$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft File: bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft (raw, json) Hash identifier: oW/LKhTWEroj9ZcSXtU/YA01xrhfJ5dkU7f5i2Lp/os= Subject key identifier: 7C:64:D2:89:20:3D:61:98:9B:86:71:E1:A6:98:25:AF:CD:82:FA:C3 Authority key identifier: 6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E Certificate issuer: /CN=A91ED89F/serialNumber=6C719908F2E168CD6BF18BCD6D47788637C3846E Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft Manifest number: 0C Signing time: Wed 19 Aug 2026 09:52:52 +0000 Manifest this update: Wed 19 Aug 2026 09:52:52 +0000 Manifest next update: Wed 26 Aug 2026 09:52:52 +0000 Files and hashes: 1: bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl (hash: 7CQgzhQr3qw4gt+Us+vDV2Gtp656UwAs6uvFei2xwxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED89F, serialNumber=6C719908F2E168CD6BF18BCD6D47788637C3846E Validity Not Before: Aug 19 09:52:52 2026 GMT Not After : Aug 26 09:52:52 2026 GMT Subject: CN=6a857cf4-f739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:84:25:b7:73:51:0c:47:8c:5c:14:a6:d1: 6b:6f:e1:f5:ad:28:28:f9:9b:ba:95:ff:fc:a6:bf: 32:69:5d:be:33:4a:f3:cd:c1:8f:14:44:fa:d6:24: 3e:3a:d1:5a:81:b2:fb:d4:af:f9:54:6c:d6:af:9b: 0c:f2:88:81:96:b9:6f:d8:3a:12:b4:b7:a3:64:38: a6:68:06:09:2c:49:ad:4f:da:78:de:4d:53:b1:41: 3a:cd:f5:c5:b9:7a:3d:e0:f4:39:97:e8:46:b2:92: a1:49:5c:05:e8:29:60:fd:51:c8:3a:5d:c8:bc:df: ca:ed:db:12:13:fe:63:ec:15:3b:e0:c8:5c:f2:21: ff:fc:e9:a9:9f:e6:df:b6:9b:7b:67:c7:57:76:92: cc:e5:17:91:eb:0f:79:ba:08:b3:c2:f4:0e:0b:5c: 11:29:54:ea:b9:83:50:5e:76:3f:f2:95:00:a9:03: f0:63:a3:c8:5f:4a:dd:21:99:a9:01:b0:fd:3a:9d: 68:fd:c2:16:98:f7:dd:20:e9:d5:70:28:95:e1:a3: 9e:ca:ba:24:85:9a:63:e9:e9:2e:13:23:f7:c7:25: 74:b8:9a:36:8d:a5:70:5a:b8:5b:94:71:9e:e6:b0: 22:7f:f9:1c:6d:6d:0d:47:41:8b:87:0d:8c:5f:ee: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:64:D2:89:20:3D:61:98:9B:86:71:E1:A6:98:25:AF:CD:82:FA:C3 X509v3 Authority Key Identifier: keyid:6C:71:99:08:F2:E1:68:CD:6B:F1:8B:CD:6D:47:78:86:37:C3:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bHGZCPLhaM1r8YvNbUd4hjfDhG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED89F/EF827A668CCD11F1A4C184313F11F970/bHGZCPLhaM1r8YvNbUd4hjfDhG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:89:65:06:3e:45:55:0e:de:85:98:fa:ea:67:93:fe:54:06: 9c:0d:1b:e2:d0:ab:41:d6:4e:80:bd:c4:09:fb:1f:f7:71:86: eb:56:8e:5b:33:0f:1a:d7:cc:3f:5a:1e:85:5a:75:b1:c9:21: 9a:6e:78:67:33:e2:78:d6:3f:42:d4:58:4d:41:e1:63:b1:f9: 7f:b8:18:11:ca:9f:e5:a0:e9:e1:89:de:04:6d:cf:c0:3d:76: 7a:79:00:33:dd:e7:fa:fb:7a:58:87:e9:a0:b3:fd:56:d5:d8: 0c:14:ff:de:28:da:94:95:6e:8d:80:ff:79:ab:6d:20:48:d2: 38:e7:9f:7a:ed:fa:d8:55:f8:c7:c3:4b:a4:42:52:e5:4c:64: ef:35:fa:1e:7f:70:fe:ed:e1:c4:a3:62:ee:b8:45:2f:d4:7a: 91:2d:0e:0e:5b:2c:9c:45:fd:25:28:a8:ac:d5:96:9f:20:c0: c4:05:76:1b:a4:06:7e:78:bc:24:6a:b0:35:47:b3:30:41:80: 3a:9e:02:2a:63:51:14:5b:fc:09:f3:90:e1:be:51:53:90:f8: 5f:a4:82:21:ea:b8:5c:c4:ef:63:1f:e3:c4:85:27:1f:73:36: f6:54:d4:eb:25:2c:d3:39:f2:45:ca:73:b4:ee:b5:d4:20:28: 22:08:f3:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDg5RjExMC8GA1UEBRMoNkM3MTk5MDhGMkUxNjhDRDZCRjE4QkNENkQ0Nzc4ODYz N0MzODQ2RTAeFw0yNjA4MTkwOTUyNTJaFw0yNjA4MjYwOTUyNTJaMBgxFjAUBgNV BAMTDTZhODU3Y2Y0LWY3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4oYQlt3NRDEeMXBSm0Wtv4fWtKCj5m7qV//ymvzJpXb4zSvPNwY8URPrWJD46 0VqBsvvUr/lUbNavmwzyiIGWuW/YOhK0t6NkOKZoBgksSa1P2njeTVOxQTrN9cW5 ej3g9DmX6EaykqFJXAXoKWD9Ucg6Xci838rt2xIT/mPsFTvgyFzyIf/86amf5t+2 m3tnx1d2kszlF5HrD3m6CLPC9A4LXBEpVOq5g1Bedj/ylQCpA/Bjo8hfSt0hmakB sP06nWj9whaY990g6dVwKJXho57KuiSFmmPp6S4TI/fHJXS4mjaNpXBauFuUcZ7m sCJ/+RxtbQ1HQYuHDYxf7kztAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfGTSiSA9 YZibhnHhppglr82C+sMwHwYDVR0jBBgwFoAUbHGZCPLhaM1r8YvNbUd4hjfDhG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEODlGL0VGODI3QTY2OEND RDExRjFBNEMxODQzMTNGMTFGOTcwL2JIR1pDUExoYU0xcjhZdk5iVWQ0aGpmRGhH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkhHWkNQTGhhTTFyOFl2TmJVZDRoamZEaEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE ODlGL0VGODI3QTY2OENDRDExRjFBNEMxODQzMTNGMTFGOTcwL2JIR1pDUExoYU0x cjhZdk5iVWQ0aGpmRGhHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeiWUGPkVVDt6FmPrqZ5P+VAacDRvi0KtB1k6AvcQJ+x/3cYbrVo5bMw8a18w/ Wh6FWnWxySGabnhnM+J41j9C1FhNQeFjsfl/uBgRyp/loOnhid4Ebc/APXZ6eQAz 3ef6+3pYh+mgs/1W1dgMFP/eKNqUlW6NgP95q20gSNI455967frYVfjHw0ukQlLl TGTvNfoef3D+7eHEo2LuuEUv1HqRLQ4OWyycRf0lKKis1ZafIMDEBXYbpAZ+eLwk arA1R7MwQYA6ngIqY1EUW/wJ85DhvlFTkPhfpIIh6rhcxO9jH+PEhScfczb2VNTr JSzTOfJFynO07rXUICgiCPNO -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:44 2026 by rpki-client