$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft File: BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json) Hash identifier: EQSwNSi6ovJGQHc2FgA4dXQJ+tqfEpDa6s6NOzudd3w= Subject key identifier: C3:7D:38:4E:C4:B5:24:7F:9B:E7:B7:2F:21:32:06:B1:BE:BC:16:EC Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft Manifest number: EC Signing time: Sat 05 Sep 2026 06:12:24 +0000 Manifest this update: Sat 05 Sep 2026 06:12:24 +0000 Manifest next update: Sat 12 Sep 2026 06:12:24 +0000 Files and hashes: 1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: SBZn/64QZJw7yu4p3SSiczJsc/floxfabKrcSQ+qmEA=) 2: 7B744F9C754311F1B2D369B17FA30FBC.roa (hash: 6h+dViv9HHF043rn54yjzvjKc8Qv6o5bk2lEUKwA0u0=) 3: 6BB1AB46753D11F192ADDCCA7EA30FBC.roa (hash: 54hEOegvqKHFu2sFkesEF7BLwvXcxGU9hQJpTA8Y7Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Validity Not Before: Sep 5 06:12:24 2026 GMT Not After : Sep 12 06:12:24 2026 GMT Subject: CN=6a9bb2c8-13a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:04:5a:bc:cf:11:15:bb:3b:a9:a5:d3:89: 18:9f:25:cd:72:1c:02:d0:f9:9f:4a:02:ec:d3:0a: c4:4b:84:8d:48:a1:d0:9e:e4:8d:1e:5b:a9:08:01: fb:d2:10:dd:e6:7c:78:d9:82:e6:b9:81:a1:f1:67: 1f:e0:50:31:2b:01:80:44:1f:65:01:0a:61:53:c1: 61:3f:bb:f9:01:8b:41:b3:c7:f9:d8:b0:2c:89:5d: 83:6e:05:00:4e:18:72:99:02:1d:3a:ab:6b:28:a1: 9d:cc:d1:27:97:50:54:f8:1b:cf:4f:41:57:ed:7e: 75:2a:2b:f4:50:8e:63:1d:a3:34:f3:5b:b3:3c:6a: c0:0c:35:de:bd:de:3c:cb:31:89:26:84:4d:60:81: fe:04:73:9b:37:12:37:3d:3f:aa:49:38:33:bf:78: ae:9b:65:82:92:3f:23:c6:aa:c9:4f:4a:07:d7:91: b0:a7:5a:40:71:2d:cb:c7:5e:e0:0a:3a:2c:c8:ab: 40:17:b9:31:7d:dd:f9:71:3b:1b:b1:6a:6c:dd:74: a6:e2:4c:11:bd:43:ff:d8:35:65:26:04:28:14:9c: fa:d3:0d:e5:c6:17:ce:b2:71:fe:a1:0f:99:f5:a2: 69:4a:0b:cf:2a:cd:71:1e:c4:c4:30:e4:50:1e:15: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7D:38:4E:C4:B5:24:7F:9B:E7:B7:2F:21:32:06:B1:BE:BC:16:EC X509v3 Authority Key Identifier: keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:bc:f0:10:45:d5:d5:ed:dc:bd:67:71:e1:30:dd:d0:1f: 9f:b4:40:38:ed:ee:67:c2:99:52:21:ec:83:4f:8b:b5:28:1f: 56:61:78:f3:58:6e:3d:1b:6b:54:e4:cc:0b:c0:99:e5:0e:3a: f4:89:9c:90:ba:2a:a3:15:63:ea:ad:07:45:fe:d3:b4:35:9b: 59:8b:8c:d3:54:9b:20:2d:5a:2f:7f:b5:4c:1c:64:06:36:c6: 38:74:42:fe:1b:32:33:cb:93:aa:d7:cb:c0:ed:ab:8a:84:d9: 3a:6a:d7:fe:91:cb:45:9d:49:c7:08:b0:c0:5f:fb:3a:ca:6e: 09:6e:63:41:71:7e:97:76:16:ca:f8:80:08:c9:eb:c4:27:8d: 64:c7:a9:ff:6d:d0:d7:38:f8:dc:b1:3c:cc:e9:9e:fa:3f:94: 0f:73:b3:33:23:4d:61:98:51:bc:64:0c:8e:12:1d:00:c5:a3: cc:a1:7a:fa:c2:2b:25:60:3b:7d:ac:ce:28:bc:79:a9:02:15: 09:88:6e:46:c6:d0:a3:a3:79:a1:2b:03:1a:89:de:23:48:fb: 14:0c:29:99:70:04:03:6e:26:83:d7:2e:1b:c9:df:fe:5c:50: d5:15:ef:09:19:ee:2d:68:c4:d5:41:f8:f5:ee:8c:92:82:aa: a2:cc:8e:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDA2Q0I0OEY1N0Q1NDNBOTc4MkQ4QTdDOTZEQTRFMURF REJDM0MzMEIwHhcNMjYwOTA1MDYxMjI0WhcNMjYwOTEyMDYxMjI0WjAYMRYwFAYD VQQDEw02YTliYjJjOC0xM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvEEWrzPERW7O6ml04kYnyXNchwC0PmfSgLs0wrES4SNSKHQnuSNHlupCAH7 0hDd5nx42YLmuYGh8Wcf4FAxKwGARB9lAQphU8FhP7v5AYtBs8f52LAsiV2DbgUA ThhymQIdOqtrKKGdzNEnl1BU+BvPT0FX7X51Kiv0UI5jHaM081uzPGrADDXevd48 yzGJJoRNYIH+BHObNxI3PT+qSTgzv3ium2WCkj8jxqrJT0oH15Gwp1pAcS3Lx17g CjosyKtAF7kxfd35cTsbsWps3XSm4kwRvUP/2DVlJgQoFJz60w3lxhfOsnH+oQ+Z 9aJpSgvPKs1xHsTEMORQHhXV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMN9OE7E tSR/m+e3LyEyBrG+vBbsMB8GA1UdIwQYMBaAFAbLSPV9VDqXgtinyW2k4d7bw8ML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BMzE0ODQ3QzQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9wZUMyS2ZKYmFUaDN0dkR3 d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JzdEk5WDFVT3BlQzJLZkpiYVRoM3R2RHd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BMzE0ODQ3QzQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9w ZUMyS2ZKYmFUaDN0dkR3d3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiq+88BBF1dXt3L1nceEw3dAfn7RAOO3uZ8KZUiHsg0+LtSgfVmF481huPRtr VOTMC8CZ5Q469ImckLoqoxVj6q0HRf7TtDWbWYuM01SbIC1aL3+1TBxkBjbGOHRC /hsyM8uTqtfLwO2rioTZOmrX/pHLRZ1JxwiwwF/7OspuCW5jQXF+l3YWyviACMnr xCeNZMep/23Q1zj43LE8zOme+j+UD3OzMyNNYZhRvGQMjhIdAMWjzKF6+sIrJWA7 fazOKLx5qQIVCYhuRsbQo6N5oSsDGoneI0j7FAwpmXAEA24mg9cuG8nf/lxQ1RXv CRnuLWjE1UH49e6MkoKqosyOqg== -----END CERTIFICATE-----Generated at Sat Sep 5 17:46:11 2026 by rpki-client