$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: 7fNHwpFj6lrol7mWdbXuO8syCfFR2vssGWsLhpJnIuQ= Subject key identifier: 9D:8A:5A:19:60:54:E4:42:64:E4:A6:E6:AD:DE:3D:4E:8C:FB:03:2B Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09E7 Signing time: Fri 02 Oct 2026 20:11:56 +0000 Manifest this update: Fri 02 Oct 2026 20:11:55 +0000 Manifest next update: Fri 09 Oct 2026 20:11:55 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: wIdTjhY0O+61lHIvVh+uCMSFtNVn3hxGKcjYV07hrhI=) 2: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 3: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 4: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) 5: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 6: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 7: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Oct 2 20:11:55 2026 GMT Not After : Oct 9 20:11:55 2026 GMT Subject: CN=6ac0100c-43d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:46:17:f6:ca:9d:e9:e6:e1:d1:ea:c4:18: b8:bc:6f:a2:fd:9f:5b:6b:a0:33:5f:33:39:46:57: d5:7f:ca:2c:34:a3:58:a4:47:d7:54:1f:17:5e:3a: 17:34:eb:03:23:df:83:3a:8a:69:81:22:c6:3b:0f: 4e:22:7c:34:30:a8:fa:8b:fe:85:37:fc:b1:cd:94: d7:b7:73:37:14:20:84:cc:e4:3e:d7:91:90:e6:b5: 25:09:bd:20:45:f2:8e:63:07:42:73:31:10:23:d1: 6a:33:e0:ef:c1:4f:6a:56:cb:13:5a:b3:e7:2a:e3: d1:58:34:14:26:36:bb:0c:a4:af:a7:b6:28:d9:0c: dd:69:e5:e1:9a:c2:04:e0:5d:fe:ac:99:3b:f9:f9: 0d:f9:0f:0d:8d:d7:48:55:4b:50:7f:25:15:ee:23: d7:65:a1:82:24:2d:ea:5b:d8:05:6b:d5:cc:f3:de: 8c:c2:7d:ea:4e:ef:f0:ab:fc:27:ca:07:90:ad:d8: af:80:65:09:8d:80:70:0c:1d:27:a9:df:e9:74:ad: 38:98:85:28:2e:37:c3:07:4f:d4:20:da:f8:a9:8f: 31:33:c9:75:6b:18:4d:30:ba:fc:20:33:30:7c:a3: 1a:82:7c:b4:2c:64:f0:63:73:d1:fa:30:9b:74:6a: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8A:5A:19:60:54:E4:42:64:E4:A6:E6:AD:DE:3D:4E:8C:FB:03:2B X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d2:58:d7:8c:d2:e3:57:d3:dd:e8:68:96:5e:44:e1:dd:99: c2:e1:5c:5a:ff:4e:96:ae:23:41:37:d5:7c:58:06:e8:c0:fd: 1b:7d:2d:30:5d:3b:93:08:09:17:62:94:3b:93:02:37:b6:ad: 5f:14:29:01:6d:3f:ce:bb:f6:92:eb:47:04:14:48:aa:1c:07: e5:6f:fb:82:89:2e:db:f2:51:a3:12:cd:ef:e8:74:b8:7a:7c: 4b:9e:14:e9:3f:d7:47:87:86:7c:92:0f:a9:d4:f4:1d:b6:5f: b9:4e:df:e9:ab:f5:43:17:64:94:7f:bb:22:cc:a8:60:8d:68: 9c:eb:26:bb:f4:d0:01:b6:b5:bb:09:6d:9f:c9:f9:b4:e2:24: 10:f8:0e:48:8b:70:de:83:04:02:38:2f:c1:57:4b:dd:82:f5: 90:3a:ea:40:bb:d1:80:30:55:dd:54:05:16:d3:65:1a:e6:cb: 99:fd:ef:94:9a:05:16:9c:7e:48:14:d4:c4:45:86:e3:ab:43: 75:8c:b4:cc:db:ce:3d:f5:4e:e5:e7:9d:b8:cf:84:dd:9e:44: c0:f0:e4:f2:ef:23:61:f8:4f:67:e7:9d:5a:e7:55:da:72:ee: 7c:7c:f3:a8:30:64:e1:61:88:57:58:4b:c1:6c:89:27:c4:68: 61:3c:41:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYxMDAyMjAxMTU1WhcNMjYxMDA5MjAxMTU1WjAYMRYwFAYD VQQDEw02YWMwMTAwYy00M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrlGF/bKnenm4dHqxBi4vG+i/Z9ba6AzXzM5RlfVf8osNKNYpEfXVB8XXjoX NOsDI9+DOoppgSLGOw9OInw0MKj6i/6FN/yxzZTXt3M3FCCEzOQ+15GQ5rUlCb0g RfKOYwdCczEQI9FqM+DvwU9qVssTWrPnKuPRWDQUJja7DKSvp7Yo2QzdaeXhmsIE 4F3+rJk7+fkN+Q8NjddIVUtQfyUV7iPXZaGCJC3qW9gFa9XM896Mwn3qTu/wq/wn ygeQrdivgGUJjYBwDB0nqd/pdK04mIUoLjfDB0/UINr4qY8xM8l1axhNMLr8IDMw fKMagny0LGTwY3PR+jCbdGoQVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2KWhlg VORCZOSm5q3ePU6M+wMrMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAutJY14zS41fT3eholl5E4d2ZwuFcWv9Olq4jQTfVfFgG6MD9G30tMF07kwgJ F2KUO5MCN7atXxQpAW0/zrv2kutHBBRIqhwH5W/7goku2/JRoxLN7+h0uHp8S54U 6T/XR4eGfJIPqdT0HbZfuU7f6av1QxdklH+7IsyoYI1onOsmu/TQAba1uwltn8n5 tOIkEPgOSItw3oMEAjgvwVdL3YL1kDrqQLvRgDBV3VQFFtNlGubLmf3vlJoFFpx+ SBTUxEWG46tDdYy0zNvOPfVO5eeduM+E3Z5EwPDk8u8jYfhPZ+edWudV2nLufHzz qDBk4WGIV1hLwWyJJ8RoYTxBiA== -----END CERTIFICATE-----Generated at Sun Oct 4 06:07:36 2026 by rpki-client