$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json) Hash identifier: oOPi9E7yvu+xYpy1IkNwBwrIQ7qIuWGSjuorjqGKhEM= Subject key identifier: AC:C4:3E:FE:35:AC:91:20:7E:06:69:1D:14:2C:CE:AA:0D:FA:29:B3 Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft Manifest number: 02AB Signing time: Wed 07 Oct 2026 01:54:56 +0000 Manifest this update: Wed 07 Oct 2026 01:54:55 +0000 Manifest next update: Wed 14 Oct 2026 01:54:55 +0000 Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: S9/29gcrxddb2sjmutVPAvPTfCJUZAGSaT32bYh298w=) 2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: eJa3zEY0Ga68FBEmFuzcrfb78XN2VTH6jOriLW6rBuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Validity Not Before: Oct 7 01:54:55 2026 GMT Not After : Oct 14 01:54:55 2026 GMT Subject: CN=6ac5a670-2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:e3:bd:8a:d0:fa:e4:23:0a:c0:0c:f6:e1: 12:4c:ea:9c:63:c1:e0:0e:2d:4e:76:a7:65:e3:d7: db:e4:89:81:90:c1:1c:55:b5:1e:5d:17:f4:16:0c: 20:8d:5a:3f:6a:ae:db:e9:c0:72:41:ef:be:68:01: 9c:a5:a1:de:86:a7:b9:1a:99:21:2e:d5:fc:2c:7c: 95:be:3b:91:ad:7a:c7:fb:47:17:09:3a:9d:35:c2: 30:14:4a:54:48:5c:70:65:e5:4c:85:3c:91:21:ba: 18:fa:cc:7a:22:24:a5:8b:6d:60:42:cd:cd:76:85: f2:9a:f2:65:f1:c1:9b:56:09:b4:f8:a5:e8:58:b1: 72:ad:d2:c2:72:23:03:29:aa:38:05:3a:ca:e9:b3: df:47:ad:f6:13:c5:ba:39:a6:8b:78:f1:06:fc:a5: 95:b2:af:6a:50:3f:2e:55:f2:0b:15:e2:90:52:3d: 5b:fa:bd:c0:a3:d5:dd:b9:0a:d5:48:47:f1:35:1f: 5e:a0:e2:8c:23:88:1e:ec:df:c0:1b:ea:e5:b6:be: 8b:e1:ea:75:2a:e5:f8:95:1c:db:cf:61:d0:04:54: 03:02:5e:1e:13:5c:32:4f:43:c7:c5:91:67:3d:ae: 31:01:c9:3d:b7:88:49:ee:6c:0c:94:0d:c5:12:cc: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C4:3E:FE:35:AC:91:20:7E:06:69:1D:14:2C:CE:AA:0D:FA:29:B3 X509v3 Authority Key Identifier: keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7f:c0:3e:69:e7:0e:c1:37:57:f2:01:54:51:71:7a:d8:99: 5f:7a:2b:dc:f4:12:74:f7:74:10:5b:78:5b:78:a1:c1:be:35: 56:f7:6d:19:d7:4a:c0:c0:8f:9e:a3:7e:5a:85:df:a3:a2:5e: e5:48:be:85:ce:61:df:26:01:81:9f:08:19:b6:5e:c5:a3:c4: 50:6b:57:e5:52:63:e3:23:55:72:46:b4:5a:2c:ae:d3:94:48: bd:fe:a7:e6:7f:ef:64:ee:2c:15:7f:c5:ac:bd:06:79:54:b0: 9d:09:a5:d1:c2:53:4c:b0:bc:69:9c:31:02:83:9e:92:ae:51: d3:24:3d:d3:69:ed:c5:2f:3b:6f:4f:62:d1:c4:63:7c:73:51: d6:9d:23:40:cd:15:d2:fd:d8:64:c1:00:9c:69:f3:54:02:3c: 79:79:c7:06:31:d7:cb:7e:ab:39:dd:0c:ff:c6:a1:f8:50:03: 16:40:61:6d:cd:7c:de:01:9d:0a:45:59:17:10:40:b9:3d:a8: 52:3c:d9:15:03:83:39:50:61:d9:98:bf:2a:c1:c7:c9:9a:6b: 93:b1:3e:cc:75:a2:ca:a6:61:ec:65:38:4e:5b:6a:19:bd:51: 9c:20:44:87:4e:c4:fc:48:de:ca:62:0a:b8:58:29:13:58:ab: 37:22:d7:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx MTFGMkJDQTYwHhcNMjYxMDA3MDE1NDU1WhcNMjYxMDE0MDE1NDU1WjAYMRYwFAYD VQQDEw02YWM1YTY3MC0yMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HfjvYrQ+uQjCsAM9uESTOqcY8HgDi1Odqdl49fb5ImBkMEcVbUeXRf0Fgwg jVo/aq7b6cByQe++aAGcpaHehqe5GpkhLtX8LHyVvjuRrXrH+0cXCTqdNcIwFEpU SFxwZeVMhTyRIboY+sx6IiSli21gQs3NdoXymvJl8cGbVgm0+KXoWLFyrdLCciMD Kao4BTrK6bPfR632E8W6OaaLePEG/KWVsq9qUD8uVfILFeKQUj1b+r3Ao9XduQrV SEfxNR9eoOKMI4ge7N/AG+rltr6L4ep1KuX4lRzbz2HQBFQDAl4eE1wyT0PHxZFn Pa4xAck9t4hJ7mwMlA3FEszLpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzEPv41 rJEgfgZpHRQszqoN+imzMB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDcyMS9DOTEyN0IzRUFEQzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dE QXpWTVMtTkRNZFVSSHl2S1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAX/APmnnDsE3V/IBVFFxetiZX3or3PQSdPd0EFt4W3ihwb41VvdtGddKwMCP nqN+WoXfo6Je5Ui+hc5h3yYBgZ8IGbZexaPEUGtX5VJj4yNVcka0Wiyu05RIvf6n 5n/vZO4sFX/FrL0GeVSwnQml0cJTTLC8aZwxAoOekq5R0yQ902ntxS87b09i0cRj fHNR1p0jQM0V0v3YZMEAnGnzVAI8eXnHBjHXy36rOd0M/8ah+FADFkBhbc183gGd CkVZFxBAuT2oUjzZFQODOVBh2Zi/KsHHyZprk7E+zHWiyqZh7GU4TltqGb1RnCBE h07E/EjeymIKuFgpE1irNyLXMw== -----END CERTIFICATE-----Generated at Wed Oct 7 12:00:09 2026 by rpki-client