$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: tT0fU5CjR2suxyVMknU1Z8uglv4mNe+6nLejBQm6rm0= Subject key identifier: B8:14:B6:03:28:D6:79:E2:66:24:E6:1A:07:5C:08:AD:4B:81:82:A3 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: 01B8 Signing time: Mon 05 Oct 2026 04:17:27 +0000 Manifest this update: Mon 05 Oct 2026 04:17:26 +0000 Manifest next update: Mon 12 Oct 2026 04:17:26 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: s7ABhuSj69aD0+b1ULibvQZ2oI4ENAoOgykykG4VLZY=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: SnIg7jkVKoNtfhOzS+GGzcDFetRrORpxHiWrxQCh8as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Oct 5 04:17:26 2026 GMT Not After : Oct 12 04:17:26 2026 GMT Subject: CN=6ac324d7-e35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:a0:35:d4:f6:66:1f:d2:d1:95:23:07:50: f7:a2:4e:cd:46:a9:b5:dc:d9:3f:64:8b:04:bf:13: ee:8b:75:bf:0c:5e:24:92:0a:b4:40:2b:75:42:b4: c4:6a:ee:ad:70:76:aa:e8:59:57:27:74:d0:fa:1d: 91:3f:54:90:ec:3a:12:a1:2d:a7:36:5f:5b:1e:74: 13:7e:2c:a4:e4:96:2d:ce:7b:34:c5:57:c6:e5:70: f5:ea:d9:49:dc:d3:4b:d5:c3:aa:ab:5d:78:00:17: 6b:de:22:91:99:e6:6b:21:c5:90:85:a5:5c:27:92: bd:ee:b1:db:b7:fa:6b:59:e9:d5:46:23:be:88:1c: 8a:97:c2:59:a9:c8:b9:14:8b:34:f3:3b:53:58:22: 41:9d:81:35:41:1a:fd:28:96:6b:45:ae:f2:e2:ff: a2:3a:b9:95:d0:4f:55:ca:4d:c0:27:3b:fe:18:e9: e4:6a:2a:5c:cc:13:23:43:fd:15:55:64:74:6d:66: 83:8c:5c:1b:cc:48:33:4c:f2:c2:ed:df:22:17:8a: 50:11:50:64:aa:48:cc:2d:9d:75:f0:81:b6:f5:ea: 3d:af:ae:3e:87:14:7d:17:db:e7:bd:a8:25:1b:0e: ec:55:f0:f8:48:c3:9d:3b:62:83:16:46:96:c4:da: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:14:B6:03:28:D6:79:E2:66:24:E6:1A:07:5C:08:AD:4B:81:82:A3 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2f:86:b1:bc:3c:05:f3:01:00:73:5f:c7:06:ae:f8:06:02: 2d:6a:cf:a2:98:d9:ba:7d:7a:c6:37:9d:ae:db:dd:63:87:29: 40:37:f1:fa:43:e3:8e:41:b6:43:6b:e8:ae:6a:2c:6e:53:e0: 25:48:81:0f:bd:8e:39:15:af:b1:5e:c0:8d:88:17:41:9b:01: dd:49:1f:d7:05:a3:bd:ea:63:eb:f4:3f:c4:e7:ee:51:eb:07: d5:4a:40:e6:9f:67:b9:ae:e2:db:cf:6f:a4:17:46:e1:4a:b1: ba:d1:99:f2:f0:7d:a5:09:e9:de:50:82:df:44:9e:3c:49:ff: d4:b4:22:e7:eb:4f:ee:e6:42:80:27:15:65:11:61:e0:1b:c2: f1:86:a1:f2:a6:12:1a:7c:4c:19:84:90:ef:8d:38:36:55:47: 41:f2:50:eb:11:3f:eb:20:09:d3:31:58:2a:b7:6b:1d:98:d2: b2:4f:35:3e:b0:f5:f2:3f:85:d2:42:fc:24:76:47:39:87:64: ad:51:f1:f0:ee:27:f8:08:d6:02:02:dd:63:ab:c0:9e:e9:bc: ec:99:ac:0f:86:5e:81:dd:e3:bf:e9:a5:d3:fc:fe:b5:c6:a0: 9f:f1:83:9b:b2:e1:d0:50:62:c4:71:4b:64:23:f6:a3:89:ef: fe:c3:77:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjYxMDA1MDQxNzI2WhcNMjYxMDEyMDQxNzI2WjAYMRYwFAYD VQQDEw02YWMzMjRkNy1lMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg+gNdT2Zh/S0ZUjB1D3ok7NRqm13Nk/ZIsEvxPui3W/DF4kkgq0QCt1QrTE au6tcHaq6FlXJ3TQ+h2RP1SQ7DoSoS2nNl9bHnQTfiyk5JYtzns0xVfG5XD16tlJ 3NNL1cOqq114ABdr3iKRmeZrIcWQhaVcJ5K97rHbt/prWenVRiO+iByKl8JZqci5 FIs08ztTWCJBnYE1QRr9KJZrRa7y4v+iOrmV0E9Vyk3AJzv+GOnkaipczBMjQ/0V VWR0bWaDjFwbzEgzTPLC7d8iF4pQEVBkqkjMLZ118IG29eo9r64+hxR9F9vnvagl Gw7sVfD4SMOdO2KDFkaWxNp+JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgUtgMo 1nniZiTmGgdcCK1LgYKjMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMC+Gsbw8BfMBAHNfxwau+AYCLWrPopjZun16xjedrtvdY4cpQDfx+kPjjkG2 Q2vormosblPgJUiBD72OORWvsV7AjYgXQZsB3Ukf1wWjvepj6/Q/xOfuUesH1UpA 5p9nua7i289vpBdG4UqxutGZ8vB9pQnp3lCC30SePEn/1LQi5+tP7uZCgCcVZRFh 4BvC8Yah8qYSGnxMGYSQ7404NlVHQfJQ6xE/6yAJ0zFYKrdrHZjSsk81PrD18j+F 0kL8JHZHOYdkrVHx8O4n+AjWAgLdY6vAnum87JmsD4Zegd3jv+ml0/z+tcagn/GD m7Lh0FBixHFLZCP2o4nv/sN3aA== -----END CERTIFICATE-----Generated at Tue Oct 6 22:09:33 2026 by rpki-client