$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json) Hash identifier: 4tFLmmghbMivaxuotx9yDoN5jIWT906XE2RdG1ltgBA= Subject key identifier: 8B:F3:56:FF:F6:B7:2F:66:42:89:2D:FC:3B:85:7D:37:03:C9:45:6E Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft Manifest number: 02AA Signing time: Sat 29 Aug 2026 01:35:33 +0000 Manifest this update: Sat 29 Aug 2026 01:35:33 +0000 Manifest next update: Sat 05 Sep 2026 01:35:33 +0000 Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: mxBBKERcL+aMJPcx6MBr0BwZtZvVQZSrICCHeuRRJDE=) 2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: 94M44dsN95Cfdn+68CbMlhuF5n5qBQCEV7YwA9S7Ln8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 01:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Validity Not Before: Aug 29 01:35:33 2026 GMT Not After : Sep 5 01:35:33 2026 GMT Subject: CN=6a923765-b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:24:bb:2f:31:f3:e1:d0:40:a4:2b:4b:33: 77:1c:a4:aa:9f:5b:81:aa:d1:30:a8:4e:85:60:98: b2:51:fc:ba:18:78:26:59:23:4c:62:f3:e1:1f:16: a4:40:17:57:c7:a7:05:26:92:73:ef:57:3f:4f:8d: 90:29:e2:b3:4a:b5:55:a8:6d:a4:1d:46:19:68:f4: bf:a8:de:34:60:c3:bc:c1:f5:28:9f:bc:69:b8:78: 72:2e:b8:7f:65:81:8e:1b:1a:5b:67:21:f7:a5:7a: 12:62:d5:a3:ee:8e:27:68:cc:04:e5:00:0f:40:82: a1:88:ad:89:66:14:a3:65:bc:e0:29:f5:2b:1d:b6: dc:01:73:e8:dc:be:0b:25:c6:69:bd:05:43:d5:76: ef:d6:3f:f9:20:91:30:5c:af:cd:72:fd:fd:5c:d7: 87:ee:7b:e6:7d:c6:9b:5c:d0:61:76:89:ec:c2:a3: 06:ab:0c:20:99:cb:32:bc:38:1e:78:c8:fd:ce:fe: 83:51:d7:29:fb:1a:ab:11:0f:c3:ce:f7:7f:72:0a: 7f:42:80:5f:e0:1c:30:59:8a:5b:ef:25:93:4f:77: c4:f3:e6:ac:fc:4a:92:ff:09:64:6d:79:c9:1d:45: 74:01:bf:62:fd:6b:d6:fb:c9:3f:75:9e:90:2f:fb: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:56:FF:F6:B7:2F:66:42:89:2D:FC:3B:85:7D:37:03:C9:45:6E X509v3 Authority Key Identifier: keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:20:ed:23:13:58:b1:7f:dc:64:d0:04:85:f7:df:10:30:f3: b3:9d:2e:92:ea:8c:bc:ba:69:a3:1b:ef:86:40:92:80:e8:c3: c8:c2:86:6b:fd:54:0b:b4:61:37:cc:46:2c:82:08:ce:ef:14: 7b:47:f4:d9:81:e3:56:69:1d:8e:d5:28:a4:f4:5b:34:11:e8: 85:a6:7f:8b:10:e2:d4:22:94:d8:fd:30:36:0f:8b:5e:dc:9a: 8c:e7:2c:a1:5d:93:6c:66:4f:84:34:5c:1e:9b:62:0c:fc:d2: 63:16:49:28:a9:98:01:d8:0d:e9:85:19:62:a5:e3:7f:40:6e: c2:29:a1:28:4c:43:65:53:5e:f5:42:50:4a:af:83:f7:37:58: f2:b3:1c:1e:1f:99:e4:c1:a7:4b:a2:0c:4b:62:93:87:4c:90: 1b:d1:6e:78:5d:60:f1:a5:fb:34:99:e4:e5:a3:20:50:f9:86: e5:4d:41:0f:da:f4:dc:b8:27:fd:e1:7b:ff:33:40:cc:23:4e: bb:0f:55:c6:db:d4:4e:bb:3d:47:e5:3c:e8:27:59:1c:1e:f0: de:d1:88:ed:28:00:e4:d8:45:00:1d:95:c0:7d:04:16:6b:c7: e9:9f:14:c5:00:dc:86:99:a9:19:33:34:5c:8f:49:8e:51:d4: 00:a2:ba:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4RDcxMTAvBgNVBAUTKDA1MERDMDNCNUQ1OTQ1QTMzRUFCOTUxODE3RjE2NzlC RDkxMEM2QUMwHhcNMjYwODI5MDEzNTMzWhcNMjYwOTA1MDEzNTMzWjAYMRYwFAYD VQQDEw02YTkyMzc2NS1iNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvokuy8x8+HQQKQrSzN3HKSqn1uBqtEwqE6FYJiyUfy6GHgmWSNMYvPhHxak QBdXx6cFJpJz71c/T42QKeKzSrVVqG2kHUYZaPS/qN40YMO8wfUon7xpuHhyLrh/ ZYGOGxpbZyH3pXoSYtWj7o4naMwE5QAPQIKhiK2JZhSjZbzgKfUrHbbcAXPo3L4L JcZpvQVD1Xbv1j/5IJEwXK/Ncv39XNeH7nvmfcabXNBhdonswqMGqwwgmcsyvDge eMj9zv6DUdcp+xqrEQ/Dzvd/cgp/QoBf4BwwWYpb7yWTT3fE8+as/EqS/wlkbXnJ HUV0Ab9i/WvW+8k/dZ6QL/uNrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvzVv/2 ty9mQokt/DuFfTcDyUVuMB8GA1UdIwQYMBaAFAUNwDtdWUWjPquVGBfxZ5vZEMas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjhENy9CNjdGMzAxQTk4 OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJhTS1xNVVZRl9Gbm05a1F4 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRM0FPMTFaUmFNLXE1VVlGX0ZubTlrUXhxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjhENy9CNjdGMzAxQTk4OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJh TS1xNVVZRl9Gbm05a1F4cXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyDtIxNYsX/cZNAEhfffEDDzs50ukuqMvLppoxvvhkCSgOjDyMKGa/1UC7Rh N8xGLIIIzu8Ue0f02YHjVmkdjtUopPRbNBHohaZ/ixDi1CKU2P0wNg+LXtyajOcs oV2TbGZPhDRcHptiDPzSYxZJKKmYAdgN6YUZYqXjf0BuwimhKExDZVNe9UJQSq+D 9zdY8rMcHh+Z5MGnS6IMS2KTh0yQG9FueF1g8aX7NJnk5aMgUPmG5U1BD9r03Lgn /eF7/zNAzCNOuw9VxtvUTrs9R+U86CdZHB7w3tGI7SgA5NhFAB2VwH0EFmvH6Z8U xQDchpmpGTM0XI9JjlHUAKK6oA== -----END CERTIFICATE-----Generated at Sun Aug 30 05:05:56 2026 by rpki-client