$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: OrjLL38hmXlrG3sY8iwp4/RLoftm1mQFwkC6WnSw/QQ= Subject key identifier: 33:4B:F8:E5:3E:8F:7F:43:BA:52:D1:3F:34:9C:89:A4:0F:D5:A9:9C Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 05F2 Signing time: Fri 02 Oct 2026 23:15:30 +0000 Manifest this update: Fri 02 Oct 2026 23:15:30 +0000 Manifest next update: Fri 09 Oct 2026 23:15:30 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: ofhVSab+wPV+CSJUjTxqQHcqtHxPzd0GHS9UuaMhEvY=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Oct 2 23:15:30 2026 GMT Not After : Oct 9 23:15:30 2026 GMT Subject: CN=6ac03b12-c03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:a1:b6:0a:df:c2:a8:52:93:d9:bc:c7:8e: 61:c2:98:4f:45:47:54:cc:d5:f6:68:2a:37:e5:00: f5:16:4c:c2:2c:7d:81:84:46:08:35:19:a3:7b:c2: f4:2a:4f:6e:cb:ee:4d:8a:69:5e:af:52:d1:b7:f8: 7a:7a:ab:d5:0e:a8:9c:47:0d:b5:0d:b7:26:be:ce: 78:ff:fc:7c:c5:00:97:39:25:74:4b:c9:1d:65:db: 2b:b7:28:ce:56:18:c8:3b:df:2f:94:c0:c7:6c:bb: 0f:4e:27:1c:30:f6:73:98:c0:d8:aa:bc:25:e0:71: 8d:3b:60:d9:96:50:68:55:4d:17:6d:77:b6:86:ee: d4:78:15:58:24:5a:39:52:6c:28:23:72:c4:7b:0f: 92:b4:9c:1a:b9:ca:35:ea:5f:0a:dd:56:ed:fe:5a: f7:2e:99:9b:7f:85:33:56:5c:62:83:5e:bc:2f:f9: 5f:7e:7a:b0:9d:94:27:2a:18:55:0c:a3:b2:f0:19: 59:f7:94:91:64:2a:07:ea:bc:cc:ab:23:af:1a:1c: ab:f4:4a:fa:0d:1b:a6:7d:d1:69:6b:a8:70:63:29: 6a:9c:d3:cb:ed:64:e1:1f:9e:2f:a2:11:f7:d1:4a: 08:ab:dc:15:b0:92:7a:03:ef:e9:98:47:a1:76:45: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4B:F8:E5:3E:8F:7F:43:BA:52:D1:3F:34:9C:89:A4:0F:D5:A9:9C X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ef:e2:d7:9a:78:ee:60:35:33:e3:d8:3d:5c:b8:5d:59:75: 5a:10:7c:70:6e:70:24:a5:17:89:46:73:7b:bc:8b:9c:97:e9: be:7d:f0:b1:45:83:c6:bf:9d:95:a1:2b:c3:e6:cc:14:b2:41: f5:f6:53:85:2e:77:4c:7a:e8:18:b8:fa:84:fc:f5:ee:85:c0: 0f:bc:2f:0a:2d:0a:83:e5:a9:d9:49:c8:6a:92:19:a5:d5:6f: 41:ae:eb:ff:fa:04:94:10:6a:70:49:c5:ac:04:ac:68:11:77: 4a:1e:80:5e:73:10:94:4e:be:c6:e1:bc:ac:67:7b:89:74:54: df:b2:91:1e:06:6e:73:24:01:ee:28:cc:91:df:d7:99:a5:48: da:f3:96:d9:43:24:ba:a1:ab:52:75:b2:c0:80:bb:7a:2b:4a: a7:d1:1d:06:d5:cc:66:56:80:90:05:d7:bd:36:06:e9:ad:27: 27:57:ef:27:11:88:ff:56:db:d1:cf:48:84:15:0f:90:de:94: dd:aa:66:49:07:85:5f:dc:b5:20:02:7f:bf:54:47:e0:22:7c: 54:d9:a8:e6:99:c1:aa:bc:86:11:a7:6a:31:98:60:2c:80:64: 41:d0:6c:df:ba:f8:7c:bd:9f:47:8d:05:e9:99:2a:de:98:3a: aa:a4:cf:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjYxMDAyMjMxNTMwWhcNMjYxMDA5MjMxNTMwWjAYMRYwFAYD VQQDEw02YWMwM2IxMi1jMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk6uhtgrfwqhSk9m8x45hwphPRUdUzNX2aCo35QD1FkzCLH2BhEYINRmje8L0 Kk9uy+5Nimler1LRt/h6eqvVDqicRw21Dbcmvs54//x8xQCXOSV0S8kdZdsrtyjO VhjIO98vlMDHbLsPTiccMPZzmMDYqrwl4HGNO2DZllBoVU0XbXe2hu7UeBVYJFo5 UmwoI3LEew+StJwauco16l8K3Vbt/lr3Lpmbf4UzVlxig168L/lffnqwnZQnKhhV DKOy8BlZ95SRZCoH6rzMqyOvGhyr9Er6DRumfdFpa6hwYylqnNPL7WThH54vohH3 0UoIq9wVsJJ6A+/pmEehdkV6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNL+OU+ j39DulLRPzSciaQP1amcMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+/i15p47mA1M+PYPVy4XVl1WhB8cG5wJKUXiUZze7yLnJfpvn3wsUWDxr+d laErw+bMFLJB9fZThS53THroGLj6hPz17oXAD7wvCi0Kg+Wp2UnIapIZpdVvQa7r //oElBBqcEnFrASsaBF3Sh6AXnMQlE6+xuG8rGd7iXRU37KRHgZucyQB7ijMkd/X maVI2vOW2UMkuqGrUnWywIC7eitKp9EdBtXMZlaAkAXXvTYG6a0nJ1fvJxGI/1bb 0c9IhBUPkN6U3apmSQeFX9y1IAJ/v1RH4CJ8VNmo5pnBqryGEadqMZhgLIBkQdBs 37r4fL2fR40F6Zkq3pg6qqTPaQ== -----END CERTIFICATE-----Generated at Sun Oct 4 15:28:41 2026 by rpki-client