$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: EaB1Di0/kf6tVun03N1DktFGkUoOusmJDbB2nREIhls= Subject key identifier: C9:4C:66:5A:26:E0:A7:9B:40:AF:55:74:8B:6A:7C:FF:8B:D1:CD:E7 Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 1B36 Signing time: Wed 28 Oct 2026 16:48:16 +0000 Manifest this update: Wed 28 Oct 2026 16:48:15 +0000 Manifest next update: Wed 04 Nov 2026 16:48:15 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: 4LAt8d9NGrHgXH52Gn3doWsk9+SgCZ+/8odF+8Tpe7I=) 2: BB90B3249BE811F188B60C046311F970.roa (hash: adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=) 3: 5A46B5469BE811F1A1CB396A6211F970.roa (hash: htCWMQwYnAdNrZ7ue5iAAfX45+MA9QIuh6+oV7sF4po=) 4: D3BEF96E9DFB11F186DD6C154711F970.roa (hash: wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Oct 28 16:48:15 2026 GMT Not After : Nov 4 16:48:15 2026 GMT Subject: CN=6ae2274f-8085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:52:8b:c0:b4:f3:c4:81:69:b5:68:0d:29: d6:6b:61:c9:22:83:b1:6a:1d:56:18:0f:2f:66:7a: 09:49:be:d2:3c:b8:dd:78:2f:aa:7e:fd:b2:d5:74: b6:dd:de:53:84:6c:1e:17:63:5e:d6:91:93:1e:63: f4:e4:75:74:2a:86:45:fc:cd:53:62:85:d4:29:fb: 6c:b3:61:80:01:fe:0f:d9:23:91:4a:5f:9f:b0:28: 89:f3:8f:9a:65:1e:c0:cd:fc:d0:a9:ca:f9:13:e8: e1:ff:2c:42:58:f2:d9:d7:d8:56:16:6a:08:69:6e: ec:71:37:81:e0:1b:f2:00:2d:5b:96:31:1c:34:e8: 13:84:70:27:e9:d5:ee:fd:2a:6f:55:c6:7b:c6:50: a0:1f:ae:fd:10:e3:ff:50:4a:bc:1a:97:bd:e2:08: 3b:a3:63:05:08:93:b8:68:ce:d7:06:2e:a4:36:18: 5b:e6:b9:fc:8d:2a:73:ba:06:eb:a6:52:d9:02:29: 82:d7:9a:4a:ff:a1:70:45:21:10:80:99:66:80:7b: df:36:81:02:d2:71:cd:ac:2d:5e:90:9c:fd:13:48: 8f:16:1c:92:5d:38:a8:a6:74:33:9e:96:6e:9a:df: 7c:e5:37:43:a7:df:b2:0d:a1:be:1c:2e:4d:65:36: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4C:66:5A:26:E0:A7:9B:40:AF:55:74:8B:6A:7C:FF:8B:D1:CD:E7 X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ed:31:5a:ab:7a:74:7b:fd:38:56:54:c0:e2:e2:e0:42:61: 58:be:51:d2:e9:2a:b4:96:81:6b:33:1e:17:5e:cd:44:23:e7: f6:e0:fa:82:df:1c:d3:96:b8:9f:48:45:be:c2:a2:81:80:ad: 76:a5:ff:50:93:bd:9c:e4:10:d7:1b:5f:c3:92:da:b8:ef:cc: 37:e6:43:80:4e:59:4e:2f:00:55:4d:bc:d4:8a:d0:87:be:6a: 91:f0:0d:b0:48:c5:f1:69:9f:d9:c5:2d:d7:78:a5:89:ff:0c: 24:73:ce:7e:02:e7:32:4d:e6:5e:7a:31:21:56:c1:d8:13:af: c8:20:38:7b:4b:90:4a:28:f2:48:f7:ed:7c:62:70:d4:f0:fe: 93:5b:be:35:4d:ba:9c:52:ef:34:ea:03:ad:37:41:eb:44:a6: e4:60:5d:4b:25:9a:20:f0:bb:dc:32:dd:ee:37:fd:d7:54:cf: 73:0a:db:0f:25:1f:f6:c9:fc:08:37:90:9d:9f:8c:f2:a1:27: bc:56:6b:e4:6c:26:61:8c:45:df:07:7e:7f:e4:e5:ad:92:33: 9f:59:fb:a1:86:28:5b:08:00:a0:ee:32:b5:06:64:d1:72:e3: 52:eb:14:60:ac:e2:2f:dd:1e:4a:51:aa:ab:e8:6f:ee:b0:c6: 37:a7:3f:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjYxMDI4MTY0ODE1WhcNMjYxMTA0MTY0ODE1WjAYMRYwFAYD VQQDEw02YWUyMjc0Zi04MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBJSi8C088SBabVoDSnWa2HJIoOxah1WGA8vZnoJSb7SPLjdeC+qfv2y1XS2 3d5ThGweF2Ne1pGTHmP05HV0KoZF/M1TYoXUKftss2GAAf4P2SORSl+fsCiJ84+a ZR7AzfzQqcr5E+jh/yxCWPLZ19hWFmoIaW7scTeB4BvyAC1bljEcNOgThHAn6dXu /SpvVcZ7xlCgH679EOP/UEq8Gpe94gg7o2MFCJO4aM7XBi6kNhhb5rn8jSpzugbr plLZAimC15pK/6FwRSEQgJlmgHvfNoEC0nHNrC1ekJz9E0iPFhySXTiopnQznpZu mt985TdDp9+yDaG+HC5NZTZQAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlMZlom 4KebQK9VdItqfP+L0c3nMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUO0xWqt6dHv9OFZUwOLi4EJhWL5R0ukqtJaBazMeF17NRCPn9uD6gt8c05a4 n0hFvsKigYCtdqX/UJO9nOQQ1xtfw5LauO/MN+ZDgE5ZTi8AVU281IrQh75qkfAN sEjF8Wmf2cUt13ilif8MJHPOfgLnMk3mXnoxIVbB2BOvyCA4e0uQSijySPftfGJw 1PD+k1u+NU26nFLvNOoDrTdB60Sm5GBdSyWaIPC73DLd7jf911TPcwrbDyUf9sn8 CDeQnZ+M8qEnvFZr5GwmYYxF3wd+f+TlrZIzn1n7oYYoWwgAoO4ytQZk0XLjUusU YKziL90eSlGqq+hv7rDGN6c/eQ== -----END CERTIFICATE-----Generated at Wed Oct 28 21:00:25 2026 by rpki-client