$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json) Hash identifier: pUINmtSBuLk/Zs0egzalnZxdDpL0HQqzCDsIujVAdlU= Subject key identifier: B6:8A:8F:15:DC:E4:BB:43:22:2D:43:EE:30:C7:77:92:F0:7E:96:05 Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Certificate serial: 2284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft Manifest number: 2EA9 Signing time: Mon 12 Oct 2026 15:30:33 +0000 Manifest this update: Mon 12 Oct 2026 15:30:33 +0000 Manifest next update: Mon 19 Oct 2026 15:30:33 +0000 Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: iAw/IsLnpsj+tdTkK9hRnBzdY/4Omu9MS9alhRskeC0=) 2: 44A88C482CA611F1A847C919C5833773.roa (hash: bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8836 (0x2284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Validity Not Before: Oct 12 15:30:33 2026 GMT Not After : Oct 19 15:30:33 2026 GMT Subject: CN=6accfd19-56b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:0f:93:52:8d:b2:83:e5:f7:5e:d3:4e:32: ad:87:3e:77:10:dc:c4:15:e9:97:9a:28:96:21:3b: 93:c7:cf:b3:4f:56:ad:ef:29:37:bc:92:0a:9e:5d: b0:bf:83:63:73:de:db:90:8d:99:7d:27:13:2a:d0: f4:9c:2e:0e:0e:08:d9:4b:98:62:38:7c:cb:68:14: 35:b5:b3:e2:16:85:05:c2:76:fd:e7:63:b4:02:0f: 49:02:7a:80:c3:00:b5:0a:b7:49:a6:d7:7e:dd:d5: 91:a0:d4:d6:40:16:d8:b8:6d:5c:25:8d:52:49:27: c8:45:79:15:97:4d:a7:14:55:d4:5d:83:db:1a:86: 4b:85:06:da:60:0a:d3:eb:fd:31:61:78:f0:5c:68: d5:ca:fb:63:9f:65:06:81:a4:ed:ba:1d:f1:22:0c: f5:e9:e1:24:2e:f7:98:8c:0b:0f:d1:ef:0b:16:f6: 65:c5:83:38:7a:8c:5d:8c:9d:66:b1:40:fc:af:d8: 26:37:12:d2:b4:07:54:db:98:51:94:c3:07:d5:a1: 0c:9e:aa:ce:52:79:03:5e:ba:8f:b5:e2:97:c1:b8: 65:21:28:79:5a:04:f3:04:70:a7:7e:71:46:ce:22: c0:4d:29:8b:82:35:8e:fc:85:3f:8f:e2:47:27:d3: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8A:8F:15:DC:E4:BB:43:22:2D:43:EE:30:C7:77:92:F0:7E:96:05 X509v3 Authority Key Identifier: keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:23:05:55:a9:bc:32:9d:53:b9:68:b8:da:7a:af:fb:38:c8: 8a:81:91:86:ed:0d:ca:84:2b:f8:29:41:69:aa:a4:65:43:57: 22:ed:1b:44:93:2a:cb:73:72:f0:dc:84:65:25:f4:28:71:a1: ca:67:e8:0f:65:a9:13:77:ec:23:76:b8:23:a0:9d:48:a0:72: cf:e4:df:2a:e8:6b:f4:85:7b:16:f2:fa:b1:b3:78:3f:74:a7: a6:12:09:8e:26:5a:39:5d:f5:5f:1b:16:25:cf:bc:b9:b9:5b: 00:b7:75:ca:bd:c8:0f:14:8d:ea:a7:59:95:91:ee:a2:49:c0: 0f:89:44:4c:9d:b1:00:28:a7:8a:c9:47:65:e3:f3:ab:ea:e5: 4a:fb:19:d9:54:ff:5b:19:e3:86:b4:78:03:45:37:d4:0a:f6: 31:a5:87:30:35:3e:b1:22:f1:c5:3e:60:4f:94:fd:e6:fb:00: b3:bc:a6:57:05:1c:10:65:e8:bf:cc:29:cb:83:f8:c2:be:6d: fb:fc:ed:55:2f:1d:a0:1c:c8:40:70:58:71:e8:09:f3:b7:19: fd:5b:44:4b:66:ec:6f:22:83:b7:c0:5b:83:f6:5c:05:da:8d: 92:19:75:02:9f:b1:e4:05:65:d8:38:41:88:40:0f:bc:2a:29: 94:e3:04:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4 NzYzMjhDRDkwHhcNMjYxMDEyMTUzMDMzWhcNMjYxMDE5MTUzMDMzWjAYMRYwFAYD VQQDEw02YWNjZmQxOS01NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDMPk1KNsoPl917TTjKthz53ENzEFemXmiiWITuTx8+zT1at7yk3vJIKnl2w v4Njc97bkI2ZfScTKtD0nC4ODgjZS5hiOHzLaBQ1tbPiFoUFwnb952O0Ag9JAnqA wwC1CrdJptd+3dWRoNTWQBbYuG1cJY1SSSfIRXkVl02nFFXUXYPbGoZLhQbaYArT 6/0xYXjwXGjVyvtjn2UGgaTtuh3xIgz16eEkLveYjAsP0e8LFvZlxYM4eoxdjJ1m sUD8r9gmNxLStAdU25hRlMMH1aEMnqrOUnkDXrqPteKXwbhlISh5WgTzBHCnfnFG ziLATSmLgjWO/IU/j+JHJ9PIYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaKjxXc 5LtDIi1D7jDHd5LwfpYFMB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUyNS9GNDM0NDExNjhBMkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9Z dHdnVDF0cmN0VWFIWXlqTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcCMFVam8Mp1TuWi42nqv+zjIioGRhu0NyoQr+ClBaaqkZUNXIu0bRJMqy3Ny 8NyEZSX0KHGhymfoD2WpE3fsI3a4I6CdSKByz+TfKuhr9IV7FvL6sbN4P3SnphIJ jiZaOV31XxsWJc+8ublbALd1yr3IDxSN6qdZlZHuoknAD4lETJ2xACinislHZePz q+rlSvsZ2VT/WxnjhrR4A0U31Ar2MaWHMDU+sSLxxT5gT5T95vsAs7ymVwUcEGXo v8wpy4P4wr5t+/ztVS8doBzIQHBYcegJ87cZ/VtES2bsbyKDt8Bbg/ZcBdqNkhl1 Ap+x5AVl2DhBiEAPvCoplOMEXg== -----END CERTIFICATE-----Generated at Tue Oct 13 21:21:56 2026 by rpki-client