$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft File: bmfAks6I_8_-rcHcpibbZyygdeU.mft (raw, json) Hash identifier: Ou35cE8yoF/BVRtPAkHtEXNZ8LYgfft1NS8evNkRfVQ= Subject key identifier: 47:89:35:44:83:BC:06:54:F7:6E:74:E4:4B:A6:71:53:30:81:1C:7E Authority key identifier: 6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 Certificate issuer: /CN=A91E1EC0/serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft Manifest number: 31 Signing time: Wed 23 Sep 2026 08:24:48 +0000 Manifest this update: Wed 23 Sep 2026 08:24:47 +0000 Manifest next update: Wed 30 Sep 2026 08:24:47 +0000 Files and hashes: 1: bmfAks6I_8_-rcHcpibbZyygdeU.crl (hash: ZGGHdpCd5szg/wohjsXJ7uZQuN8yzykRnVFnV6CjVnw=) 2: 333E8C3E6DE511F19EDFEF3F5BA30FBC.roa (hash: Ue3cv5Sg9mqnsZPT5Yk4nejtqsmOyqU5EUN+qBTBPzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC0, serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Validity Not Before: Sep 23 08:24:47 2026 GMT Not After : Sep 30 08:24:47 2026 GMT Subject: CN=6ab38cd0-70b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:32:5d:39:92:70:68:9e:77:07:c5:a3:d8: 0c:eb:99:64:cb:aa:dc:b1:38:d7:3f:36:d9:47:bf: 48:17:1f:dc:7c:3e:89:c0:ad:e2:1f:c3:d0:9b:f2: 24:ee:67:b0:da:8b:2b:71:36:fb:68:fc:71:71:b6: f8:e9:16:95:c2:e4:91:8b:a5:97:87:43:2b:ae:92: b5:3b:8d:10:bd:11:01:40:0e:ee:a8:45:8c:44:41: 7d:69:ce:f9:42:d4:f4:6c:0e:e5:b9:c5:98:c8:3a: f4:c0:0f:6d:aa:23:c7:69:0b:a2:39:50:e0:1c:c9: b5:56:3a:69:07:a3:93:16:b5:96:c6:f8:fd:c0:dc: b1:8a:88:c2:de:0c:55:c7:24:e8:b8:5f:b3:d5:b1: 93:50:97:ab:7e:cc:41:58:d6:e5:2b:e9:2c:ef:a3: f8:68:ff:0a:56:cd:50:62:e6:56:ed:45:e7:85:ae: 48:50:f0:a4:82:ce:24:bf:e3:03:97:79:ef:36:44: b8:a4:ff:c0:ef:b2:34:26:be:53:92:32:00:94:8d: cd:c1:9d:50:e3:0a:13:88:2b:2e:5f:64:74:d0:65: 94:e0:60:96:73:af:16:58:b3:39:03:4b:2d:ae:f0: 1a:9b:73:bc:d1:84:58:c7:0b:27:99:90:a2:26:fd: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:35:44:83:BC:06:54:F7:6E:74:E4:4B:A6:71:53:30:81:1C:7E X509v3 Authority Key Identifier: keyid:6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bf:d4:13:3b:bd:c8:a0:9d:01:d3:2e:f9:ca:d0:12:2f:48: 63:83:fd:36:0f:b1:b7:08:29:78:b9:61:32:2b:9c:18:7b:56: c6:ff:33:8f:b8:3b:06:6f:71:ed:25:60:23:55:b4:8b:d2:86: 23:56:8d:9a:cd:5c:51:9e:da:2d:3f:b9:be:55:96:ff:8f:ed: 82:f2:64:dd:7e:1e:74:ca:13:54:e8:5d:0c:95:f5:0a:70:a1: 0b:73:ac:cb:75:e8:d5:44:4b:0d:51:78:d8:ec:4b:4c:10:d0: f7:02:42:11:18:0b:9b:4c:83:bb:43:43:de:da:91:e1:bd:de: 64:ea:96:c1:f3:88:ba:62:1f:00:d7:9f:78:9e:39:3d:0a:3b: 70:78:7e:76:f6:bc:cb:5c:f6:28:d2:eb:fc:03:35:99:92:3c: 78:df:a1:92:5a:07:04:fe:74:45:f5:3d:1f:7f:4b:24:07:d2: 89:0f:19:83:d2:03:10:b6:7a:20:40:c7:c0:d7:17:76:b0:18: ba:ba:12:a6:b0:ba:31:fd:30:9d:c1:60:2a:3f:30:99:24:69: 65:b7:15:b6:c5:c8:63:83:a4:04:46:46:b4:81:ca:70:4c:98: a3:c4:38:8d:81:d8:99:91:33:06:90:d9:69:ff:d5:c2:3a:4d: 04:f7:62:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDMDExMC8GA1UEBRMoNkU2N0MwOTJDRTg4RkZDRkZFQURDMURDQTYyNkRCNjcy Q0EwNzVFNTAeFw0yNjA5MjMwODI0NDdaFw0yNjA5MzAwODI0NDdaMBgxFjAUBgNV BAMTDTZhYjM4Y2QwLTcwYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJyzJdOZJwaJ53B8Wj2AzrmWTLqtyxONc/NtlHv0gXH9x8PonAreIfw9Cb8iTu Z7DaiytxNvto/HFxtvjpFpXC5JGLpZeHQyuukrU7jRC9EQFADu6oRYxEQX1pzvlC 1PRsDuW5xZjIOvTAD22qI8dpC6I5UOAcybVWOmkHo5MWtZbG+P3A3LGKiMLeDFXH JOi4X7PVsZNQl6t+zEFY1uUr6Szvo/ho/wpWzVBi5lbtReeFrkhQ8KSCziS/4wOX ee82RLik/8DvsjQmvlOSMgCUjc3BnVDjChOIKy5fZHTQZZTgYJZzrxZYszkDSy2u 8Bqbc7zRhFjHCyeZkKIm/Qc9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR4k1RIO8 BlT3bnTkS6ZxUzCBHH4wHwYDVR0jBBgwFoAUbmfAks6I/8/+rcHcpibbZyygdeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0U5MDJDREM0NkRF NDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhfLXJjSGNwaWJiWnl5Z2Rl VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYm1mQWtzNklfOF8tcmNIY3BpYmJaeXlnZGVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUMwL0U5MDJDREM0NkRFNDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhf LXJjSGNwaWJiWnl5Z2RlVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIv9QTO73IoJ0B0y75ytASL0hjg/02D7G3CCl4uWEyK5wYe1bG/zOPuDsGb3Ht JWAjVbSL0oYjVo2azVxRntotP7m+VZb/j+2C8mTdfh50yhNU6F0MlfUKcKELc6zL dejVREsNUXjY7EtMEND3AkIRGAubTIO7Q0Pe2pHhvd5k6pbB84i6Yh8A1594njk9 CjtweH529rzLXPYo0uv8AzWZkjx436GSWgcE/nRF9T0ff0skB9KJDxmD0gMQtnog QMfA1xd2sBi6uhKmsLox/TCdwWAqPzCZJGlltxW2xchjg6QERka0gcpwTJijxDiN gdiZkTMGkNlp/9XCOk0E92LI -----END CERTIFICATE-----Generated at Thu Sep 24 08:18:21 2026 by rpki-client