$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json) Hash identifier: ROY+Kl1A1I2p83Gls3DlACRoTZ1DdfT0a90sv/PN9ME= Subject key identifier: D5:54:88:19:9C:C6:87:17:7C:2E:79:AF:2D:F7:AF:46:5F:6B:3A:AC Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft Manifest number: BC Signing time: Wed 07 Oct 2026 07:26:05 +0000 Manifest this update: Wed 07 Oct 2026 07:26:05 +0000 Manifest next update: Wed 14 Oct 2026 07:26:05 +0000 Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: I0bNIXvCcThuOsqqHWaA19KBapTTEpLOgxGYQm++4Cs=) 2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Validity Not Before: Oct 7 07:26:05 2026 GMT Not After : Oct 14 07:26:05 2026 GMT Subject: CN=6ac5f40d-5531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:21:20:d3:6a:b8:fe:ac:65:88:e5:a8:aa: 04:b8:49:a6:1f:28:fe:b7:ee:8f:a8:ba:4c:bf:fc: 4a:1a:48:d2:0f:d6:74:e1:3f:96:81:ae:cc:0e:bc: 27:d3:1a:fc:42:b6:94:0e:c7:81:5c:45:3f:93:fd: b0:98:27:8a:fc:cc:8c:86:4c:28:ba:e7:de:08:41: 56:39:b7:54:02:ee:af:16:66:a8:bf:dd:fd:6c:11: cc:82:ba:f2:68:42:3e:4f:a6:10:bd:2f:ed:c2:e2: 48:af:52:5c:70:ce:71:0f:f1:d5:48:9e:bb:e4:60: b5:31:17:38:9a:9a:3b:44:16:78:6a:4a:cf:a9:8c: 9b:e0:04:4e:d5:7c:ec:2c:0b:fe:19:e0:0f:4b:79: 4b:47:98:d4:ad:12:a0:7a:37:49:86:f9:58:19:b5: 50:cd:e6:54:e1:6d:98:62:ab:8d:58:aa:01:9b:9d: 4f:e3:a5:1c:7c:93:fc:50:a4:bf:48:5d:07:85:d2: 50:3a:51:d4:41:b2:fd:91:98:f1:5a:d7:69:8a:3c: e9:95:e7:ef:aa:8a:de:2c:82:30:be:79:c2:3c:18: 44:8a:31:bb:39:8d:5c:42:bd:10:f3:94:3e:ad:e9: 21:1f:53:98:1e:bd:77:c7:9b:ad:22:3e:b2:2a:11: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:88:19:9C:C6:87:17:7C:2E:79:AF:2D:F7:AF:46:5F:6B:3A:AC X509v3 Authority Key Identifier: keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:05:d6:d3:f7:8f:9c:75:fc:15:18:51:09:c7:0c:80:d4:08: 82:a5:7f:06:46:5c:47:35:83:fc:61:90:d4:e9:9d:b4:dd:00: 0e:37:26:a0:9b:cd:82:e6:19:83:46:4f:31:af:05:37:f3:7b: 8f:8c:19:c3:58:1a:4c:17:9c:60:83:f1:55:2a:fd:3b:d4:2b: e4:a9:db:fd:53:a4:3d:02:19:09:9b:ff:b0:bc:4e:cb:f1:72: 98:b1:85:86:9a:fd:b1:37:b4:2e:58:da:19:84:23:a9:db:0b: 1f:85:40:3e:d6:74:33:db:8a:85:d7:2d:aa:66:8d:95:31:ec: f1:5f:80:18:17:55:51:68:f3:77:d9:0b:8e:5c:80:d5:05:d8: a8:be:6e:98:58:67:a0:3d:6e:a7:63:48:56:85:d5:f0:3a:c1: 81:82:22:0a:87:4e:5b:fe:7e:df:07:70:33:c2:be:94:38:b9: 94:4a:49:f2:5c:db:ae:31:8d:c7:fa:41:8c:d4:e8:ae:f7:b3: 35:b7:d9:1d:21:d5:1c:69:48:69:6c:4a:60:9a:04:86:d2:5e: fe:3a:51:7e:9f:ad:96:f3:47:d2:be:3e:81:33:9d:6a:f3:6a: 4c:8c:75:9c:3f:b5:2c:69:09:fb:42:46:f3:c8:5d:f2:20:41: 4a:61:72:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZCQTkxMTAvBgNVBAUTKDA0NTlCQkY3Q0I4NEMxN0VFRDUxQjY4Q0VBRDk0MTk1 N0Q3ODVGQUYwHhcNMjYxMDA3MDcyNjA1WhcNMjYxMDE0MDcyNjA1WjAYMRYwFAYD VQQDEw02YWM1ZjQwZC01NTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjCkhINNquP6sZYjlqKoEuEmmHyj+t+6PqLpMv/xKGkjSD9Z04T+Wga7MDrwn 0xr8QraUDseBXEU/k/2wmCeK/MyMhkwouufeCEFWObdUAu6vFmaov939bBHMgrry aEI+T6YQvS/twuJIr1JccM5xD/HVSJ675GC1MRc4mpo7RBZ4akrPqYyb4ARO1Xzs LAv+GeAPS3lLR5jUrRKgejdJhvlYGbVQzeZU4W2YYquNWKoBm51P46UcfJP8UKS/ SF0HhdJQOlHUQbL9kZjxWtdpijzplefvqoreLIIwvnnCPBhEijG7OY1cQr0Q85Q+ rekhH1OYHr13x5utIj6yKhHpLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVUiBmc xocXfC55ry33r0ZfazqsMB8GA1UdIwQYMBaAFARZu/fLhMF+7VG2jOrZQZV9eF+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkJBOS81NzMwMTU5QUE3 NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdYN3RVYmFNNnRsQmxYMTRY NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JGbTc5OHVFd1g3dFViYU02dGxCbFgxNFg2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkJBOS81NzMwMTU5QUE3NzUxMUYwOTRERUJGMkRDNEY5QUUwMi9CRm03OTh1RXdY N3RVYmFNNnRsQmxYMTRYNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbwXW0/ePnHX8FRhRCccMgNQIgqV/BkZcRzWD/GGQ1OmdtN0ADjcmoJvNguYZ g0ZPMa8FN/N7j4wZw1gaTBecYIPxVSr9O9Qr5Knb/VOkPQIZCZv/sLxOy/FymLGF hpr9sTe0LljaGYQjqdsLH4VAPtZ0M9uKhdctqmaNlTHs8V+AGBdVUWjzd9kLjlyA 1QXYqL5umFhnoD1up2NIVoXV8DrBgYIiCodOW/5+3wdwM8K+lDi5lEpJ8lzbrjGN x/pBjNTorvezNbfZHSHVHGlIaWxKYJoEhtJe/jpRfp+tlvNH0r4+gTOdavNqTIx1 nD+1LGkJ+0JG88hd8iBBSmFyVw== -----END CERTIFICATE-----Generated at Thu Oct 8 19:49:51 2026 by rpki-client