$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: bmPgJnnXBVDwCAfdGOBEwRju5d0gKiiVy+v5CFC3jcY= Subject key identifier: 2B:52:D6:52:6B:FD:F4:95:43:54:8D:EB:A4:B6:54:20:60:F7:C6:5A Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 0887 Signing time: Thu 24 Sep 2026 20:40:50 +0000 Manifest this update: Thu 24 Sep 2026 20:40:50 +0000 Manifest next update: Thu 01 Oct 2026 20:40:50 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: EYRcOgxt7E08s3yWfkaMTXPbOtIheE7jQISh424ez7o=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: e9Lu8flwsgrgepqCcx7rLX3W9le7mADkxpNTO2DEgOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Sep 24 20:40:50 2026 GMT Not After : Oct 1 20:40:50 2026 GMT Subject: CN=6ab58ad2-23cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:2c:ac:f8:89:fd:f7:17:4b:cc:e8:26:37: 3a:9b:8e:b4:7e:3b:08:33:db:34:ac:38:42:4e:5e: 34:46:99:5b:09:b4:1c:9a:0e:b0:ce:df:0e:66:50: 31:9b:27:05:68:14:53:85:d0:14:0a:19:7a:e6:db: bf:ab:29:5e:49:44:7f:7a:f8:75:b2:07:95:fe:45: fd:6b:54:ed:ee:b4:b1:9b:67:33:bb:bd:98:05:0e: 4d:9c:9c:98:73:f6:c2:a5:09:28:5b:82:9c:67:f9: f6:73:21:2c:2b:32:ea:46:0b:89:ed:27:bf:76:09: 43:13:70:e1:01:52:fd:12:f8:a0:79:73:3a:6c:60: 65:2a:ca:32:4f:0f:ee:91:e4:9e:4f:2f:09:02:d8: 24:a3:01:27:42:29:ab:df:19:c3:72:1b:b4:de:f5: 33:ca:4b:0a:8b:9e:8b:3a:1c:b9:64:f6:3b:39:3e: 02:fc:c7:1b:1e:f5:cc:f2:f0:f8:95:31:86:6e:3a: 32:89:9a:e7:c6:57:9c:03:10:cd:7d:34:ad:c6:97: 93:43:59:1a:c0:e6:76:ce:25:5e:ff:e8:e2:8f:10: 80:aa:e7:95:21:47:3c:8c:78:f3:31:34:97:ac:aa: a1:0d:91:c0:9d:f3:0c:68:f4:2f:f1:a0:db:9c:33: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:D6:52:6B:FD:F4:95:43:54:8D:EB:A4:B6:54:20:60:F7:C6:5A X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:dd:46:e2:8f:ff:b4:9a:a5:7e:4a:49:39:48:e2:da:c4:64: 21:ac:59:7b:d9:97:70:2f:16:19:53:8f:d7:05:fd:6e:49:8e: 58:67:73:ba:5e:98:ad:fd:fe:6f:6e:5f:6d:a9:3c:33:4b:a1: 99:d8:9c:13:a5:f1:41:56:f5:43:d8:a6:a4:88:a4:c6:46:64: 8e:ad:dd:7b:9c:1a:64:52:68:28:b0:09:6f:7b:c3:59:f6:e1: 39:2f:2e:cc:0c:7b:9e:19:2d:fe:28:70:46:b5:c8:30:31:8e: ee:f6:ee:50:fd:02:5e:9f:5c:e9:79:34:e1:72:4b:25:50:aa: 91:0a:4c:09:d7:ca:b8:74:1a:9d:83:54:33:e7:41:4a:3e:2b: de:29:e3:e5:52:85:4c:13:8e:a2:87:13:4e:25:1b:f0:6e:f0: 8c:f8:76:7f:91:ea:74:29:89:65:a7:2b:96:0b:bb:2e:7e:f8: 4d:d5:f5:58:5d:4c:ba:24:94:c8:d2:3e:bd:f6:d6:f8:50:3c: 9c:fb:54:55:e1:50:4d:6f:a6:a5:63:de:fc:4b:30:35:72:95: 6b:e4:fd:88:d3:b5:0b:37:cb:41:6a:8b:ea:77:bc:fe:bb:5b: 34:c2:2e:6c:de:be:3b:6e:a4:5e:85:b1:10:fd:77:9c:ef:8a: d0:ea:16:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjYwOTI0MjA0MDUwWhcNMjYxMDAxMjA0MDUwWjAYMRYwFAYD VQQDEw02YWI1OGFkMi0yM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM0srPiJ/fcXS8zoJjc6m460fjsIM9s0rDhCTl40RplbCbQcmg6wzt8OZlAx mycFaBRThdAUChl65tu/qyleSUR/evh1sgeV/kX9a1Tt7rSxm2czu72YBQ5NnJyY c/bCpQkoW4KcZ/n2cyEsKzLqRguJ7Se/dglDE3DhAVL9EvigeXM6bGBlKsoyTw/u keSeTy8JAtgkowEnQimr3xnDchu03vUzyksKi56LOhy5ZPY7OT4C/McbHvXM8vD4 lTGGbjoyiZrnxlecAxDNfTStxpeTQ1kawOZ2ziVe/+jijxCAqueVIUc8jHjzMTSX rKqhDZHAnfMMaPQv8aDbnDOonQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtS1lJr /fSVQ1SN66S2VCBg98ZaMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc91G4o//tJqlfkpJOUji2sRkIaxZe9mXcC8WGVOP1wX9bkmOWGdzul6Yrf3+ b25fbak8M0uhmdicE6XxQVb1Q9impIikxkZkjq3de5waZFJoKLAJb3vDWfbhOS8u zAx7nhkt/ihwRrXIMDGO7vbuUP0CXp9c6Xk04XJLJVCqkQpMCdfKuHQanYNUM+dB Sj4r3inj5VKFTBOOoocTTiUb8G7wjPh2f5HqdCmJZacrlgu7Ln74TdX1WF1MuiSU yNI+vfbW+FA8nPtUVeFQTW+mpWPe/EswNXKVa+T9iNO1CzfLQWqL6ne8/rtbNMIu bN6+O26kXoWxEP13nO+K0OoWcQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:15:53 2026 by rpki-client