$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: FT68di1enfDCgFH3LBYX4lxS4y3LIO8KYCEFt2XVthg= Subject key identifier: EB:34:1F:1F:CF:9A:E0:3F:20:E1:7B:C0:84:FC:24:86:A3:41:A9:BD Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 05C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 0595 Signing time: Sun 04 Oct 2026 23:19:48 +0000 Manifest this update: Sun 04 Oct 2026 23:19:47 +0000 Manifest next update: Sun 11 Oct 2026 23:19:47 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: fWNzOOnWFzXt7yFykvkWv7LfRS2OtuFcn8lw66vmt9E=) 2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=) 3: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=) 4: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 23:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1476 (0x5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Oct 4 23:19:47 2026 GMT Not After : Oct 11 23:19:47 2026 GMT Subject: CN=6ac2df13-30c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:9d:7d:73:ba:34:e2:d3:6c:a0:52:07:ed: 4d:fe:e6:79:69:cd:47:e6:08:9e:ee:12:83:52:93: 6b:da:bb:34:18:2c:ad:e5:7a:fa:0c:13:e9:2e:3b: 43:b7:37:2f:52:8d:1c:2c:df:6e:09:bc:55:b2:df: 9e:1e:55:31:18:c5:b2:fd:d9:aa:8f:56:00:fc:15: 8c:d0:9c:03:20:e7:7f:ac:e9:da:44:0c:00:1c:45: 4c:30:c6:cb:f8:89:1c:f0:1b:99:32:a5:89:c3:59: 06:19:e2:b2:d9:97:b5:d7:25:ab:1c:85:65:dc:62: 1f:39:89:98:34:31:01:5e:b2:f8:5d:c8:20:b5:59: 1b:07:ff:3d:04:8b:e8:75:73:c2:bd:a0:86:6a:ca: c3:20:98:c2:2c:74:fa:60:af:fd:97:f2:83:b2:c3: 49:f3:fe:6a:4d:4a:00:79:ef:9e:24:7e:e5:7e:e5: 0d:7b:78:1c:42:53:3a:57:98:1a:49:d6:2e:48:61: 32:9e:65:dd:f1:65:3a:9b:bf:ab:a6:28:a0:f1:98: 9f:c0:51:fd:e3:c4:3b:7f:bc:e0:a6:66:be:d3:4f: 41:ef:dd:29:34:19:5f:01:3f:7f:58:3f:9a:6d:0e: 56:c9:a9:44:0a:d1:02:e2:f4:3b:79:d8:fb:e6:c9: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:1F:1F:CF:9A:E0:3F:20:E1:7B:C0:84:FC:24:86:A3:41:A9:BD X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e8:21:06:f9:56:77:5e:e3:7a:24:76:7a:dc:0a:8f:d7:73: cf:50:8e:4b:93:a7:02:17:3d:d1:7a:d3:32:4e:ea:91:ea:10: ec:60:1d:16:38:c0:d1:92:ec:f0:d6:19:26:b9:2d:60:32:c4: c7:93:e9:2a:a7:42:f6:4f:0b:ff:a1:76:19:11:f6:4c:90:44: ca:32:1b:b4:95:79:28:45:3e:c5:6b:71:ee:07:99:e8:12:a4: 58:17:76:ee:cd:1c:e1:27:a7:1d:58:d4:b2:27:bb:b1:4d:03: 50:ae:07:90:8c:9f:be:1e:f0:98:b0:ef:91:b7:55:f1:fb:75: 62:b9:bd:e5:fd:49:03:1a:69:55:6d:64:b8:13:41:52:0d:25: 91:2b:cb:be:18:1a:bf:b1:07:2e:5d:a4:5a:a7:f3:12:f0:78: fd:ba:b7:76:1c:fd:70:c2:f2:b3:78:54:4a:73:f0:c2:a2:8d: 4c:ce:82:08:07:89:86:53:1b:fe:bc:cd:b8:b1:b9:23:9f:ab: 22:d4:d3:c1:d3:41:11:eb:31:b0:87:87:25:f2:ce:b2:4d:c0: 69:f1:f7:b2:f4:c7:1d:81:43:d4:1a:dd:17:f6:1b:7b:ec:d3: 9b:aa:a9:c7:7c:9e:20:00:85:cb:03:47:1d:ff:32:d3:86:f1: ea:a1:d6:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjYxMDA0MjMxOTQ3WhcNMjYxMDExMjMxOTQ3WjAYMRYwFAYD VQQDEw02YWMyZGYxMy0zMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnWdfXO6NOLTbKBSB+1N/uZ5ac1H5gie7hKDUpNr2rs0GCyt5Xr6DBPpLjtD tzcvUo0cLN9uCbxVst+eHlUxGMWy/dmqj1YA/BWM0JwDIOd/rOnaRAwAHEVMMMbL +Ikc8BuZMqWJw1kGGeKy2Ze11yWrHIVl3GIfOYmYNDEBXrL4XcggtVkbB/89BIvo dXPCvaCGasrDIJjCLHT6YK/9l/KDssNJ8/5qTUoAee+eJH7lfuUNe3gcQlM6V5ga SdYuSGEynmXd8WU6m7+rpiig8ZifwFH948Q7f7zgpma+009B790pNBlfAT9/WD+a bQ5WyalECtEC4vQ7edj75skiFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOs0Hx/P muA/IOF7wIT8JIajQam9MB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAROghBvlWd17jeiR2etwKj9dzz1COS5OnAhc90XrTMk7qkeoQ7GAdFjjA0ZLs 8NYZJrktYDLEx5PpKqdC9k8L/6F2GRH2TJBEyjIbtJV5KEU+xWtx7geZ6BKkWBd2 7s0c4SenHVjUsie7sU0DUK4HkIyfvh7wmLDvkbdV8ft1Yrm95f1JAxppVW1kuBNB Ug0lkSvLvhgav7EHLl2kWqfzEvB4/bq3dhz9cMLys3hUSnPwwqKNTM6CCAeJhlMb /rzNuLG5I5+rItTTwdNBEesxsIeHJfLOsk3AafH3svTHHYFD1BrdF/Ybe+zTm6qp x3yeIACFywNHHf8y04bx6qHWBg== -----END CERTIFICATE-----Generated at Tue Oct 6 04:30:44 2026 by rpki-client