$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft File: BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json) Hash identifier: lsbZh43fQtEcsXLbxAANs+JfK80hLCZ1lyDZTMbcANk= Subject key identifier: 0F:E0:04:36:A0:04:91:37:F2:21:BA:03:F2:37:5D:23:0A:E0:AE:EE Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28 Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft Manifest number: 01B4 Signing time: Sun 27 Sep 2026 04:26:28 +0000 Manifest this update: Sun 27 Sep 2026 04:26:28 +0000 Manifest next update: Sun 04 Oct 2026 04:26:28 +0000 Files and hashes: 1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: MrcMhbID2DHDy9yKhmEqF9uKa63r95eSejUIpNN/GW0=) 2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: GiapmCGsSb4IjewSBG2B8eL/kVf097r86YDyG+LMJHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28 Validity Not Before: Sep 27 04:26:28 2026 GMT Not After : Oct 4 04:26:28 2026 GMT Subject: CN=6ab89af4-91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:cb:ac:2f:6c:ec:c1:66:82:98:c0:9b:d9: fc:99:1b:0e:a9:c8:9f:ec:b1:54:71:ed:60:4b:47: 16:35:d7:af:a0:6e:64:db:e3:ae:f1:c7:0e:ea:49: 7f:a6:ab:50:c8:43:d4:21:45:6f:cc:ee:e4:c3:7c: 44:b9:d9:d1:5d:cb:ae:32:ce:b9:db:e0:dd:25:bf: 66:1b:7a:82:bb:1a:4a:1d:2d:fa:4e:08:24:6e:4d: be:c5:d9:72:86:6c:32:76:52:5d:54:c0:3c:7e:ff: 3e:da:41:9f:0b:85:d4:d4:64:e8:95:ed:bb:e9:7d: 8e:ea:cf:84:0d:bd:f2:9d:9d:b8:0c:47:5b:73:a3: 48:06:6f:c2:76:0b:06:9c:c8:cc:57:fe:fe:50:e6: 60:1f:f4:67:5f:5e:14:2c:69:12:4e:71:30:00:02: fb:fe:fe:4a:bf:b1:85:6c:f1:b1:1d:07:cc:99:05: a2:75:f1:06:2d:70:c5:f8:d8:2c:2f:3a:b7:a3:65: bc:ee:83:b8:cb:fb:d6:cd:39:69:0e:16:c4:86:c7: 6f:bd:09:70:9e:fa:f3:06:0b:aa:69:50:93:2f:43: 94:d2:1c:cd:21:80:33:d2:b1:f5:bb:6d:b1:63:35: 86:56:94:77:cc:bc:98:15:db:80:0b:bd:b3:c8:d5: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E0:04:36:A0:04:91:37:F2:21:BA:03:F2:37:5D:23:0A:E0:AE:EE X509v3 Authority Key Identifier: keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:36:6f:75:66:fe:65:f3:0a:5c:e0:5e:1e:97:fe:47:2e:9b: 78:b8:06:60:52:3a:3d:c7:bd:d3:81:94:14:6f:2b:24:2d:9d: cd:ca:ac:16:af:b6:17:01:f5:2c:c1:4f:d8:3e:d1:b7:68:b0: e6:da:fc:2c:d3:86:c1:32:13:f9:22:a8:a2:c8:4d:b5:ea:4b: e6:31:2a:8a:29:8d:d7:9c:be:92:6f:7d:98:7d:ee:73:9b:18: eb:1a:c3:6b:fd:d2:f5:b9:09:7e:de:aa:f0:41:cb:59:12:6f: 54:3d:18:28:7a:5b:e5:96:96:ab:a9:28:5e:1f:75:22:35:46: 5f:b4:f7:c8:ee:61:c3:84:58:3f:c0:fb:ce:2a:6d:2e:b6:72: b2:d3:68:91:9a:c9:2f:b9:4d:a5:df:a4:5c:82:4d:6a:bc:4f: 18:e6:98:c2:8f:d0:64:27:b7:5b:76:85:35:d3:30:dd:fd:b2: fa:d3:36:7e:10:3b:ed:76:20:48:37:6d:16:f5:9a:3a:f0:95: 39:1c:f1:4a:6f:6d:dd:24:cc:45:f2:51:7f:56:30:58:85:c7: 66:2c:32:b4:89:87:b8:e9:8a:c1:d6:61:8f:d3:8a:fe:a2:b5: 43:04:ed:a8:19:44:c6:79:d1:34:41:09:5f:a9:94:f8:33:ff: ae:2e:bd:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMzYxMTAvBgNVBAUTKDA0REVEQUNCREJBRkE1QzFDMTRGOTI4MTdCOTZGN0Y1 MDMxMDBBMjgwHhcNMjYwOTI3MDQyNjI4WhcNMjYxMDA0MDQyNjI4WjAYMRYwFAYD VQQDEw02YWI4OWFmNC05MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKbLrC9s7MFmgpjAm9n8mRsOqcif7LFUce1gS0cWNdevoG5k2+Ou8ccO6kl/ pqtQyEPUIUVvzO7kw3xEudnRXcuuMs652+DdJb9mG3qCuxpKHS36Tggkbk2+xdly hmwydlJdVMA8fv8+2kGfC4XU1GTole276X2O6s+EDb3ynZ24DEdbc6NIBm/CdgsG nMjMV/7+UOZgH/RnX14ULGkSTnEwAAL7/v5Kv7GFbPGxHQfMmQWidfEGLXDF+Ngs Lzq3o2W87oO4y/vWzTlpDhbEhsdvvQlwnvrzBguqaVCTL0OU0hzNIYAz0rH1u22x YzWGVpR3zLyYFduAC72zyNXfuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/gBDag BJE38iG6A/I3XSMK4K7uMB8GA1UdIwQYMBaAFATe2svbr6XBwU+SgXuW9/UDEAoo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQzNi83RjQwMjNGMjI1 MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBjSEJUNUtCZTViMzlRTVFD aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JON2F5OXV2cGNIQlQ1S0JlNWIzOVFNUUNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQzNi83RjQwMjNGMjI1MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBj SEJUNUtCZTViMzlRTVFDaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDZvdWb+ZfMKXOBeHpf+Ry6beLgGYFI6Pce904GUFG8rJC2dzcqsFq+2FwH1 LMFP2D7Rt2iw5tr8LNOGwTIT+SKooshNtepL5jEqiimN15y+km99mH3uc5sY6xrD a/3S9bkJft6q8EHLWRJvVD0YKHpb5ZaWq6koXh91IjVGX7T3yO5hw4RYP8D7zipt LrZystNokZrJL7lNpd+kXIJNarxPGOaYwo/QZCe3W3aFNdMw3f2y+tM2fhA77XYg SDdtFvWaOvCVORzxSm9t3STMRfJRf1YwWIXHZiwytImHuOmKwdZhj9OK/qK1QwTt qBlExnnRNEEJX6mU+DP/ri69BQ== -----END CERTIFICATE-----Generated at Sun Sep 27 19:22:31 2026 by rpki-client