$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft (raw, json) Hash identifier: Yt62jUhokK2PchuWpfc6iuGVrT8Iv2KRZj+w7x9r/Iw= Subject key identifier: BD:FB:E9:19:F2:C8:6A:9A:CB:9D:EB:43:90:6A:FE:E3:FA:89:DF:08 Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft Manifest number: 97 Signing time: Mon 21 Sep 2026 07:30:16 +0000 Manifest this update: Mon 21 Sep 2026 07:30:16 +0000 Manifest next update: Mon 28 Sep 2026 07:30:16 +0000 Files and hashes: 1: BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl (hash: ge0fHqyzeA4E74IXVX57DKk9ctgkFB3Mwvj0QxrHKqE=) 2: 9C1B70121D1A11F1A275F377103D8C67.roa (hash: y0kiR2bauMVDFaqNZbNEH9+p4Ybcw1shQXfdJNNrqvI=) 3: 8EE78F481D1A11F19DA5ED77103D8C67.roa (hash: FtCatlAW9Re17rwqCuc7Yn9ywx696GppCQCdjrmZAlM=) 4: 8FEAA0421D1A11F19DA5ED77103D8C67.roa (hash: dEk3degjNLUiA3kpAMrU5suBNlrDXd9oTzhhHbGgPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Validity Not Before: Sep 21 07:30:16 2026 GMT Not After : Sep 28 07:30:16 2026 GMT Subject: CN=6ab0dd08-6213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:73:b0:07:5f:3f:98:b5:7e:fe:35:7a:bb: fd:e1:58:14:b3:6b:b1:f6:90:dc:6b:51:1f:02:47: 33:9e:b4:67:ef:96:81:03:53:97:81:0a:e7:b8:e6: f5:d8:87:43:8e:c5:f5:9c:5c:36:93:bd:03:81:53: eb:c4:28:cc:89:d0:c1:77:69:55:66:68:86:68:43: d9:6a:dc:bc:21:1e:38:1a:c9:cd:08:65:78:5d:de: 9e:32:d7:69:99:fe:09:e3:da:e2:86:6c:cf:78:b9: d9:f9:eb:bf:a1:af:71:bb:f5:1e:3d:ad:fe:1b:d9: 32:7e:5b:bb:3a:5d:83:cf:ab:3f:d0:18:d7:82:74: e6:7f:fc:c1:ce:6a:8f:c7:2f:f1:d3:0a:fa:22:19: 76:38:c8:c9:b6:66:9f:dd:10:e8:77:8c:c0:fd:5f: 88:1e:8c:25:cb:55:cc:65:75:15:c9:a1:83:4d:47: 5a:63:21:c0:90:1b:2e:60:4f:94:cf:7b:28:28:b3: 9e:68:3c:72:97:02:31:2f:e1:ec:b8:58:ad:ed:40: 98:50:e6:9f:62:b3:4d:bd:f0:85:36:67:12:4e:69: 4e:93:80:c9:d1:af:73:d8:c2:ed:03:94:91:14:40: 83:41:6d:f4:f2:8c:de:34:79:12:a4:f3:99:c2:3f: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:E9:19:F2:C8:6A:9A:CB:9D:EB:43:90:6A:FE:E3:FA:89:DF:08 X509v3 Authority Key Identifier: keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:cf:32:a0:e2:5c:10:a0:77:2c:c5:dd:93:c3:fe:80:e0:fb: a8:c8:bb:eb:48:7b:c5:87:f7:55:bd:b5:d0:ab:19:f0:ab:89: cd:71:5d:55:14:45:72:7c:92:4f:c1:c9:a6:92:55:ac:45:45: 20:50:41:c3:34:f4:f9:ef:1b:b7:34:0f:98:db:de:7e:ef:35: 9e:86:83:c3:30:dd:6f:07:ee:e0:26:08:28:e1:bb:d9:21:d8: 9e:dd:34:57:18:86:08:45:98:c8:fd:5b:58:a5:83:c7:1e:e1: b5:14:eb:79:c0:fa:99:8c:ce:76:5e:29:88:8e:16:0d:db:fa: e9:19:3a:02:20:33:4b:8f:8f:4e:a7:49:74:4a:aa:45:bd:29: 0b:e0:10:f9:24:9b:3a:14:6e:6f:d9:f0:18:bb:6b:14:cc:12: 1d:ad:10:8d:c5:e1:61:0a:6c:7a:ea:00:11:1e:cd:72:66:b7: ba:1f:a0:7a:89:bc:cd:2d:f1:77:be:4f:ba:f3:91:38:1d:21: bc:79:e0:c0:d3:ac:8b:e4:dd:c2:99:d2:ba:ce:39:2d:f8:4c: e8:76:05:a0:4d:ae:be:3d:b2:8b:c0:aa:e3:61:95:77:4a:a9: 8f:84:dd:34:10:73:72:4b:ab:98:8c:b1:e2:f7:92:19:db:ba: d4:da:8b:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDNjExMTAvBgNVBAUTKDA0NzQ5MzdFNzlBOUQ2NzMzNTNFQUJEODJDNEI4NDI0 QjZDNjgzMEQwHhcNMjYwOTIxMDczMDE2WhcNMjYwOTI4MDczMDE2WjAYMRYwFAYD VQQDEw02YWIwZGQwOC02MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uRzsAdfP5i1fv41erv94VgUs2ux9pDca1EfAkcznrRn75aBA1OXgQrnuOb1 2IdDjsX1nFw2k70DgVPrxCjMidDBd2lVZmiGaEPZaty8IR44GsnNCGV4Xd6eMtdp mf4J49rihmzPeLnZ+eu/oa9xu/UePa3+G9kyflu7Ol2Dz6s/0BjXgnTmf/zBzmqP xy/x0wr6Ihl2OMjJtmaf3RDod4zA/V+IHowly1XMZXUVyaGDTUdaYyHAkBsuYE+U z3soKLOeaDxylwIxL+HsuFit7UCYUOafYrNNvfCFNmcSTmlOk4DJ0a9z2MLtA5SR FECDQW308ozeNHkSpPOZwj/SLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL376Rny yGqay53rQ5Bq/uP6id8IMB8GA1UdIwQYMBaAFAR0k355qdZzNT6r2CxLhCS2xoMN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0M2MS8zMzFEMTQxOERB M0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFuTTFQcXZZTEV1RUpMYkdn dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFu TTFQcXZZTEV1RUpMYkdndzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQc8yoOJcEKB3LMXdk8P+gOD7qMi760h7xYf3Vb210KsZ8KuJzXFdVRRFcnyS T8HJppJVrEVFIFBBwzT0+e8btzQPmNvefu81noaDwzDdbwfu4CYIKOG72SHYnt00 VxiGCEWYyP1bWKWDxx7htRTrecD6mYzOdl4piI4WDdv66Rk6AiAzS4+PTqdJdEqq Rb0pC+AQ+SSbOhRub9nwGLtrFMwSHa0QjcXhYQpseuoAER7Ncma3uh+geom8zS3x d75PuvOROB0hvHngwNOsi+TdwpnSus45LfhM6HYFoE2uvj2yi8Cq42GVd0qpj4Td NBBzckurmIyx4veSGdu61NqLTA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:24:24 2026 by rpki-client