$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft File: bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft (raw, json) Hash identifier: B2UuPfvCXvvAE+rz2p8++q01FMr5mEtg/VDiD5VSNVk= Subject key identifier: AD:34:99:A9:0D:BB:D8:03:0E:94:19:45:FF:68:18:44:9C:22:41:2C Authority key identifier: 6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E Certificate issuer: /CN=A91ED89F/serialNumber=6C719908F2E168CD6BF18BCD6D47788637C3846E Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft Manifest number: 25 Signing time: Wed 07 Oct 2026 09:27:05 +0000 Manifest this update: Wed 07 Oct 2026 09:27:05 +0000 Manifest next update: Wed 14 Oct 2026 09:27:05 +0000 Files and hashes: 1: bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl (hash: XgQszAKC6CtDFXy01soqsZSsnFdSHNq0hZeeCc8I0us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED89F, serialNumber=6C719908F2E168CD6BF18BCD6D47788637C3846E Validity Not Before: Oct 7 09:27:05 2026 GMT Not After : Oct 14 09:27:05 2026 GMT Subject: CN=6ac61069-1fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:f6:c0:fd:3d:ac:a4:83:a8:fd:6c:71:32: e3:60:3f:27:96:6c:2e:d1:49:8a:45:fd:bb:c1:f2: 68:ea:bf:aa:c0:76:67:3f:a1:9e:bf:63:73:68:25: 69:d6:1f:63:b2:25:c8:a9:ce:bc:e2:5c:91:91:c0: 0f:16:6c:35:fc:83:d7:af:85:5c:71:23:cb:c8:fe: 50:d3:a3:f6:6c:e6:67:67:a1:e0:bb:0b:4f:77:b0: 52:55:ba:d7:d7:52:ba:9b:ae:4f:32:c1:44:8e:00: 33:b7:3b:ac:0b:69:ee:12:53:c2:55:50:2b:3a:80: 7e:12:73:69:4e:f6:3d:ee:69:86:a3:75:34:7b:08: 60:b0:c9:c5:32:8f:2f:a6:78:57:b2:cf:ec:33:d1: 72:9d:3c:19:36:a5:ef:47:03:96:8c:4c:e7:c4:16: dc:42:94:44:ca:55:60:e1:46:21:2e:46:93:58:c1: ca:97:9d:19:f1:8e:12:b2:10:c7:97:d4:92:91:58: 56:a0:14:b1:e0:ea:5d:f7:4a:f6:b6:3b:20:c7:ac: d3:a9:42:5d:b0:9f:71:a7:7f:aa:95:88:b8:f3:ad: de:47:82:d6:c1:68:0f:e4:61:0c:67:03:06:67:51: c2:67:da:d5:c8:7e:ec:01:4e:26:ae:3c:4a:f1:7b: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:99:A9:0D:BB:D8:03:0E:94:19:45:FF:68:18:44:9C:22:41:2C X509v3 Authority Key Identifier: keyid:6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e7:b7:d2:41:96:63:ae:46:db:58:24:61:b8:bf:62:af:29: f8:e8:08:be:03:b1:9c:24:d7:38:7b:35:73:d5:f8:f6:a2:b8: cc:c0:a9:f0:d1:ef:6f:19:ec:9c:08:6f:46:de:7f:3a:d8:f2: b9:4e:1f:fd:28:6c:6f:21:3a:16:49:34:f7:7f:61:90:a7:08: 56:09:d0:84:8a:ad:7d:55:ec:d5:d1:5f:83:74:29:30:cd:ec: c2:9d:b0:7c:43:b8:93:5f:93:e1:de:09:29:21:8d:dc:42:54: 5f:12:c2:d1:c7:d0:5b:d7:8e:a7:51:6b:e3:b0:04:1e:29:cc: fa:86:82:ff:90:fd:0a:0b:34:3b:fd:d2:46:12:ae:11:d0:ff: b9:09:a2:8e:c2:92:b8:95:48:b9:04:41:56:3f:4e:a6:d1:67: 2e:b4:a6:c3:fd:22:f3:2e:78:29:f4:98:2c:59:3a:13:ce:a0: 8f:e3:2b:ea:6f:8a:d2:85:df:18:72:92:a3:2b:49:24:ff:1b: 77:9e:7b:f9:a4:f2:76:96:62:b9:69:6c:07:be:1a:e4:34:8d: 94:af:e0:be:1e:66:77:d2:49:14:c5:bb:a3:a6:d6:cb:a0:24: 12:09:14:60:2e:5f:c8:eb:97:15:7b:07:d7:ef:8e:3f:4c:d4: 3d:1c:79:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDg5RjExMC8GA1UEBRMoNkM3MTk5MDhGMkUxNjhDRDZCRjE4QkNENkQ0Nzc4ODYz N0MzODQ2RTAeFw0yNjEwMDcwOTI3MDVaFw0yNjEwMTQwOTI3MDVaMBgxFjAUBgNV BAMTDTZhYzYxMDY5LTFmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmXvbA/T2spIOo/WxxMuNgPyeWbC7RSYpF/bvB8mjqv6rAdmc/oZ6/Y3NoJWnW H2OyJcipzrziXJGRwA8WbDX8g9evhVxxI8vI/lDTo/Zs5mdnoeC7C093sFJVutfX Urqbrk8ywUSOADO3O6wLae4SU8JVUCs6gH4Sc2lO9j3uaYajdTR7CGCwycUyjy+m eFeyz+wz0XKdPBk2pe9HA5aMTOfEFtxClETKVWDhRiEuRpNYwcqXnRnxjhKyEMeX 1JKRWFagFLHg6l33Sva2OyDHrNOpQl2wn3Gnf6qViLjzrd5HgtbBaA/kYQxnAwZn UcJn2tXIfuwBTiauPErxewyzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrTSZqQ27 2AMOlBlF/2gYRJwiQSwwHwYDVR0jBBgwFoAUbHGZCPLhaM1r8YvNbUd4hjfDhG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEODlGL0VGODI3QTY2OEND RDExRjFBNEMxODQzMTNGMTFGOTcwL2JIR1pDUExoYU0xcjhZdk5iVWQ0aGpmRGhH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkhHWkNQTGhhTTFyOFl2TmJVZDRoamZEaEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE ODlGL0VGODI3QTY2OENDRDExRjFBNEMxODQzMTNGMTFGOTcwL2JIR1pDUExoYU0x cjhZdk5iVWQ0aGpmRGhHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA657fSQZZjrkbbWCRhuL9iryn46Ai+A7GcJNc4ezVz1fj2orjMwKnw0e9vGeyc CG9G3n862PK5Th/9KGxvIToWSTT3f2GQpwhWCdCEiq19VezV0V+DdCkwzezCnbB8 Q7iTX5Ph3gkpIY3cQlRfEsLRx9Bb146nUWvjsAQeKcz6hoL/kP0KCzQ7/dJGEq4R 0P+5CaKOwpK4lUi5BEFWP06m0WcutKbD/SLzLngp9JgsWToTzqCP4yvqb4rShd8Y cpKjK0kk/xt3nnv5pPJ2lmK5aWwHvhrkNI2Ur+C+HmZ30kkUxbujptbLoCQSCRRg Ll/I65cVewfX744/TNQ9HHmH -----END CERTIFICATE-----Generated at Thu Oct 8 04:05:38 2026 by rpki-client