$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: dOaUU05b2vgl4jIAJbs4mnWC05Ad4PXlVT70secUr10= Subject key identifier: E5:01:2B:3E:25:DD:8A:0E:9E:AA:07:EB:2F:38:00:F3:84:CB:66:1B Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 021B Signing time: Mon 21 Sep 2026 02:59:35 +0000 Manifest this update: Mon 21 Sep 2026 02:59:35 +0000 Manifest next update: Mon 28 Sep 2026 02:59:35 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: JrWF5Tj+pQ/WkJ3f/zNlD64oBz3UWfA1syFqJ6N5M4U=) 2: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=) 3: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Sep 21 02:59:35 2026 GMT Not After : Sep 28 02:59:35 2026 GMT Subject: CN=6ab09d97-c90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:f5:cc:36:b7:10:4a:cc:2b:45:d0:82:78: 23:f9:2f:0c:e6:1d:a5:45:c5:d9:ea:2c:66:1b:62: 20:d8:73:00:a0:01:3f:15:44:db:1d:5a:e9:dd:87: 46:70:f0:3d:69:05:c8:79:f0:a6:50:ad:ee:75:45: 38:9f:6d:28:c5:65:5d:e5:a0:8e:7b:99:59:93:c7: 9b:6e:db:32:2d:0c:23:ef:48:2e:4f:7f:7a:97:36: 70:3a:7d:27:c0:6e:ef:3c:66:f6:e3:70:2b:ea:4b: 13:e7:d2:07:78:e6:81:cf:12:67:ce:fc:84:5d:d7: 24:ed:65:f3:a9:86:4b:27:96:b1:b3:ca:31:85:e3: 3f:21:ca:24:11:3e:ba:51:0d:0b:4d:51:1b:b1:db: fa:4b:1b:88:83:61:01:79:30:1a:5d:7f:17:8f:8d: d9:0f:11:4c:f3:e6:66:b6:ae:7f:74:ec:44:32:eb: 6f:f1:cf:4f:a0:b5:91:10:5a:e7:a4:d0:8a:c2:cd: 06:09:33:59:2c:80:11:21:88:5a:47:25:3b:0f:c4: a1:af:af:c5:02:db:f1:6e:ac:8d:ab:55:90:74:45: 23:63:73:1e:bf:e2:84:a3:65:f6:65:22:1c:4f:3e: 93:6e:b9:ed:eb:fa:01:52:1b:5a:c3:f1:cd:64:c6: 7e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:01:2B:3E:25:DD:8A:0E:9E:AA:07:EB:2F:38:00:F3:84:CB:66:1B X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:40:4f:fc:99:06:51:b6:d1:eb:8c:f8:22:b8:83:b9:73:84: e2:74:31:f2:20:80:c5:da:bd:88:d5:89:a4:48:99:3c:6f:0e: 2b:dc:be:cf:f1:d9:29:8d:16:0a:25:45:3a:a7:1a:c3:2e:d9: f0:79:40:be:d1:2e:01:28:0a:af:56:d8:c6:8e:6b:2f:91:b6: 6c:0e:26:80:00:ad:05:39:da:d7:26:e7:a6:27:d8:a7:e5:ba: 55:95:1a:0c:fb:21:9a:a7:5a:07:1c:e7:8b:88:6c:97:c4:43: e0:d8:6c:f0:c4:ce:a7:29:2b:5a:8a:46:d4:56:ed:bb:f6:fb: 65:08:4f:ed:77:da:da:0b:c3:3c:70:98:25:fe:4b:1f:37:71: 3a:f0:16:72:0f:f5:70:63:4d:63:22:87:d7:20:d8:bb:f6:d1: d5:e6:0a:4f:79:44:6f:75:f7:06:fc:ef:5b:9e:86:6b:1f:24: 1b:5d:31:54:a0:43:67:99:8c:c7:fb:56:38:67:69:89:c0:5d: 61:3e:3b:cd:2e:c1:ae:04:c7:8c:3a:f4:4a:40:3a:9b:4c:44: 51:d4:5d:64:c4:e8:5a:7f:0f:96:1e:99:8a:c4:f8:4b:2d:89: 1e:5b:64:88:78:8f:93:dd:15:8e:fe:6f:cc:ae:70:45:9f:89: 05:65:76:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjYwOTIxMDI1OTM1WhcNMjYwOTI4MDI1OTM1WjAYMRYwFAYD VQQDEw02YWIwOWQ5Ny1jOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjn1zDa3EErMK0XQgngj+S8M5h2lRcXZ6ixmG2Ig2HMAoAE/FUTbHVrp3YdG cPA9aQXIefCmUK3udUU4n20oxWVd5aCOe5lZk8ebbtsyLQwj70guT396lzZwOn0n wG7vPGb243Ar6ksT59IHeOaBzxJnzvyEXdck7WXzqYZLJ5axs8oxheM/IcokET66 UQ0LTVEbsdv6SxuIg2EBeTAaXX8Xj43ZDxFM8+Zmtq5/dOxEMutv8c9PoLWREFrn pNCKws0GCTNZLIARIYhaRyU7D8Shr6/FAtvxbqyNq1WQdEUjY3Mev+KEo2X2ZSIc Tz6Tbrnt6/oBUhtaw/HNZMZ+CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUBKz4l 3YoOnqoH6y84APOEy2YbMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw0BP/JkGUbbR64z4IriDuXOE4nQx8iCAxdq9iNWJpEiZPG8OK9y+z/HZKY0W CiVFOqcawy7Z8HlAvtEuASgKr1bYxo5rL5G2bA4mgACtBTna1ybnpifYp+W6VZUa DPshmqdaBxzni4hsl8RD4Nhs8MTOpykrWopG1Fbtu/b7ZQhP7Xfa2gvDPHCYJf5L HzdxOvAWcg/1cGNNYyKH1yDYu/bR1eYKT3lEb3X3BvzvW56Gax8kG10xVKBDZ5mM x/tWOGdpicBdYT47zS7BrgTHjDr0SkA6m0xEUdRdZMToWn8Plh6ZisT4Sy2JHltk iHiPk90Vjv5vzK5wRZ+JBWV2oA== -----END CERTIFICATE-----Generated at Tue Sep 22 13:38:26 2026 by rpki-client