$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json) Hash identifier: qp+zCtVBc/PWVGtsWfLeBptVZHUzP+gVW5Ji++P/ix8= Subject key identifier: 56:E7:0C:FD:2A:AE:AC:83:1F:7A:60:3B:EB:2A:95:85:35:B3:14:3C Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Certificate serial: 2274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft Manifest number: 2E99 Signing time: Thu 10 Sep 2026 15:27:54 +0000 Manifest this update: Thu 10 Sep 2026 15:27:54 +0000 Manifest next update: Thu 17 Sep 2026 15:27:54 +0000 Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: jXmkbmB3PxcztFdVG/HFX/h+yaGt80tb9tRogEti480=) 2: 44A88C482CA611F1A847C919C5833773.roa (hash: bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8820 (0x2274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9 Validity Not Before: Sep 10 15:27:54 2026 GMT Not After : Sep 17 15:27:54 2026 GMT Subject: CN=6aa2cc7a-4b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:29:22:b0:06:74:9b:c4:b1:e7:b2:8e:3f: 2e:e2:c5:38:b9:ab:66:16:62:67:d9:e5:2a:c0:d7: 4c:22:04:1c:8c:ed:3c:84:48:e0:80:e4:7e:75:87: 00:34:1b:63:c7:e0:cc:ce:eb:0b:a4:43:c1:a8:56: 0a:17:63:ab:4c:bc:42:4e:2a:7e:eb:27:19:e2:72: d8:36:60:40:d2:53:3b:18:f5:aa:b7:17:9c:02:5b: de:0e:cc:5c:d8:56:d7:44:53:ff:f4:fe:2b:48:90: 98:d7:ff:00:b6:13:b9:a9:5f:d8:ec:bf:86:a9:b0: 97:d1:ef:b7:9c:19:9a:0d:0c:61:ca:c6:fc:0b:fc: f7:c3:2e:91:3c:ca:9d:f0:89:00:8b:05:09:3f:ea: 34:3f:71:75:9d:ae:49:45:60:b3:c1:85:d1:20:e7: 09:e9:39:53:4f:23:37:4b:e9:ab:dd:1a:cd:d5:45: 24:e2:1f:74:54:2b:51:92:86:3e:f5:6a:94:0b:5e: d8:87:21:b0:ae:f6:e0:45:1e:cc:ee:64:7b:f4:d0: a1:c1:18:d1:14:73:b9:32:02:a2:f5:a8:05:0b:8c: cc:06:fb:30:0c:1a:c6:a9:8c:6f:6b:8f:42:ef:7a: f7:d8:86:2a:10:25:fd:fc:50:d9:83:81:79:9c:01: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E7:0C:FD:2A:AE:AC:83:1F:7A:60:3B:EB:2A:95:85:35:B3:14:3C X509v3 Authority Key Identifier: keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:b4:b6:79:a4:db:bc:20:6a:6e:e4:0b:e3:1b:88:51:f6:d0: 5d:d0:c5:42:d2:77:4b:f1:10:0a:b0:3f:93:0e:a1:ea:0b:b1: 2e:7d:a5:03:5f:c4:57:aa:db:9a:fd:65:ea:e9:67:4b:ee:74: 95:99:5d:09:6b:aa:f6:07:d5:e0:17:19:d6:c6:70:73:ee:24: b3:23:4c:cc:ca:b5:8f:74:05:2e:0f:50:30:d0:3d:2a:67:c5: af:52:91:d2:60:46:54:d4:92:f4:3b:33:b8:cf:72:4a:01:d6: c9:28:fb:d8:49:21:6a:0c:ab:f6:c7:3a:72:50:4a:0a:34:96: 3f:97:76:7c:a1:fd:7f:68:b1:b3:7d:31:6a:96:ab:4c:72:21: b5:5a:4b:75:c8:e9:3a:64:19:4d:bb:b6:71:ad:8e:89:6a:4b: c0:3b:64:f3:94:31:75:31:cd:a5:84:f3:fd:ba:b9:f0:ce:16: 24:9c:c1:ea:47:48:76:2b:60:6b:71:13:de:18:35:2b:63:e8: 33:2c:00:98:2a:08:a6:d3:ad:e9:33:3a:07:f1:96:43:c7:08: e4:23:80:f1:ca:f8:7f:0b:61:bb:c8:81:1e:6d:5d:b3:07:3f: e3:97:40:ac:56:43:c5:fc:42:f6:c1:05:f9:9c:2b:81:96:bc: 99:4d:45:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICInQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4 NzYzMjhDRDkwHhcNMjYwOTEwMTUyNzU0WhcNMjYwOTE3MTUyNzU0WjAYMRYwFAYD VQQDEw02YWEyY2M3YS00YjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjopIrAGdJvEseeyjj8u4sU4uatmFmJn2eUqwNdMIgQcjO08hEjggOR+dYcA NBtjx+DMzusLpEPBqFYKF2OrTLxCTip+6ycZ4nLYNmBA0lM7GPWqtxecAlveDsxc 2FbXRFP/9P4rSJCY1/8AthO5qV/Y7L+GqbCX0e+3nBmaDQxhysb8C/z3wy6RPMqd 8IkAiwUJP+o0P3F1na5JRWCzwYXRIOcJ6TlTTyM3S+mr3RrN1UUk4h90VCtRkoY+ 9WqUC17YhyGwrvbgRR7M7mR79NChwRjRFHO5MgKi9agFC4zMBvswDBrGqYxva49C 73r32IYqECX9/FDZg4F5nAE6KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbnDP0q rqyDH3pgO+sqlYU1sxQ8MB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUyNS9GNDM0NDExNjhBMkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9Z dHdnVDF0cmN0VWFIWXlqTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2bS2eaTbvCBqbuQL4xuIUfbQXdDFQtJ3S/EQCrA/kw6h6guxLn2lA1/EV6rb mv1l6ulnS+50lZldCWuq9gfV4BcZ1sZwc+4ksyNMzMq1j3QFLg9QMNA9KmfFr1KR 0mBGVNSS9DszuM9ySgHWySj72Ekhagyr9sc6clBKCjSWP5d2fKH9f2ixs30xapar THIhtVpLdcjpOmQZTbu2ca2OiWpLwDtk85QxdTHNpYTz/bq58M4WJJzB6kdIditg a3ET3hg1K2PoMywAmCoIptOt6TM6B/GWQ8cI5COA8cr4fwthu8iBHm1dswc/45dA rFZDxfxC9sEF+ZwrgZa8mU1Fpg== -----END CERTIFICATE-----Generated at Fri Sep 11 12:11:34 2026 by rpki-client