$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: r5+xFAEK4Aqq1Ski6n06SPxHUgTT/9YGaDd90moZ0NI= Subject key identifier: 90:8D:A6:0A:26:AE:86:D9:1F:9A:1D:A9:79:A7:23:EE:AE:11:01:64 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 01A9 Signing time: Wed 09 Sep 2026 04:25:52 +0000 Manifest this update: Wed 09 Sep 2026 04:25:51 +0000 Manifest next update: Wed 16 Sep 2026 04:25:51 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: p1ha2CSfpakySKK8meUIu9g92riWwhxlEq6us+eu5Qc=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 9L09hQIBaOVE5f616sgiqulORBkTSjHL+znxkwZEmL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 04:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Sep 9 04:25:51 2026 GMT Not After : Sep 16 04:25:51 2026 GMT Subject: CN=6aa0dfd0-8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:8f:3d:1e:e4:af:1b:30:4c:9f:3d:7d:9f: 3f:9a:77:b9:6c:42:cf:4d:31:91:f4:63:73:c9:4b: 71:fc:06:b9:99:ce:54:33:2d:cb:63:7a:da:64:2b: ed:e3:50:c0:9e:6f:a3:96:60:06:f8:77:28:9d:b2: 1d:6d:41:34:17:36:7a:0d:60:da:23:60:b3:7e:0f: 57:ba:69:dc:db:f5:e8:b5:2e:e0:d3:2a:19:e8:75: 5b:61:4a:20:87:a7:3e:a2:6c:d6:0c:3d:a0:b5:9c: 8b:f8:26:7c:42:da:a0:57:17:2d:4e:31:b0:7c:77: 80:26:c2:11:6b:2b:8f:2c:c0:36:ee:01:20:18:31: 6f:5f:d9:b3:5c:42:b3:c1:94:59:09:1b:0d:5f:0f: 96:fb:44:8c:2f:b5:e4:5e:bc:93:d9:d5:36:ff:da: 0c:b2:ab:1b:69:d7:e7:91:e6:9c:96:9d:c5:d4:c1: eb:3f:fc:57:e9:85:93:2e:92:0e:3d:b0:1e:e1:3a: 8e:6a:42:dd:a6:e8:18:58:ee:d6:2b:d7:e5:e4:ce: e2:76:1d:4f:18:61:83:b9:7d:e5:35:59:3c:21:dc: 7a:dd:7c:37:42:ed:0c:04:38:83:f8:03:a6:c8:4f: 11:60:79:02:7f:70:ca:ec:de:f3:e0:3d:12:1e:09: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:A6:0A:26:AE:86:D9:1F:9A:1D:A9:79:A7:23:EE:AE:11:01:64 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e1:1f:db:b7:82:3e:44:9d:22:ff:a9:f5:38:68:39:7d:77: 30:1c:b1:ea:d5:c6:13:7b:a5:da:38:a2:79:ee:a3:ca:aa:6b: cf:a1:3b:df:1d:ba:ad:3a:57:af:8d:60:22:f9:92:26:8d:38: 89:dc:0d:6e:2f:b2:99:32:81:06:6f:1c:f0:c0:74:a9:cd:69: 64:14:80:31:26:09:ed:b5:ef:6e:1b:0d:92:d9:8d:38:09:59: 21:24:c8:3f:af:55:2d:32:ab:0d:eb:18:3d:21:90:10:43:bf: 5b:b4:02:18:ac:76:fa:36:30:3f:f3:93:4f:d3:e8:46:16:ba: 87:1f:16:be:6e:8b:46:88:14:e5:23:a8:c4:61:12:44:6c:00: 75:28:f9:4d:4a:bc:8e:6a:c7:fb:35:c7:6f:05:4e:b0:53:97: 64:be:7e:ef:05:63:5f:1f:c0:8f:34:c2:77:4e:59:ff:f0:7a: a2:12:4c:e1:2e:fa:8c:71:88:93:d1:47:f2:77:e3:0f:30:66: 51:99:92:2a:09:35:a0:dd:18:ea:3d:b4:76:d4:c3:c6:2a:a6: 66:f3:5a:ef:b7:1c:50:2c:08:60:bc:c5:cf:c8:6e:13:07:70: 7e:9c:07:3e:d4:3d:63:e5:22:9e:cb:a2:63:dd:d1:8d:09:32: 9f:65:d2:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwOTA5MDQyNTUxWhcNMjYwOTE2MDQyNTUxWjAYMRYwFAYD VQQDEw02YWEwZGZkMC04YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05qPPR7krxswTJ89fZ8/mne5bELPTTGR9GNzyUtx/Aa5mc5UMy3LY3raZCvt 41DAnm+jlmAG+HconbIdbUE0FzZ6DWDaI2Czfg9Xumnc2/XotS7g0yoZ6HVbYUog h6c+omzWDD2gtZyL+CZ8QtqgVxctTjGwfHeAJsIRayuPLMA27gEgGDFvX9mzXEKz wZRZCRsNXw+W+0SML7XkXryT2dU2/9oMsqsbadfnkeaclp3F1MHrP/xX6YWTLpIO PbAe4TqOakLdpugYWO7WK9fl5M7idh1PGGGDuX3lNVk8Idx63Xw3Qu0MBDiD+AOm yE8RYHkCf3DK7N7z4D0SHgkZUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCNpgom robZH5odqXmnI+6uEQFkMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjuEf27eCPkSdIv+p9ThoOX13MByx6tXGE3ul2jiiee6jyqprz6E73x26rTpX r41gIvmSJo04idwNbi+ymTKBBm8c8MB0qc1pZBSAMSYJ7bXvbhsNktmNOAlZISTI P69VLTKrDesYPSGQEEO/W7QCGKx2+jYwP/OTT9PoRha6hx8Wvm6LRogU5SOoxGES RGwAdSj5TUq8jmrH+zXHbwVOsFOXZL5+7wVjXx/AjzTCd05Z//B6ohJM4S76jHGI k9FH8nfjDzBmUZmSKgk1oN0Y6j20dtTDxiqmZvNa77ccUCwIYLzFz8huEwdwfpwH PtQ9Y+UinsuiY93RjQkyn2XS9A== -----END CERTIFICATE-----Generated at Fri Sep 11 04:32:29 2026 by rpki-client