$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: z4LTD5Q/rM0gle1n1AOJuwvanOmi7j1G/VwocOQdGHU= Subject key identifier: C6:D5:A7:23:DC:05:D5:BA:3A:AF:16:0E:F5:A3:DC:AB:A8:3F:83:DC Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 012B Signing time: Thu 03 Sep 2026 05:55:23 +0000 Manifest this update: Thu 03 Sep 2026 05:55:23 +0000 Manifest next update: Thu 10 Sep 2026 05:55:23 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: LKEdPJwKithA6Mwjy8n4c9ZXJKUKbVZpyMzbKidAFsc=) 2: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=) 3: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Sep 3 05:55:23 2026 GMT Not After : Sep 10 05:55:23 2026 GMT Subject: CN=6a990bcb-a9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:1a:5a:3c:c9:99:3d:bc:ae:00:42:b6:0a: 7b:7d:9c:70:0c:4e:93:a7:29:29:be:cb:98:58:4f: 23:bc:dc:8b:ed:24:db:01:9c:55:db:38:03:02:8e: 8a:0b:e8:a2:28:3d:23:7e:17:09:5f:a9:0d:c1:20: 85:08:3c:77:f0:81:4a:30:9f:c7:03:be:15:92:4a: 15:8b:98:33:79:eb:a4:0a:94:9f:5a:ff:2f:49:b2: fe:92:48:92:40:bf:85:4d:15:67:04:a1:e8:9b:54: d8:9a:5f:e6:1d:a0:35:38:e6:f4:ac:fd:60:64:ec: 41:59:ec:2b:1e:bf:a5:ff:8d:6c:7b:06:ac:4f:f3: 15:57:63:ca:d0:d2:87:33:52:92:8f:d5:d0:03:39: 84:07:87:ee:e8:cd:58:e1:c3:cb:d1:16:2f:b7:8c: 4b:0a:e7:01:bd:5c:e2:4f:cb:3e:86:0c:21:8d:5a: 6b:c0:59:7d:88:8e:e3:53:be:cc:df:3f:70:1c:37: f2:79:29:68:9b:3d:e9:fb:a1:51:00:c6:e3:86:a9: e7:95:ec:05:70:36:21:cf:a2:e9:ed:8e:db:10:8b: ba:52:6d:6a:f8:1f:60:78:cd:40:80:ce:3c:13:7e: 0c:5d:33:29:10:92:c1:cf:b2:48:3e:eb:ae:57:d9: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:A7:23:DC:05:D5:BA:3A:AF:16:0E:F5:A3:DC:AB:A8:3F:83:DC X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:bd:4b:f8:b7:06:6b:df:9b:83:e9:d0:49:3e:5c:3e:de: c7:9d:07:60:bd:05:a5:43:0b:12:bc:77:a4:88:62:81:cc:bb: 56:61:91:30:81:22:ee:10:00:a5:5e:45:42:d5:6b:68:b1:8b: f2:24:d1:62:57:0d:52:ad:f2:1b:22:2e:6a:d7:90:12:ba:9b: 20:e2:62:5f:86:0a:a8:b3:4b:3c:89:18:d3:be:7a:fc:59:6d: 6c:06:41:07:2f:78:ba:69:0f:62:22:95:fc:e1:64:04:d0:03: 15:56:28:11:9e:fb:f6:bf:f9:c2:34:4f:8b:b6:e7:b0:70:cd: 5f:95:73:01:75:81:17:bb:c2:91:62:f3:d8:0f:96:b5:2b:20: 4d:88:74:2b:dc:e5:df:49:b1:59:5a:cd:95:1b:5a:ed:38:d9: 05:95:0b:4f:b8:18:3f:42:b0:4a:31:70:dd:ab:4c:66:de:0a: 0f:7d:bf:02:77:b6:d5:a5:f4:8f:19:a7:02:53:18:92:2e:bb: 1c:b0:b2:85:e4:68:f1:9a:31:bf:26:db:a7:23:09:af:7a:b7: 70:d2:5a:2f:1a:f5:46:0c:69:2a:8f:f0:91:df:e9:44:c1:93: e9:89:2a:6f:89:51:b5:7f:78:6c:01:d0:9a:88:30:ab:5b:5a: 3c:c8:cc:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwOTAzMDU1NTIzWhcNMjYwOTEwMDU1NTIzWjAYMRYwFAYD VQQDEw02YTk5MGJjYi1hOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbEaWjzJmT28rgBCtgp7fZxwDE6TpykpvsuYWE8jvNyL7STbAZxV2zgDAo6K C+iiKD0jfhcJX6kNwSCFCDx38IFKMJ/HA74VkkoVi5gzeeukCpSfWv8vSbL+kkiS QL+FTRVnBKHom1TYml/mHaA1OOb0rP1gZOxBWewrHr+l/41sewasT/MVV2PK0NKH M1KSj9XQAzmEB4fu6M1Y4cPL0RYvt4xLCucBvVziT8s+hgwhjVprwFl9iI7jU77M 3z9wHDfyeSlomz3p+6FRAMbjhqnnlewFcDYhz6Lp7Y7bEIu6Um1q+B9geM1AgM48 E34MXTMpEJLBz7JIPuuuV9kJyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbVpyPc BdW6Oq8WDvWj3KuoP4PcMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIGG9S/i3Bmvfm4Pp0Ek+XD7ex50HYL0FpUMLErx3pIhigcy7VmGRMIEi7hAA pV5FQtVraLGL8iTRYlcNUq3yGyIuateQErqbIOJiX4YKqLNLPIkY0756/FltbAZB By94umkPYiKV/OFkBNADFVYoEZ779r/5wjRPi7bnsHDNX5VzAXWBF7vCkWLz2A+W tSsgTYh0K9zl30mxWVrNlRta7TjZBZULT7gYP0KwSjFw3atMZt4KD32/Ane21aX0 jxmnAlMYki67HLCyheRo8ZoxvybbpyMJr3q3cNJaLxr1RgxpKo/wkd/pRMGT6Ykq b4lRtX94bAHQmogwq1taPMjMxQ== -----END CERTIFICATE-----Generated at Sat Sep 5 02:37:53 2026 by rpki-client