$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft File: bKwrcgiF6COCTBln7fw2Psh0do0.mft (raw, json) Hash identifier: sdbqT8gaGg2ybsTROn0pgGuIIY6P/iULcwvbYzFFW2k= Subject key identifier: 73:31:B2:1B:C9:37:13:43:E3:AD:60:8F:66:7C:52:F9:12:34:00:44 Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft Manifest number: 0542 Signing time: Tue 22 Sep 2026 23:08:55 +0000 Manifest this update: Tue 22 Sep 2026 23:08:54 +0000 Manifest next update: Tue 29 Sep 2026 23:08:54 +0000 Files and hashes: 1: bKwrcgiF6COCTBln7fw2Psh0do0.crl (hash: L8BqN+Q3PWmEGi4PnwF48EGo+FsLTZwIEhOg0K6v2+c=) 2: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (hash: +cG95cMT4bOP7gonlzVBmEDm9qPAdHE8HAO4W9Qjhh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BA2, serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Validity Not Before: Sep 22 23:08:54 2026 GMT Not After : Sep 29 23:08:54 2026 GMT Subject: CN=6ab30a86-19b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:6d:7b:0a:06:12:89:40:fd:c4:38:0d:f0: 72:3f:e9:13:19:6a:c9:b9:f2:a1:7a:20:24:f4:49: 71:99:9d:2d:11:b6:61:75:f3:a9:8d:96:5e:1f:a3: b0:3e:1a:ab:1f:0a:b1:44:98:e9:35:22:d7:e3:1c: bb:b5:2e:a8:b9:79:dd:a0:f2:e5:8a:a3:7d:e1:56: 42:d6:43:14:ed:29:de:a2:f1:83:27:e1:11:03:03: bc:9c:c2:ba:94:2d:f5:b4:30:21:73:63:72:ab:ed: 0b:84:c6:fe:f7:55:8e:a2:88:64:6e:97:a3:26:a4: 3f:59:e0:10:c4:0d:08:63:e8:78:a8:f3:8c:eb:c0: 8e:ea:d4:29:3d:24:24:62:82:d3:c0:a2:91:86:ea: f7:6c:fb:e6:d2:b4:35:79:b5:5b:8c:48:c8:58:7b: 56:d7:13:f1:8b:44:7a:35:62:67:dd:01:3d:b1:6c: d8:ce:d7:2c:58:eb:9f:f3:27:f3:d2:9d:80:b6:5c: dc:d2:08:ac:c5:15:cb:ac:a0:64:c3:65:e2:66:85: cc:53:03:2f:87:0d:f0:ad:10:fd:ad:f9:a8:17:77: ba:96:ad:0b:bb:bc:2a:2a:6c:9a:4b:44:61:86:9d: 33:1e:0f:60:e4:53:77:4b:a4:88:e8:63:c5:a1:d5: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:B2:1B:C9:37:13:43:E3:AD:60:8F:66:7C:52:F9:12:34:00:44 X509v3 Authority Key Identifier: keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:59:39:2f:46:a6:61:ea:d7:38:61:a7:db:e6:79:af:69:aa: 50:36:de:bf:14:1a:83:7f:0f:e8:91:f9:c5:c5:ef:3c:fd:52: 95:f2:50:12:5c:01:ed:7d:e1:75:ff:af:e6:89:5e:94:e1:b3: a0:78:89:94:a2:b2:f7:5d:bc:98:72:47:95:15:02:ac:aa:4a: 5f:bf:e8:e2:ee:f8:15:da:4b:80:a7:9a:a5:f7:35:33:d2:d5: 01:5d:5c:29:54:ed:f9:2b:42:aa:b4:14:58:79:d2:c2:b1:cd: d9:67:57:7f:11:f9:22:fc:7b:e6:7f:b7:42:5b:aa:f7:23:d6: 2c:8f:b1:35:cb:86:f7:a8:de:7e:c0:6d:da:0c:60:d5:12:e8: 77:e1:1b:94:06:c9:29:42:b6:7c:50:cc:f5:d1:31:31:1e:f3: e1:b4:78:de:6a:da:71:94:3a:b9:db:ed:11:2e:c1:83:24:60: 4d:16:29:88:f8:6d:a5:80:15:04:dd:7c:c6:5e:2d:1f:38:d0: c4:4a:88:55:a0:08:77:a2:62:91:82:ae:36:b9:10:0c:ba:ca: e3:73:77:1e:77:49:ea:97:21:89:f9:bb:cc:f2:71:1a:76:d8: 0a:0f:15:df:d4:4c:0d:45:48:93:71:a6:de:e8:a9:4a:7a:11: d5:b3:ab:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCQTIxMTAvBgNVBAUTKDZDQUMyQjcyMDg4NUU4MjM4MjRDMTk2N0VERkMzNjNF Qzg3NDc2OEQwHhcNMjYwOTIyMjMwODU0WhcNMjYwOTI5MjMwODU0WjAYMRYwFAYD VQQDEw02YWIzMGE4Ni0xOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdptewoGEolA/cQ4DfByP+kTGWrJufKheiAk9ElxmZ0tEbZhdfOpjZZeH6Ow PhqrHwqxRJjpNSLX4xy7tS6ouXndoPLliqN94VZC1kMU7SneovGDJ+ERAwO8nMK6 lC31tDAhc2Nyq+0LhMb+91WOoohkbpejJqQ/WeAQxA0IY+h4qPOM68CO6tQpPSQk YoLTwKKRhur3bPvm0rQ1ebVbjEjIWHtW1xPxi0R6NWJn3QE9sWzYztcsWOuf8yfz 0p2Atlzc0gisxRXLrKBkw2XiZoXMUwMvhw3wrRD9rfmoF3e6lq0Lu7wqKmyaS0Rh hp0zHg9g5FN3S6SI6GPFodU4aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMxshvJ NxND461gj2Z8UvkSNABEMB8GA1UdIwQYMBaAFGysK3IIhegjgkwZZ+38Nj7IdHaN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJBMi8xNEZFQzJFQzU3 OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZDT0NUQmxuN2Z3MlBzaDBk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLd3JjZ2lGNkNPQ1RCbG43ZncyUHNoMGRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJBMi8xNEZFQzJFQzU3OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZD T0NUQmxuN2Z3MlBzaDBkbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVk5L0amYerXOGGn2+Z5r2mqUDbevxQag38P6JH5xcXvPP1SlfJQElwB7X3h df+v5olelOGzoHiJlKKy9128mHJHlRUCrKpKX7/o4u74FdpLgKeapfc1M9LVAV1c KVTt+StCqrQUWHnSwrHN2WdXfxH5Ivx75n+3Qluq9yPWLI+xNcuG96jefsBt2gxg 1RLod+EblAbJKUK2fFDM9dExMR7z4bR43mracZQ6udvtES7BgyRgTRYpiPhtpYAV BN18xl4tHzjQxEqIVaAId6JikYKuNrkQDLrK43N3HndJ6pchifm7zPJxGnbYCg8V 39RMDUVIk3Gm3uipSnoR1bOrdw== -----END CERTIFICATE-----Generated at Wed Sep 23 03:27:02 2026 by rpki-client