$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: tymU2KLp77GG6SggvvTsr5ut0A4aqRDN5OSHSf9/s8g= Subject key identifier: 4C:FF:91:E3:5F:00:39:C3:A3:E7:09:23:0F:C8:CA:15:20:C4:22:EF Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 01B0 Signing time: Wed 23 Sep 2026 03:54:16 +0000 Manifest this update: Wed 23 Sep 2026 03:54:15 +0000 Manifest next update: Wed 30 Sep 2026 03:54:15 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: a4jmwcph9RycINNIP3Mzw8zVoFJFc7Cb9G+OG8KJWwU=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 9L09hQIBaOVE5f616sgiqulORBkTSjHL+znxkwZEmL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Sep 23 03:54:15 2026 GMT Not After : Sep 30 03:54:15 2026 GMT Subject: CN=6ab34d68-928b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:3b:e9:a4:1c:0a:03:51:38:b4:65:b7:20: e9:3d:f1:53:bc:ce:55:5e:74:8f:c1:06:ac:22:2b: 06:8e:44:67:98:e8:13:c9:7f:a5:d4:1c:00:08:04: bf:b5:dd:22:be:24:22:e7:31:56:57:b9:04:d2:fb: e9:fd:6e:99:f7:f4:dc:8d:d3:94:21:07:f8:7d:f3: 90:7d:b8:29:79:dc:61:6a:69:26:59:1f:75:96:f5: 9a:00:26:16:ba:ed:e0:26:7f:d6:8d:87:5e:70:0e: cc:ff:c6:cb:32:56:6a:a5:b7:79:a5:ca:c6:21:ac: e2:8e:1e:44:0f:3b:da:08:ad:01:9e:67:7f:58:bd: a8:eb:ce:51:6c:d4:97:26:dd:28:c3:b5:82:d6:7f: 38:a7:37:96:c4:cb:a2:63:5c:e2:a9:33:1e:de:6c: 1f:11:6a:21:2f:a0:02:ce:f8:ff:d9:82:76:ef:86: 85:b2:36:44:ce:18:7b:d5:bf:c7:7f:1c:9f:f5:fc: 7b:ad:23:b6:68:a6:b8:3a:58:24:72:b9:90:25:40: b6:56:e4:53:94:85:31:3b:c8:56:21:b2:4b:94:0d: bb:69:1b:30:1e:13:cb:f9:7a:cf:60:5e:54:41:0f: 7e:92:22:4d:5f:01:71:17:25:7c:c2:db:06:60:36: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FF:91:E3:5F:00:39:C3:A3:E7:09:23:0F:C8:CA:15:20:C4:22:EF X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e3:1f:59:1d:82:d6:00:d1:88:80:94:b9:02:8a:07:a2:c4: 05:a7:9e:30:5e:8b:5d:60:89:02:ee:31:cc:06:c0:17:32:63: d0:eb:29:e5:06:37:58:e4:ba:3b:61:0b:07:3f:5e:1d:30:3f: c6:26:ae:42:ae:e8:a0:c2:e1:6a:dd:1c:f0:a5:ec:7b:36:a7: e5:c2:8e:21:c8:a9:55:5a:67:e4:25:ba:04:b6:64:cb:c3:12: 37:d0:72:3c:a8:d3:cc:74:ee:92:6c:c4:0d:f0:08:63:04:69: bb:a8:0c:41:95:28:32:4c:5a:61:0c:bd:dc:c8:84:ff:e9:f2: 26:8f:c4:6d:9b:19:de:9f:23:e9:ff:fe:77:84:64:42:f9:a4: 72:20:21:6e:86:7f:c2:e9:41:0a:fd:20:d8:c9:be:01:a7:ae: 8d:d1:6e:ad:f6:43:cf:53:9e:d1:d8:3a:13:c7:bc:c5:34:3b: 2e:d2:1b:e5:0e:0f:75:89:80:35:42:37:66:8e:cc:4d:79:b1: fe:d8:75:fb:91:65:be:95:03:b9:8a:c0:75:0d:4e:8b:6e:e5: 9f:9c:3f:d9:09:67:aa:25:63:fb:5c:8e:ab:b3:75:f5:c1:ff: bf:63:b2:4f:da:e7:1c:7b:e1:21:04:0c:29:81:8a:18:af:80: 03:b6:7a:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwOTIzMDM1NDE1WhcNMjYwOTMwMDM1NDE1WjAYMRYwFAYD VQQDEw02YWIzNGQ2OC05MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqM76aQcCgNROLRltyDpPfFTvM5VXnSPwQasIisGjkRnmOgTyX+l1BwACAS/ td0iviQi5zFWV7kE0vvp/W6Z9/TcjdOUIQf4ffOQfbgpedxhamkmWR91lvWaACYW uu3gJn/WjYdecA7M/8bLMlZqpbd5pcrGIazijh5EDzvaCK0Bnmd/WL2o685RbNSX Jt0ow7WC1n84pzeWxMuiY1ziqTMe3mwfEWohL6ACzvj/2YJ274aFsjZEzhh71b/H fxyf9fx7rSO2aKa4OlgkcrmQJUC2VuRTlIUxO8hWIbJLlA27aRswHhPL+XrPYF5U QQ9+kiJNXwFxFyV8wtsGYDan0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz/keNf ADnDo+cJIw/IyhUgxCLvMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuMfWR2C1gDRiICUuQKKB6LEBaeeMF6LXWCJAu4xzAbAFzJj0Osp5QY3WOS6 O2ELBz9eHTA/xiauQq7ooMLhat0c8KXsezan5cKOIcipVVpn5CW6BLZky8MSN9By PKjTzHTukmzEDfAIYwRpu6gMQZUoMkxaYQy93MiE/+nyJo/EbZsZ3p8j6f/+d4Rk QvmkciAhboZ/wulBCv0g2Mm+AaeujdFurfZDz1Oe0dg6E8e8xTQ7LtIb5Q4PdYmA NUI3Zo7MTXmx/th1+5FlvpUDuYrAdQ1Oi27ln5w/2QlnqiVj+1yOq7N19cH/v2Oy T9rnHHvhIQQMKYGKGK+AA7Z6gw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:41 2026 by rpki-client