$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: s9zBhH8CuK1EFRUuVJYn1NbPGC2BoBd+aP+15dI74iM= Subject key identifier: E1:48:8E:E6:5C:C8:2E:E7:13:BA:D8:08:2A:2B:4D:CF:32:9D:C9:BC Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 029C Signing time: Thu 29 Oct 2026 02:26:24 +0000 Manifest this update: Thu 29 Oct 2026 02:26:24 +0000 Manifest next update: Thu 05 Nov 2026 02:26:24 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: qL6gqkzJonM9rfRNfw/iJhCshZs3qWLsiIJTouoQpDo=) 2: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: nn3BG1+0AMLZ+WtxZmbDcIERFfevGh3kSq7PDXT0/WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Oct 29 02:26:24 2026 GMT Not After : Nov 5 02:26:24 2026 GMT Subject: CN=6ae2aed0-1c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:1f:1e:85:aa:50:83:1f:d8:98:bb:fe:e0: 29:b5:59:7f:dd:6d:d2:6e:71:47:64:db:44:5f:1f: fd:6e:ae:19:8f:a0:b2:40:88:59:eb:4a:ac:cd:23: 52:8d:f5:f3:00:a7:19:8c:a8:1d:02:87:b3:42:81: 65:26:d4:a4:13:80:f6:8a:dc:ac:a5:c6:54:12:da: 39:74:7c:49:20:60:c4:18:89:c2:9b:65:c0:00:78: 48:3f:ef:23:62:16:a2:d9:0c:f0:37:04:32:c0:42: a8:05:fa:7c:4d:25:c6:2e:b7:6b:cc:d0:64:4e:66: 54:e0:dd:e5:e2:ec:d4:a8:fa:23:74:b4:74:47:04: 37:68:7c:13:63:c8:31:1f:36:f6:ea:30:90:78:84: 17:b3:21:18:61:5b:20:0c:48:9f:41:c3:35:73:89: 0a:f9:4d:7d:8a:ea:98:88:19:ea:57:34:a7:aa:19: 1e:24:5c:1e:16:91:82:03:ec:37:3d:94:71:88:33: 83:b4:9f:74:9c:89:03:a0:e0:59:93:92:50:6d:55: 71:70:53:72:8c:f3:3e:91:3e:14:96:f4:c4:ae:52: 0d:3f:5d:e2:7a:68:7c:6c:c9:de:47:69:04:72:b4: 87:12:05:f2:73:fb:74:4b:59:a5:1c:72:dd:91:fe: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:8E:E6:5C:C8:2E:E7:13:BA:D8:08:2A:2B:4D:CF:32:9D:C9:BC X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:4d:d6:bf:75:f9:b6:18:1c:8e:5f:e8:97:cc:18:da:63: 42:4b:d4:2f:2f:61:f3:e8:ea:43:20:0b:23:61:9b:fd:94:4c: 7d:16:37:4b:78:19:86:ec:21:da:2c:31:84:f9:d6:dd:2b:72: 81:15:3f:40:ec:45:ef:2c:ba:2e:e0:9b:ea:81:6b:62:bd:91: e5:90:a5:01:df:36:b9:9f:49:f7:41:af:ca:5e:1b:e2:0e:ee: 87:cb:71:58:17:94:71:4d:cb:b6:17:38:44:03:87:cd:99:73: 7a:bf:6a:06:cc:55:b4:b0:3b:de:07:26:56:e6:72:d4:ae:e6: 38:48:83:26:4d:67:72:b7:83:07:65:ad:06:5b:8c:16:91:d3: 78:63:9a:c5:2f:78:09:b5:e8:8b:9b:16:89:1e:71:cc:98:44: ae:a0:05:ea:a7:c4:f4:d8:4c:ed:f9:69:2f:8f:48:21:82:e5: c2:cd:42:53:d9:48:0c:65:ca:f7:48:15:66:91:d0:48:60:31: 98:f4:4c:b0:fb:90:48:43:98:6d:52:ff:30:aa:18:a0:36:f3: 2a:bb:5b:9c:f3:1d:f2:64:4c:ed:1c:16:5b:ef:7e:ff:0a:8a: 8d:3f:96:4c:31:3f:9e:fe:ce:7e:7b:87:cb:00:83:55:39:6d: c6:f0:1a:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjYxMDI5MDIyNjI0WhcNMjYxMTA1MDIyNjI0WjAYMRYwFAYD VQQDEw02YWUyYWVkMC0xYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYEfHoWqUIMf2Ji7/uAptVl/3W3SbnFHZNtEXx/9bq4Zj6CyQIhZ60qszSNS jfXzAKcZjKgdAoezQoFlJtSkE4D2ityspcZUEto5dHxJIGDEGInCm2XAAHhIP+8j Yhai2QzwNwQywEKoBfp8TSXGLrdrzNBkTmZU4N3l4uzUqPojdLR0RwQ3aHwTY8gx Hzb26jCQeIQXsyEYYVsgDEifQcM1c4kK+U19iuqYiBnqVzSnqhkeJFweFpGCA+w3 PZRxiDODtJ90nIkDoOBZk5JQbVVxcFNyjPM+kT4UlvTErlINP13iemh8bMneR2kE crSHEgXyc/t0S1mlHHLdkf7+1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFIjuZc yC7nE7rYCCorTc8yncm8MB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArf5N1r91+bYYHI5f6JfMGNpjQkvULy9h8+jqQyALI2Gb/ZRMfRY3S3gZhuwh 2iwxhPnW3StygRU/QOxF7yy6LuCb6oFrYr2R5ZClAd82uZ9J90Gvyl4b4g7uh8tx WBeUcU3Lthc4RAOHzZlzer9qBsxVtLA73gcmVuZy1K7mOEiDJk1ncreDB2WtBluM FpHTeGOaxS94CbXoi5sWiR5xzJhErqAF6qfE9NhM7flpL49IIYLlws1CU9lIDGXK 90gVZpHQSGAxmPRMsPuQSEOYbVL/MKoYoDbzKrtbnPMd8mRM7RwWW+9+/wqKjT+W TDE/nv7OfnuHywCDVTltxvAa+g== -----END CERTIFICATE-----Generated at Fri Oct 30 10:56:59 2026 by rpki-client