$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: MD1zHH0iiSnQBhP9PmtZ/VvsWKHECb9HfGLJ8Brfb3I= Subject key identifier: 15:A6:84:80:7A:63:CB:3D:DB:3F:F9:C2:1E:16:A7:A2:AC:65:A6:B9 Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 021F Signing time: Sun 25 Oct 2026 03:17:48 +0000 Manifest this update: Sun 25 Oct 2026 03:17:47 +0000 Manifest next update: Sun 01 Nov 2026 03:17:47 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: PfvV/Hyo9uRg6Z6/Xewc5XRy5L1LNiBTle7ez0wmfPA=) 2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=) 3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Oct 25 03:17:47 2026 GMT Not After : Nov 1 03:17:47 2026 GMT Subject: CN=6add74dc-0d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:0d:73:23:c7:ce:da:7f:22:45:c0:18:fb: ad:07:ca:c9:6f:d4:cc:36:8d:4c:d0:5d:fd:e3:41: 19:07:f1:ed:22:b9:4d:13:b8:34:2e:d4:97:c5:75: f8:af:7e:26:91:5d:1f:c3:88:55:56:df:88:14:a7: f0:3d:d2:b0:3b:96:e0:2f:fd:48:ee:43:dd:77:35: 69:92:f9:db:b7:a2:4f:95:71:76:03:57:d4:44:30: b7:f2:c6:73:91:c0:ae:06:15:33:50:9a:90:c5:10: 0e:69:8e:67:30:64:ca:3f:5a:5e:c3:9a:1e:34:85: 64:76:4c:f9:c6:61:7f:7b:64:1a:ef:25:b4:0d:ee: b8:50:a2:7d:e3:dc:f8:be:ae:82:de:83:ca:a4:97: e5:7e:82:42:c0:90:31:86:6d:e0:52:e7:44:f7:70: d8:0e:2f:38:a1:be:14:d6:4c:b7:6c:9e:d2:bd:64: aa:02:8b:04:f6:78:00:57:76:72:01:d1:ca:e0:f0: 9c:d3:58:9e:ab:5e:dd:82:29:06:7b:0f:f3:e8:a5: dd:e5:e7:ce:0c:d8:df:99:dc:b1:93:5b:c5:21:bb: f4:96:4d:00:7e:55:69:ad:fa:e0:de:22:de:83:a5: 42:86:41:c9:0e:af:5f:4f:25:4c:07:f6:26:44:c2: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A6:84:80:7A:63:CB:3D:DB:3F:F9:C2:1E:16:A7:A2:AC:65:A6:B9 X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:3a:71:25:40:db:88:6a:3d:f2:81:e2:ff:46:be:4e:b2:3e: 5e:06:0e:85:c8:e2:08:31:fa:0f:54:36:6e:81:8d:3a:e9:c3: 00:02:c5:6b:a2:6f:22:37:e9:0e:d0:59:a7:a3:41:bd:49:bd: e4:b9:5f:13:92:0a:7e:d3:b6:50:cc:f8:ce:87:23:9e:b8:c3: 02:aa:61:5c:d5:a4:56:3a:e2:b3:11:05:0f:52:bd:9a:7f:1d: 23:a1:c8:e8:8c:d4:d1:9b:fa:98:43:dd:6a:97:e7:be:cc:03: cd:db:99:9e:04:5b:94:47:d8:e9:d3:cb:38:91:fe:2e:d0:da: 1d:bb:c6:1b:ce:08:4a:d2:14:22:c6:ed:66:cf:3c:41:90:e6: 0f:f2:81:1e:57:01:eb:8e:f5:f2:11:d5:7a:16:eb:c6:83:13: 40:26:72:4a:6a:ae:3d:b9:0c:f9:81:c9:51:36:e0:48:57:6c: e2:98:02:0d:47:5c:61:77:25:22:92:6f:df:e6:55:ec:cc:2a: 65:94:67:58:60:ac:ae:f2:95:19:b1:b8:85:e6:55:03:24:9f: 85:aa:f2:d7:0f:bd:3f:07:a9:fa:14:4e:a5:74:62:ee:1d:dd: 34:b9:77:e9:fb:a5:51:de:6d:cb:b2:09:96:f5:8d:04:13:43: f4:cb:17:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjYxMDI1MDMxNzQ3WhcNMjYxMTAxMDMxNzQ3WjAYMRYwFAYD VQQDEw02YWRkNzRkYy0wZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM8NcyPHztp/IkXAGPutB8rJb9TMNo1M0F3940EZB/HtIrlNE7g0LtSXxXX4 r34mkV0fw4hVVt+IFKfwPdKwO5bgL/1I7kPddzVpkvnbt6JPlXF2A1fURDC38sZz kcCuBhUzUJqQxRAOaY5nMGTKP1pew5oeNIVkdkz5xmF/e2Qa7yW0De64UKJ949z4 vq6C3oPKpJflfoJCwJAxhm3gUudE93DYDi84ob4U1ky3bJ7SvWSqAosE9ngAV3Zy AdHK4PCc01ieq17dgikGew/z6KXd5efODNjfmdyxk1vFIbv0lk0AflVprfrg3iLe g6VChkHJDq9fTyVMB/YmRMJTlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWmhIB6 Y8s92z/5wh4Wp6KsZaa5MB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwDpxJUDbiGo98oHi/0a+TrI+XgYOhcjiCDH6D1Q2boGNOunDAALFa6JvIjfp DtBZp6NBvUm95LlfE5IKftO2UMz4zocjnrjDAqphXNWkVjrisxEFD1K9mn8dI6HI 6IzU0Zv6mEPdapfnvswDzduZngRblEfY6dPLOJH+LtDaHbvGG84IStIUIsbtZs88 QZDmD/KBHlcB64718hHVehbrxoMTQCZySmquPbkM+YHJUTbgSFds4pgCDUdcYXcl IpJv3+ZV7MwqZZRnWGCsrvKVGbG4heZVAySfhary1w+9Pwep+hROpXRi7h3dNLl3 6fulUd5ty7IJlvWNBBND9MsX6A== -----END CERTIFICATE-----Generated at Mon Oct 26 13:36:00 2026 by rpki-client