$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft (raw, json) Hash identifier: uL2nmXacMflI5xj3f0wkDzKpnHSTPaSfFj/a4F+qSYg= Subject key identifier: AC:A9:98:57:2C:3A:28:94:49:E8:D2:23:94:46:22:36:03:48:B3:C1 Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft Manifest number: 9E Signing time: Mon 05 Oct 2026 07:50:05 +0000 Manifest this update: Mon 05 Oct 2026 07:50:04 +0000 Manifest next update: Mon 12 Oct 2026 07:50:04 +0000 Files and hashes: 1: BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl (hash: sFVqDT9ZpsEkKobOzH1VK1Qw9wUqCPkb+f60H40FixE=) 2: 8EE78F481D1A11F19DA5ED77103D8C67.roa (hash: FtCatlAW9Re17rwqCuc7Yn9ywx696GppCQCdjrmZAlM=) 3: 9C1B70121D1A11F1A275F377103D8C67.roa (hash: y0kiR2bauMVDFaqNZbNEH9+p4Ybcw1shQXfdJNNrqvI=) 4: 8FEAA0421D1A11F19DA5ED77103D8C67.roa (hash: dEk3degjNLUiA3kpAMrU5suBNlrDXd9oTzhhHbGgPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Validity Not Before: Oct 5 07:50:04 2026 GMT Not After : Oct 12 07:50:04 2026 GMT Subject: CN=6ac356ad-749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:2e:d5:56:12:b2:44:24:86:91:75:ed:55: 67:f7:53:26:c6:e2:51:be:7e:d8:4a:4b:9c:9d:d9: 2d:9d:22:68:ea:86:b7:27:9a:92:26:2e:0d:59:65: 6e:57:72:8a:d7:d4:27:24:09:37:85:b0:f5:58:1c: 00:3c:08:e2:e0:e7:3a:61:99:12:7e:fc:5f:fb:44: 89:4a:61:90:ac:a2:f8:8e:3d:f4:b5:41:f0:4f:b4: 03:49:6b:2f:91:0f:f8:37:05:f9:3d:67:b9:5f:c4: 05:75:58:a8:15:ae:85:56:c9:d7:2b:70:66:14:c7: 43:02:39:56:d0:6b:ee:16:9c:01:c1:b5:fb:93:83: 40:58:b3:45:c8:2f:bf:6f:08:d2:8d:fb:9e:73:07: 36:45:36:57:9f:73:7a:7d:2a:af:59:2e:9f:a0:fb: 9b:0f:49:31:09:d4:82:de:38:a4:82:5c:2e:c8:f5: 96:cd:e1:4d:bc:3e:5f:4c:c5:c2:73:78:ff:21:ee: 16:44:f2:46:09:96:4a:c0:6e:aa:bc:19:0f:36:5a: 4b:c4:b5:23:dd:a1:e1:14:48:6c:47:76:4a:f3:25: 55:57:95:3c:60:04:ba:1e:75:c5:6d:98:a6:a9:c2: 06:2f:90:7d:49:21:4b:52:76:1d:c0:33:be:62:f6: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:98:57:2C:3A:28:94:49:E8:D2:23:94:46:22:36:03:48:B3:C1 X509v3 Authority Key Identifier: keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d1:27:c9:9f:cc:e9:3c:ce:0b:e1:16:83:e7:06:b7:71:6f: 46:a5:6c:e4:d9:8d:9b:01:b3:4d:e3:68:49:8a:ef:3c:7f:97: ad:06:01:ec:35:24:9e:c0:7d:63:1c:60:46:38:e7:65:84:d5: 82:85:5d:74:92:9d:65:74:28:43:69:ee:e8:c7:6b:41:a8:da: 3e:ec:4b:0d:37:00:ea:03:51:e5:a5:fc:93:7d:58:5f:fe:1e: f6:79:49:02:55:89:1c:52:4d:c7:d9:6b:a9:31:1e:13:8a:d8: 1b:7c:0c:83:41:54:be:1c:b4:d7:ba:ed:01:fe:e8:0f:7d:9b: 36:09:3c:77:1f:0a:ee:b3:83:63:22:a2:fa:cf:42:c7:d9:8d: fb:7c:bd:f4:2d:d9:67:f6:ab:71:be:43:6d:d5:9a:24:6e:1c: ae:d4:23:12:dc:13:43:ae:88:6c:a9:94:1e:c5:9b:b1:08:89: ed:17:c2:0b:73:d5:0e:61:d3:4c:10:b6:ce:5b:aa:0c:77:7b: 1f:32:e4:06:e4:bf:fd:6e:1b:c2:dc:a2:00:d5:a1:32:27:a2: ae:4d:83:d5:86:77:ec:76:64:4b:58:eb:f6:29:8c:4d:9d:ab: 61:35:40:38:27:55:c1:f1:9c:0a:19:ef:84:da:17:23:01:04: a4:60:63:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDNjExMTAvBgNVBAUTKDA0NzQ5MzdFNzlBOUQ2NzMzNTNFQUJEODJDNEI4NDI0 QjZDNjgzMEQwHhcNMjYxMDA1MDc1MDA0WhcNMjYxMDEyMDc1MDA0WjAYMRYwFAYD VQQDEw02YWMzNTZhZC03NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2su1VYSskQkhpF17VVn91MmxuJRvn7YSkucndktnSJo6oa3J5qSJi4NWWVu V3KK19QnJAk3hbD1WBwAPAji4Oc6YZkSfvxf+0SJSmGQrKL4jj30tUHwT7QDSWsv kQ/4NwX5PWe5X8QFdVioFa6FVsnXK3BmFMdDAjlW0GvuFpwBwbX7k4NAWLNFyC+/ bwjSjfuecwc2RTZXn3N6fSqvWS6foPubD0kxCdSC3jikglwuyPWWzeFNvD5fTMXC c3j/Ie4WRPJGCZZKwG6qvBkPNlpLxLUj3aHhFEhsR3ZK8yVVV5U8YAS6HnXFbZim qcIGL5B9SSFLUnYdwDO+YvaP0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKypmFcs OiiUSejSI5RGIjYDSLPBMB8GA1UdIwQYMBaAFAR0k355qdZzNT6r2CxLhCS2xoMN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0M2MS8zMzFEMTQxOERB M0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFuTTFQcXZZTEV1RUpMYkdn dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFu TTFQcXZZTEV1RUpMYkdndzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9EnyZ/M6TzOC+EWg+cGt3FvRqVs5NmNmwGzTeNoSYrvPH+XrQYB7DUknsB9 YxxgRjjnZYTVgoVddJKdZXQoQ2nu6MdrQajaPuxLDTcA6gNR5aX8k31YX/4e9nlJ AlWJHFJNx9lrqTEeE4rYG3wMg0FUvhy017rtAf7oD32bNgk8dx8K7rODYyKi+s9C x9mN+3y99C3ZZ/arcb5DbdWaJG4crtQjEtwTQ66IbKmUHsWbsQiJ7RfCC3PVDmHT TBC2zluqDHd7HzLkBuS//W4bwtyiANWhMieirk2D1YZ37HZkS1jr9imMTZ2rYTVA OCdVwfGcChnvhNoXIwEEpGBjUA== -----END CERTIFICATE-----Generated at Tue Oct 6 14:25:59 2026 by rpki-client