$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json) Hash identifier: EtWEGjeIwBqqTbu1FePOt5paCbBqNhIW/UUv5+ciD2U= Subject key identifier: 7D:11:67:86:5C:F1:3F:B2:48:19:B4:59:6D:CF:67:99:B7:FC:49:F6 Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 07:00:14 +0000 Manifest this update: Mon 21 Sep 2026 07:00:14 +0000 Manifest next update: Mon 28 Sep 2026 07:00:14 +0000 Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: 9HglQxH7Q610AAqf36/uAWxwj8dRZe01DwFjqjhSgRE=) 2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Validity Not Before: Sep 21 07:00:14 2026 GMT Not After : Sep 28 07:00:14 2026 GMT Subject: CN=6ab0d5fe-3d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:ae:28:f7:60:65:fc:71:6f:da:fb:3a:b0: 18:fb:f5:a3:df:94:a2:14:7f:f8:ac:30:48:4d:31: 36:6e:80:69:5f:2d:47:b8:2a:da:f4:ae:84:eb:ad: 5b:2c:8d:ed:aa:96:68:fc:7d:b5:27:2f:5d:7c:1b: 51:3e:a5:2e:dd:95:13:90:cb:d3:10:f8:0e:91:97: 63:26:ea:45:8f:76:45:d0:de:cb:e0:7c:bb:16:0c: 43:09:db:a0:df:ce:09:06:2b:eb:fd:77:6b:70:b6: 03:61:37:d0:d9:47:d3:2c:fb:14:42:7d:83:92:89: aa:02:3d:fa:17:33:90:50:ca:fd:51:a9:40:6b:9d: d9:46:99:fd:0d:e6:cb:df:e2:0d:80:8e:dc:c0:30: eb:3c:cd:90:ba:d0:17:e9:20:36:61:35:48:4d:b1: a0:80:f9:5e:e1:93:9a:ac:98:98:29:e7:bd:81:6e: 5e:41:6d:f5:f6:64:4b:d8:d0:b0:c9:09:10:73:1a: 8d:dd:3a:c3:c0:76:0a:9b:69:e6:d9:54:95:83:47: 63:e6:c7:93:e2:42:42:4e:00:a7:97:9e:88:db:3b: 99:be:11:10:e5:71:67:fe:49:8f:74:85:00:42:38: 3d:37:f9:ad:4c:9f:73:da:21:a5:47:eb:2f:bc:09: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:11:67:86:5C:F1:3F:B2:48:19:B4:59:6D:CF:67:99:B7:FC:49:F6 X509v3 Authority Key Identifier: keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:c2:8a:ee:ee:c6:f4:39:63:f8:0b:9f:8c:40:c4:27:8f: 5f:0d:f3:a9:e0:4d:37:ab:04:9c:97:11:68:31:14:4d:f0:fe: b9:6f:d4:71:55:83:4b:74:fe:f5:7d:7a:e2:03:5a:b5:fe:c0: 48:35:00:93:bf:4c:33:e9:4f:eb:be:cb:61:6c:12:a1:b4:8f: 3f:7e:06:10:c6:f6:28:87:15:c2:80:54:a8:2c:e8:91:2f:64: e7:1c:5f:d9:ef:79:e4:41:70:73:5f:8b:9a:15:54:1a:c5:f3: 00:43:99:81:77:52:f4:5f:36:96:a6:53:dd:7c:5b:75:c7:83: c8:31:7b:c9:f4:01:1b:fe:38:2d:ce:62:00:36:d0:bd:dd:80: 3d:0a:fe:ff:b0:3e:b1:02:3b:f3:f8:db:02:23:5f:6a:d5:26: 66:fa:d0:75:b8:16:ac:fd:68:06:1b:d3:36:ee:cf:79:7d:ae: c8:8b:f1:d6:8f:7d:7a:ee:bb:d0:d9:7a:f2:67:18:4a:3b:6d: 44:57:1d:52:eb:16:a8:76:13:25:72:3a:3d:9f:92:8e:56:eb: c5:f9:af:e4:9c:dc:05:7d:ef:29:0b:c6:b3:ec:23:2a:c2:2b: 90:d9:a3:51:09:30:a7:af:ad:21:1b:72:bd:d0:9b:87:12:f5: 61:58:5f:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZCQTkxMTAvBgNVBAUTKDA0NTlCQkY3Q0I4NEMxN0VFRDUxQjY4Q0VBRDk0MTk1 N0Q3ODVGQUYwHhcNMjYwOTIxMDcwMDE0WhcNMjYwOTI4MDcwMDE0WjAYMRYwFAYD VQQDEw02YWIwZDVmZS0zZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwOuKPdgZfxxb9r7OrAY+/Wj35SiFH/4rDBITTE2boBpXy1HuCra9K6E661b LI3tqpZo/H21Jy9dfBtRPqUu3ZUTkMvTEPgOkZdjJupFj3ZF0N7L4Hy7FgxDCdug 384JBivr/XdrcLYDYTfQ2UfTLPsUQn2DkomqAj36FzOQUMr9UalAa53ZRpn9DebL 3+INgI7cwDDrPM2QutAX6SA2YTVITbGggPle4ZOarJiYKee9gW5eQW319mRL2NCw yQkQcxqN3TrDwHYKm2nm2VSVg0dj5seT4kJCTgCnl56I2zuZvhEQ5XFn/kmPdIUA Qjg9N/mtTJ9z2iGlR+svvAkmDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0RZ4Zc 8T+ySBm0WW3PZ5m3/En2MB8GA1UdIwQYMBaAFARZu/fLhMF+7VG2jOrZQZV9eF+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkJBOS81NzMwMTU5QUE3 NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdYN3RVYmFNNnRsQmxYMTRY NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JGbTc5OHVFd1g3dFViYU02dGxCbFgxNFg2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkJBOS81NzMwMTU5QUE3NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdY N3RVYmFNNnRsQmxYMTRYNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIe7Ciu7uxvQ5Y/gLn4xAxCePXw3zqeBNN6sEnJcRaDEUTfD+uW/UcVWDS3T+ 9X164gNatf7ASDUAk79MM+lP677LYWwSobSPP34GEMb2KIcVwoBUqCzokS9k5xxf 2e955EFwc1+LmhVUGsXzAEOZgXdS9F82lqZT3XxbdceDyDF7yfQBG/44Lc5iADbQ vd2APQr+/7A+sQI78/jbAiNfatUmZvrQdbgWrP1oBhvTNu7PeX2uyIvx1o99eu67 0Nl68mcYSjttRFcdUusWqHYTJXI6PZ+Sjlbrxfmv5JzcBX3vKQvGs+wjKsIrkNmj UQkwp6+tIRtyvdCbhxL1YVhfkQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:23:42 2026 by rpki-client