:8E:5F:C9:19:38:03:FA:29:86:C3:E2:71:44:5F:63 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 0135 Signing time: Wed 23 Sep 2026 05:26:53 +0000 Manifest this update: Wed 23 Sep 2026 05:26:52 +0000 Manifest next update: Wed 30 Sep 2026 05:26:52 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: ZnVFU9AQHD0aY6/3J0lTYzOsD9X6e6T/XXO4cIDcwjw=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Sep 23 05:26:52 2026 GMT Not After : Sep 30 05:26:52 2026 GMT Subject: CN=6ab3631d-4f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:12:af:90:2b:03:ab:b2:b0:fc:ea:db:2c: c1:8e:c8:9c:81:66:95:d8:49:f0:61:9a:64:eb:83: 9d:a5:50:3b:7f:a0:fa:09:cb:97:0b:37:b3:8d:a2: 81:91:b9:e7:27:c9:92:4c:2c:2d:a8:23:ce:d1:47: 04:a2:7b:0a:2f:fb:01:0a:f6:b5:fd:62:d6:14:e9: f0:eb:12:10:d1:ec:1e:19:bb:b6:da:71:22:1a:6e: e8:8f:d3:24:2b:bd:9f:71:fc:73:d4:f6:e9:49:4e: 0c:54:e2:c6:13:2e:5b:e8:d5:ea:2f:42:30:dd:4c: 66:30:62:60:bc:8a:78:50:16:f5:16:83:a5:4c:a1: ae:a8:8c:1f:6b:35:16:2a:14:c2:ca:e3:31:f0:73: 65:6c:43:1e:0f:ac:2f:71:01:d2:a2:df:c0:60:c0: 41:54:2c:49:6e:6f:9a:21:eb:fa:79:32:04:5a:63: 4b:ec:d6:70:89:c8:80:e8:f8:52:2a:e0:30:67:53: 38:96:01:31:bd:ba:16:93:dc:62:99:07:26:24:05: 55:62:fa:86:c2:7a:d1:70:b2:c7:74:77:a6:cc:1b: d2:30:9d:62:3e:db:c3:cf:57:c7:e8:02:e6:b8:9e: f0:13:e2:49:6f:f6:e4:76:30:0a:d3:55:40:83:a6: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3C:D7:BA:0F:8E:5F:C9:19:38:03:FA:29:86:C3:E2:71:44:5F:63 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2d:d6:40:0e:c8:bd:66:24:98:e5:45:11:45:60:0f:d8:4e: 6f:24:0f:6f:b8:a2:8c:48:fa:6e:8f:cd:51:92:70:28:54:7c: 16:6d:6e:75:10:01:ee:5b:6b:a5:2c:46:41:0f:31:73:ab:c0: 15:11:65:e3:c4:08:a3:98:d6:2c:77:c3:7a:8b:5d:77:e7:b5: 0e:78:1e:9b:d8:28:b3:f3:10:b1:78:8a:14:a0:8b:d5:b8:d4: a0:4e:31:08:df:f3:0e:40:6b:6c:43:d9:ec:7a:72:54:c6:1b: d1:05:15:d5:d1:c6:f2:40:01:8f:1f:f3:d9:03:73:23:cd:1e: 17:95:66:c6:dc:18:28:8e:e8:cc:9e:b4:81:24:79:6d:19:61: 3e:16:93:a8:25:36:02:07:75:31:bb:10:5f:ab:db:65:d9:9b: df:29:76:3f:1b:a2:84:cc:29:7e:b2:41:bd:3b:59:81:c3:aa: 7e:99:e2:d5:1e:c8:13:df:b5:e6:0f:11:f0:cc:09:4d:b5:1a: e6:06:ea:b7:b5:78:f7:6a:c1:29:e8:da:f9:f0:e8:78:c1:b8: 18:ae:ad:25:2a:05:46:13:38:7f:e2:61:ea:d8:67:78:60:55: 34:47:9c:dd:d5:c4:ec:ed:21:e3:13:ac:11:26:a7:61:d2:ca: f1:86:94:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwOTIzMDUyNjUyWhcNMjYwOTMwMDUyNjUyWjAYMRYwFAYD VQQDEw02YWIzNjMxZC00ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmgSr5ArA6uysPzq2yzBjsicgWaV2EnwYZpk64OdpVA7f6D6CcuXCzezjaKB kbnnJ8mSTCwtqCPO0UcEonsKL/sBCva1/WLWFOnw6xIQ0eweGbu22nEiGm7oj9Mk K72fcfxz1PbpSU4MVOLGEy5b6NXqL0Iw3UxmMGJgvIp4UBb1FoOlTKGuqIwfazUW KhTCyuMx8HNlbEMeD6wvcQHSot/AYMBBVCxJbm+aIev6eTIEWmNL7NZwiciA6PhS KuAwZ1M4lgExvboWk9ximQcmJAVVYvqGwnrRcLLHdHemzBvSMJ1iPtvDz1fH6ALm uJ7wE+JJb/bkdjAK01VAg6a9nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMs817oP jl/JGTgD+imGw+JxRF9jMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMi3WQA7IvWYkmOVFEUVgD9hObyQPb7iijEj6bo/NUZJwKFR8Fm1udRAB7ltr pSxGQQ8xc6vAFRFl48QIo5jWLHfDeotdd+e1Dngem9gos/MQsXiKFKCL1bjUoE4x CN/zDkBrbEPZ7HpyVMYb0QUV1dHG8kABjx/z2QNzI80eF5VmxtwYKI7ozJ60gSR5 bRlhPhaTqCU2Agd1MbsQX6vbZdmb3yl2PxuihMwpfrJBvTtZgcOqfpni1R7IE9+1 5g8R8MwJTbUa5gbqt7V492rBKeja+fDoeMG4GK6tJSoFRhM4f+Jh6thneGBVNEec 3dXE7O0h4xOsESanYdLK8YaU6A== -----END CERTIFICATE-----Generated at Thu Sep 24 22:18:24 2026 by rpki-client