$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: aOvgGM4gIJiDF24QRu2Lqn8Wq035hTOcsbDWfgYoy6o= Subject key identifier: 88:AA:AE:9C:20:76:DC:E0:DE:22:0E:8D:A4:BA:78:B2:EE:83:A2:E9 Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 07BB Signing time: Tue 22 Sep 2026 20:54:37 +0000 Manifest this update: Tue 22 Sep 2026 20:54:37 +0000 Manifest next update: Tue 29 Sep 2026 20:54:37 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: EZE2ZBgf9Cj/8IqwWEyIIsxLguJNoPVJCY+ssZDv9N8=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: xDjWjnMx2nUwxy81qAYlS3eB+kKkaHlmvwFlRjdxkJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Sep 22 20:54:37 2026 GMT Not After : Sep 29 20:54:37 2026 GMT Subject: CN=6ab2eb0d-c1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:5c:c0:c7:11:7a:d0:09:69:ea:62:69:56: 2f:05:1c:f1:d7:56:86:0b:64:8d:c1:84:f6:8b:4b: 89:b1:3f:63:8c:b7:fd:ef:17:4b:5e:5e:f5:a9:eb: 78:ca:91:6b:4f:36:e9:dd:5c:63:e6:fe:78:29:85: 49:3e:00:05:6a:aa:c2:3e:6e:84:f5:13:23:57:07: d2:83:37:33:38:da:05:fe:cb:47:15:f4:8a:85:6b: 6c:bf:69:d2:09:ea:dd:e2:47:64:88:59:db:75:96: c6:ef:36:19:f0:55:fc:6f:d6:1e:2f:94:07:cf:fb: b1:65:ae:03:86:8f:44:cf:17:af:f8:db:84:ec:4d: 2c:e4:67:20:fc:e1:48:56:2d:e6:1a:01:cb:aa:d8: b0:a8:ec:c2:33:0b:9a:8d:6b:74:0c:10:2f:b8:2e: 38:49:a9:ab:a3:29:57:ea:45:c6:cf:e6:07:ba:4f: 52:0b:a2:97:cf:9d:9f:94:1f:25:55:d7:5c:4f:7d: 58:0c:6d:db:1d:7a:0a:a2:9d:c1:f5:12:8d:e0:4b: 39:8f:93:1e:ea:b7:2d:79:8e:ae:f8:4a:e1:25:65: 7e:ae:86:d0:05:ea:50:d6:af:ad:d6:dd:6e:d6:07: 13:1e:3c:34:75:6a:84:8c:1f:e8:27:ed:a3:c3:aa: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:AE:9C:20:76:DC:E0:DE:22:0E:8D:A4:BA:78:B2:EE:83:A2:E9 X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:57:0f:fb:db:fa:43:65:a4:40:7a:75:14:ea:6e:58:b6: 7b:e8:d0:a9:23:b2:9b:19:56:c6:ae:4b:93:7c:a4:77:cd:ad: f9:f9:be:56:45:81:bd:ed:60:2c:d3:c4:ba:42:c5:5e:c6:4d: 36:c3:d2:91:9a:d0:94:49:d8:4b:90:b4:fd:0f:33:1b:42:1c: 6c:77:3b:5a:72:0c:d1:f0:27:c4:58:fd:97:49:2e:0f:46:8e: e7:c0:7b:01:39:c2:a5:12:91:d9:c1:fd:d7:b6:3e:3a:01:e5: 53:87:c9:85:5d:4a:f3:5e:ae:a6:36:66:f3:fe:77:f9:c9:71: c8:52:2a:40:3e:73:bf:01:00:68:5d:aa:ec:57:0f:0a:ea:d9: fe:51:6c:e7:f9:e1:db:99:d6:99:9a:ba:4a:96:e0:af:a0:25: b4:b0:02:77:15:dc:9a:fa:c2:34:22:23:01:16:9a:61:4a:2d: c5:8c:ad:d7:ee:4a:4f:16:21:fe:59:1c:ab:db:11:04:b4:d7: 49:74:45:87:12:67:b4:ad:ab:4a:9e:6e:f4:73:ce:d8:04:98: 2f:a7:5c:30:33:59:10:29:b8:c3:46:13:5f:f9:4c:f1:1a:44: e1:16:b1:54:cf:c7:34:03:15:08:b2:5d:d8:93:3d:56:aa:18: bc:00:31:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjYwOTIyMjA1NDM3WhcNMjYwOTI5MjA1NDM3WjAYMRYwFAYD VQQDEw02YWIyZWIwZC1jMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXhcwMcRetAJaepiaVYvBRzx11aGC2SNwYT2i0uJsT9jjLf97xdLXl71qet4 ypFrTzbp3Vxj5v54KYVJPgAFaqrCPm6E9RMjVwfSgzczONoF/stHFfSKhWtsv2nS Cerd4kdkiFnbdZbG7zYZ8FX8b9YeL5QHz/uxZa4Dho9Ezxev+NuE7E0s5Gcg/OFI Vi3mGgHLqtiwqOzCMwuajWt0DBAvuC44SamroylX6kXGz+YHuk9SC6KXz52flB8l VddcT31YDG3bHXoKop3B9RKN4Es5j5Me6rcteY6u+ErhJWV+robQBepQ1q+t1t1u 1gcTHjw0dWqEjB/oJ+2jw6o0VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiqrpwg dtzg3iIOjaS6eLLug6LpMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZw9XD/vb+kNlpEB6dRTqbli2e+jQqSOymxlWxq5Lk3ykd82t+fm+VkWBve1g LNPEukLFXsZNNsPSkZrQlEnYS5C0/Q8zG0IcbHc7WnIM0fAnxFj9l0kuD0aO58B7 ATnCpRKR2cH917Y+OgHlU4fJhV1K816upjZm8/53+clxyFIqQD5zvwEAaF2q7FcP CurZ/lFs5/nh25nWmZq6Spbgr6AltLACdxXcmvrCNCIjARaaYUotxYyt1+5KTxYh /lkcq9sRBLTXSXRFhxJntK2rSp5u9HPO2ASYL6dcMDNZECm4w0YTX/lM8RpE4Rax VM/HNAMVCLJd2JM9VqoYvAAxsw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:32:04 2026 by rpki-client