$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json) Hash identifier: ydkluRTlqVR+ZNlPdSMoscRZSaismwJHbPct0umX38s= Subject key identifier: 4B:0F:8E:7C:24:27:10:3C:82:2E:4F:88:C3:E7:26:92:EE:E1:C1:57 Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft Manifest number: 95 Signing time: Thu 23 Jul 2026 09:17:25 +0000 Manifest this update: Thu 23 Jul 2026 09:17:24 +0000 Manifest next update: Thu 30 Jul 2026 09:17:24 +0000 Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: udtJSV1JmvL3vMHt7/6DPz7V+KbdMmnH0RrsqR9Nk1c=) 2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Validity Not Before: Jul 23 09:17:24 2026 GMT Not After : Jul 30 09:17:24 2026 GMT Subject: CN=6a61dc25-ef0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:01:f6:f5:6a:b8:49:92:2f:b1:89:ef:44: 23:d3:d1:bf:21:7b:0e:34:a4:6d:17:83:00:ad:87: 0c:1b:ef:49:78:9b:31:20:0a:2d:c6:30:87:62:43: 3b:7d:39:5e:82:d6:45:b4:a8:11:3e:34:fc:f8:7e: 9c:20:87:76:0c:60:cc:56:d6:38:a6:ee:4a:29:ea: 88:85:bd:6d:67:03:c1:88:7d:b3:c3:d0:cc:d3:29: 82:a2:61:3e:d2:3c:f6:0c:d4:3b:dd:b5:80:32:58: da:19:da:ce:22:d1:8c:45:9c:a3:6a:78:7b:6e:79: b2:b6:e8:c7:24:6e:4e:cb:4a:a8:65:45:70:d9:ab: 43:31:42:30:54:0c:37:b8:44:19:eb:fa:79:24:06: a6:43:7c:a2:23:40:b4:72:f8:2c:ec:19:a0:b0:81: cb:4a:66:ef:fe:02:b2:36:d3:cd:12:ba:8a:d2:55: 6d:57:c5:08:e5:3d:02:84:d8:30:1e:1b:7b:19:f3: 2e:84:dd:89:18:29:91:d5:d9:3b:e7:65:f1:fe:12: 04:91:8f:81:93:92:7c:7a:34:63:09:62:ab:40:5e: 9c:3a:a4:9b:4d:a0:75:73:10:da:46:5a:98:bd:6d: 9d:69:f1:dc:fb:8e:b9:e7:08:83:c2:61:ab:06:26: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0F:8E:7C:24:27:10:3C:82:2E:4F:88:C3:E7:26:92:EE:E1:C1:57 X509v3 Authority Key Identifier: keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:26:f5:8b:9a:f4:12:e7:96:8b:49:19:e6:0d:e4:aa:1f:b4: e2:8d:af:a7:6f:42:05:96:8b:74:6f:8f:8c:c1:1d:42:35:17: 3c:ec:b9:4d:82:9a:56:38:14:4c:c1:b8:8c:9e:eb:fa:5c:e2: 1a:a2:31:34:24:c6:69:13:7e:f1:23:02:13:fe:7b:3e:76:42: a9:a6:2f:ab:ef:a3:6e:1a:95:a7:ff:b2:65:7e:6b:5b:a8:9e: 66:8d:82:cd:ea:e0:a0:ad:3b:c9:19:8f:81:99:7b:8f:20:6d: 3c:73:7a:ea:b6:9b:ec:58:dd:7d:1c:88:79:93:e0:5b:94:2e: 17:cb:11:e7:09:cc:c7:37:45:38:36:50:83:9b:25:69:73:69: a5:29:79:f3:9a:12:0a:65:36:03:46:d3:3e:00:56:19:aa:4c: d8:ac:0f:2e:49:17:78:39:cd:05:a4:40:5b:9d:ec:75:35:83: 4f:54:41:2b:47:32:d0:ae:df:1d:9a:12:3c:ec:49:e2:90:69: b2:d6:20:39:63:5e:74:0d:b7:6a:02:3d:7b:0a:ce:3a:19:8e: d3:b8:66:41:c7:1f:fa:a2:f1:4f:f3:59:b1:80:85:fd:56:64: 73:97:b7:55:74:35:bc:ef:23:34:6b:0c:73:ee:cf:40:09:b8: a1:bb:78:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZCQTkxMTAvBgNVBAUTKDA0NTlCQkY3Q0I4NEMxN0VFRDUxQjY4Q0VBRDk0MTk1 N0Q3ODVGQUYwHhcNMjYwNzIzMDkxNzI0WhcNMjYwNzMwMDkxNzI0WjAYMRYwFAYD VQQDEw02YTYxZGMyNS1lZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QAB9vVquEmSL7GJ70Qj09G/IXsONKRtF4MArYcMG+9JeJsxIAotxjCHYkM7 fTlegtZFtKgRPjT8+H6cIId2DGDMVtY4pu5KKeqIhb1tZwPBiH2zw9DM0ymComE+ 0jz2DNQ73bWAMljaGdrOItGMRZyjanh7bnmytujHJG5Oy0qoZUVw2atDMUIwVAw3 uEQZ6/p5JAamQ3yiI0C0cvgs7BmgsIHLSmbv/gKyNtPNErqK0lVtV8UI5T0ChNgw Hht7GfMuhN2JGCmR1dk752Xx/hIEkY+Bk5J8ejRjCWKrQF6cOqSbTaB1cxDaRlqY vW2dafHc+4655wiDwmGrBiZ+bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsPjnwk JxA8gi5PiMPnJpLu4cFXMB8GA1UdIwQYMBaAFARZu/fLhMF+7VG2jOrZQZV9eF+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkJBOS81NzMwMTU5QUE3 NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdYN3RVYmFNNnRsQmxYMTRY NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JGbTc5OHVFd1g3dFViYU02dGxCbFgxNFg2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkJBOS81NzMwMTU5QUE3NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdY N3RVYmFNNnRsQmxYMTRYNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApyb1i5r0EueWi0kZ5g3kqh+04o2vp29CBZaLdG+PjMEdQjUXPOy5TYKaVjgU TMG4jJ7r+lziGqIxNCTGaRN+8SMCE/57PnZCqaYvq++jbhqVp/+yZX5rW6ieZo2C zergoK07yRmPgZl7jyBtPHN66rab7FjdfRyIeZPgW5QuF8sR5wnMxzdFODZQg5sl aXNppSl585oSCmU2A0bTPgBWGapM2KwPLkkXeDnNBaRAW53sdTWDT1RBK0cy0K7f HZoSPOxJ4pBpstYgOWNedA23agI9ewrOOhmO07hmQccf+qLxT/NZsYCF/VZkc5e3 VXQ1vO8jNGsMc+7PQAm4obt4qg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:56:27 2026 by rpki-client