$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: 4PE3cr34XFtlr3wlLMkNhuYRYwsv6OwcdEEOrAKzJy4= Subject key identifier: 0B:05:8F:99:1F:EA:53:33:C7:F6:8D:9C:F3:6C:3E:40:F6:3B:44:88 Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 1B48 Signing time: Sat 14 Nov 2026 16:41:07 +0000 Manifest this update: Sat 14 Nov 2026 16:41:07 +0000 Manifest next update: Sat 21 Nov 2026 16:41:07 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: 3jzMzrNDMiU1frtoMVJBf/wNL4G3D/MPm0GyiHIaXaw=) 2: BB90B3249BE811F188B60C046311F970.roa (hash: adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=) 3: 5A46B5469BE811F1A1CB396A6211F970.roa (hash: htCWMQwYnAdNrZ7ue5iAAfX45+MA9QIuh6+oV7sF4po=) 4: D3BEF96E9DFB11F186DD6C154711F970.roa (hash: wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Nov 14 16:41:07 2026 GMT Not After : Nov 21 16:41:07 2026 GMT Subject: CN=6af88f23-e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:5b:37:7b:39:79:d0:97:a1:af:01:38:03: 31:4c:db:5f:5c:86:7d:f8:7f:f0:d5:95:46:6f:75: a0:69:9c:20:14:72:40:8b:3d:a6:be:50:5a:d8:b7: 97:e8:43:38:73:77:bb:ce:f1:f8:6e:54:7a:26:19: 61:5b:14:5d:a7:af:54:6f:2d:91:76:9b:ea:40:46: 29:16:ac:31:5a:cc:9e:a5:75:ab:26:48:39:40:af: d5:dd:2d:7b:08:5a:0b:ce:c2:5e:cc:af:79:10:53: 27:ad:bb:58:1a:52:91:30:12:17:85:d0:d1:f5:26: 3c:a7:cf:07:86:fb:57:bf:14:93:d6:7c:18:23:84: dc:84:04:3f:48:6d:e3:38:43:18:27:14:93:2d:17: b1:fe:8b:39:db:2f:f9:75:46:be:eb:7c:70:df:18: 22:dc:16:dc:ff:d8:61:06:0b:ba:5e:5b:64:6a:42: 0c:15:c9:98:8e:fc:f4:77:87:a7:cd:1f:1b:ec:ec: 1f:fe:47:be:e4:d9:df:45:ae:8c:3d:79:31:03:98: 41:91:a2:01:f9:a9:d9:29:99:40:f0:95:09:5b:e1: 81:4f:7a:4c:d5:6e:1f:19:e5:07:cb:44:33:aa:5b: 94:dc:30:d7:91:e2:91:76:50:70:86:c9:e7:54:7d: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:8F:99:1F:EA:53:33:C7:F6:8D:9C:F3:6C:3E:40:F6:3B:44:88 X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:4a:1b:c4:fb:b8:1e:e3:48:79:d4:e1:76:90:a0:e3:4d: 90:ca:2f:8c:18:f8:98:53:d2:c4:9c:18:6e:02:00:a6:38:b2: 46:9d:85:71:af:76:da:22:40:39:94:9b:28:8f:2d:5b:2f:93: 4c:9f:65:1d:9b:c0:f3:81:de:ae:fd:96:8f:27:79:90:f9:73: de:72:48:af:8b:e0:bb:4d:ff:f7:29:4f:84:5c:b5:bd:4d:c8: 6c:3f:76:2d:02:1f:78:5e:33:a7:98:a7:8c:cc:c9:95:45:6c: 98:e2:7b:8c:15:75:34:b0:53:24:82:66:94:8c:cc:41:88:08: 5a:14:53:05:d5:ed:26:fe:57:a2:59:8b:57:f9:95:14:c8:33: 1f:2a:b1:6b:ba:0f:1b:ca:99:3b:3d:ad:1e:11:0d:06:26:85: 8e:d7:5b:52:a4:d6:74:83:65:22:89:f6:4d:2a:0e:35:2f:10: 2a:c6:5b:71:c6:1d:43:14:07:a3:4a:cc:36:55:f4:26:fe:ed: c8:a2:19:df:b7:29:f1:9b:23:2f:f3:46:c0:87:c9:11:54:91: 04:ce:27:10:1e:71:17:18:a8:2d:21:00:1f:df:82:55:5f:f4: 21:d9:89:80:a4:ed:de:e3:5c:c8:fb:01:8a:84:86:f3:08:1a: 83:20:3e:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjYxMTE0MTY0MTA3WhcNMjYxMTIxMTY0MTA3WjAYMRYwFAYD VQQDEw02YWY4OGYyMy1lMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2pbN3s5edCXoa8BOAMxTNtfXIZ9+H/w1ZVGb3WgaZwgFHJAiz2mvlBa2LeX 6EM4c3e7zvH4blR6JhlhWxRdp69Uby2RdpvqQEYpFqwxWsyepXWrJkg5QK/V3S17 CFoLzsJezK95EFMnrbtYGlKRMBIXhdDR9SY8p88HhvtXvxST1nwYI4TchAQ/SG3j OEMYJxSTLRex/os52y/5dUa+63xw3xgi3Bbc/9hhBgu6XltkakIMFcmYjvz0d4en zR8b7Owf/ke+5NnfRa6MPXkxA5hBkaIB+anZKZlA8JUJW+GBT3pM1W4fGeUHy0Qz qluU3DDXkeKRdlBwhsnnVH3z3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsFj5kf 6lMzx/aNnPNsPkD2O0SIMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXllKG8T7uB7jSHnU4XaQoONNkMovjBj4mFPSxJwYbgIApjiyRp2Fca922iJA OZSbKI8tWy+TTJ9lHZvA84Herv2Wjyd5kPlz3nJIr4vgu03/9ylPhFy1vU3IbD92 LQIfeF4zp5injMzJlUVsmOJ7jBV1NLBTJIJmlIzMQYgIWhRTBdXtJv5XolmLV/mV FMgzHyqxa7oPG8qZOz2tHhENBiaFjtdbUqTWdINlIon2TSoONS8QKsZbccYdQxQH o0rMNlX0Jv7tyKIZ37cp8ZsjL/NGwIfJEVSRBM4nEB5xFxioLSEAH9+CVV/0IdmJ gKTt3uNcyPsBioSG8wgagyA+IQ== -----END CERTIFICATE-----Generated at Sun Nov 15 14:26:48 2026 by rpki-client