$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: 01x7DDxIYOlVYW75vsb9w0a16OXToNdzdPc0e/WerGM= Subject key identifier: 87:D8:87:7B:10:12:07:DA:3C:1E:93:9F:86:F1:CA:97:DB:7F:1E:49 Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 05EF Signing time: Sat 26 Sep 2026 23:01:31 +0000 Manifest this update: Sat 26 Sep 2026 23:01:31 +0000 Manifest next update: Sat 03 Oct 2026 23:01:31 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: HV/outQ5Xm/dAHNZAaTKfjD/2xn2/34yaD0ALuLQdXA=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Sep 26 23:01:31 2026 GMT Not After : Oct 3 23:01:31 2026 GMT Subject: CN=6ab84ecb-1f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:c5:4b:d0:e5:f6:47:f0:b7:46:c0:3f:be: b5:83:89:e1:92:84:c8:75:ed:55:7c:9f:cd:0d:23: 4d:c0:90:b7:6b:07:a7:1d:3d:5f:d6:8a:db:9c:43: 26:dc:b8:c3:08:bc:b8:7b:49:ab:58:a7:ef:c6:02: b8:b6:60:c4:96:fd:58:e5:39:75:d7:61:e5:53:61: bb:79:b5:f0:ac:cf:88:c1:f2:25:f0:95:0c:dc:7b: 19:32:b6:ad:e7:38:8d:d6:a7:45:0e:8e:85:b7:ef: 0e:39:71:63:dd:15:cc:58:36:70:e7:6c:e7:3f:02: 2a:bb:73:4e:fc:c4:c8:50:49:c6:42:3b:c8:86:59: cf:73:8f:84:cf:09:a6:e5:43:ce:49:47:05:17:70: ce:ed:65:d0:ca:6e:44:6a:33:d3:7a:b6:5d:4b:db: 5b:f3:dc:1f:8f:03:c3:46:2f:5e:55:60:fa:7e:7d: ca:35:55:56:2c:3c:0c:a4:c3:3f:8e:0a:54:d5:79: 53:b0:6e:c4:bf:41:9f:c5:9c:da:18:1a:a8:2a:40: 00:54:84:f8:bc:53:93:c6:27:3e:f2:41:ae:3f:06: ce:f2:78:00:c2:d4:ab:6b:1a:e1:20:03:90:5c:a8: 9f:f7:cd:94:8d:41:7f:ff:04:34:56:12:bb:d3:22: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:87:7B:10:12:07:DA:3C:1E:93:9F:86:F1:CA:97:DB:7F:1E:49 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bd:60:8f:1a:20:ba:ea:47:b5:86:06:72:e1:31:f3:8d:01: 5a:14:1f:54:e1:8c:ae:c5:3c:bc:1d:bc:92:d4:db:e5:8e:b7: 23:d5:33:40:2f:cd:9b:32:90:d0:a6:32:80:d6:95:7a:0d:47: ab:07:5f:35:a4:a3:ff:c6:09:3c:d2:ca:dd:13:eb:fd:cd:51: be:21:0f:fa:c9:f8:3b:c6:3e:97:42:f8:b9:0d:32:05:02:07: 47:dd:4f:24:51:f2:15:2f:8b:1c:c2:85:a1:c5:45:7e:f1:97: 67:17:cd:1f:90:c9:f3:6c:74:04:35:d0:49:fd:e1:61:ef:25: 8c:cc:a4:46:2c:ef:16:9f:b6:cb:aa:a8:20:e5:3e:81:ed:48: c6:ac:2c:b2:0b:c1:e7:84:aa:d4:4b:5b:46:8e:af:f1:c6:f9: 5b:59:6f:83:de:53:c7:29:37:b9:2e:13:31:1f:91:fe:93:4e: 97:ae:c7:0f:7a:17:fe:a7:ed:93:f5:e8:a7:bb:ed:e3:5e:bf: 3b:2f:f1:6e:25:37:cd:ef:11:15:76:c7:6f:a0:92:71:4b:cf: 7f:b3:fc:ff:27:9b:44:f2:43:2e:ab:72:34:e6:37:34:02:fb: 5f:11:a9:29:b3:28:3a:2b:e7:fc:ac:13:07:cd:b1:f1:6e:ce: a8:e9:24:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjYwOTI2MjMwMTMxWhcNMjYxMDAzMjMwMTMxWjAYMRYwFAYD VQQDEw02YWI4NGVjYi0xZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnITFS9Dl9kfwt0bAP761g4nhkoTIde1VfJ/NDSNNwJC3awenHT1f1orbnEMm 3LjDCLy4e0mrWKfvxgK4tmDElv1Y5Tl112HlU2G7ebXwrM+IwfIl8JUM3HsZMrat 5ziN1qdFDo6Ft+8OOXFj3RXMWDZw52znPwIqu3NO/MTIUEnGQjvIhlnPc4+Ezwmm 5UPOSUcFF3DO7WXQym5EajPTerZdS9tb89wfjwPDRi9eVWD6fn3KNVVWLDwMpMM/ jgpU1XlTsG7Ev0GfxZzaGBqoKkAAVIT4vFOTxic+8kGuPwbO8ngAwtSraxrhIAOQ XKif982UjUF//wQ0VhK70yIIIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfYh3sQ EgfaPB6Tn4bxypfbfx5JMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPb1gjxoguupHtYYGcuEx840BWhQfVOGMrsU8vB28ktTb5Y63I9UzQC/NmzKQ 0KYygNaVeg1HqwdfNaSj/8YJPNLK3RPr/c1RviEP+sn4O8Y+l0L4uQ0yBQIHR91P JFHyFS+LHMKFocVFfvGXZxfNH5DJ82x0BDXQSf3hYe8ljMykRizvFp+2y6qoIOU+ ge1IxqwssgvB54Sq1EtbRo6v8cb5W1lvg95Txyk3uS4TMR+R/pNOl67HD3oX/qft k/Xop7vt416/Oy/xbiU3ze8RFXbHb6CScUvPf7P8/yebRPJDLqtyNOY3NAL7XxGp KbMoOivn/KwTB82x8W7OqOkk4A== -----END CERTIFICATE-----Generated at Mon Sep 28 10:11:51 2026 by rpki-client