$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: RcfboHV4iMnIczD5GEjib1wfNvXqaaYd5edIYQxoovo= Subject key identifier: 17:0A:C4:9A:51:99:1D:78:94:E4:E2:08:A7:B9:E6:71:8C:7E:04:7E Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 19B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 199C Signing time: Tue 22 Sep 2026 16:20:44 +0000 Manifest this update: Tue 22 Sep 2026 16:20:43 +0000 Manifest next update: Tue 29 Sep 2026 16:20:43 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: vx1nGdLCq956xL4qHX84I2qhxltCA7vpNYbMgOtIQwk=) 2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6581 (0x19b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Sep 22 16:20:43 2026 GMT Not After : Sep 29 16:20:43 2026 GMT Subject: CN=6ab2aadc-ca1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:83:ab:a1:29:81:ce:2f:9d:38:7a:d3:87: aa:9e:ea:01:68:1a:0b:e7:2c:38:88:5e:f4:b2:da: c5:78:97:bb:cb:53:2a:84:66:7f:5b:98:6e:1d:a7: c3:aa:56:a9:9d:9a:6d:e5:45:76:9d:53:07:7a:74: df:6b:4e:81:fc:e6:7b:11:5d:dd:43:ff:cc:d0:c2: 27:9a:7e:93:5a:2d:1f:41:13:3f:e2:59:b3:c0:ad: de:f4:ad:83:35:70:ec:3a:2e:db:e0:42:20:f5:cb: 92:ce:fc:c4:89:75:be:21:b9:d1:1d:eb:b4:69:01: 76:d2:55:5e:b4:a7:f0:1e:89:7f:83:02:af:1b:ab: 60:5c:e3:8c:33:f2:7c:b7:a4:0c:91:f6:bf:b1:cd: 30:83:54:25:1e:6b:60:a9:f0:f5:db:b8:f9:9f:89: 1d:1e:1f:b7:a9:83:f5:54:a3:ca:0c:2a:a3:3f:a8: e6:5c:44:06:fe:39:e8:2f:3a:88:dc:f9:e7:e8:0c: 99:eb:1c:be:db:8f:0e:aa:bf:15:40:aa:ce:6b:0b: 25:2b:ef:eb:fc:8f:46:26:da:97:c6:ee:9b:97:31: 33:16:54:a6:af:85:ea:86:18:37:ca:80:1c:e6:98: 1c:b9:78:80:c3:d0:a1:7e:46:1f:f3:75:c0:1d:dd: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:C4:9A:51:99:1D:78:94:E4:E2:08:A7:B9:E6:71:8C:7E:04:7E X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b0:62:63:e6:37:df:bc:59:d0:ca:bd:31:62:0c:f4:37:15: dc:7d:3a:67:eb:92:29:52:9d:90:fc:4c:e2:78:2b:f5:7e:63: 84:f6:35:a6:3e:fe:11:11:c4:6a:d4:c7:e4:18:0c:34:dc:0e: 14:ab:e9:d5:84:2d:0f:6d:e3:17:3d:bd:6d:dd:d8:80:89:66: c8:72:3d:86:17:28:74:7a:d8:87:b0:55:c0:2c:ff:f3:0f:19: 97:5e:21:14:ba:95:8b:50:82:33:ee:a7:72:99:56:06:15:33: 85:c4:a7:6c:c8:31:37:5d:97:72:e0:8f:95:66:13:f0:ab:d1: 3e:5b:03:49:41:6a:c5:53:11:2d:db:cf:27:f8:08:e2:a0:76: c6:d5:c7:56:2f:db:ac:74:d7:71:8c:df:e7:25:97:74:1e:ba: 51:0c:86:99:d5:cd:69:3f:5c:ba:d4:2d:8a:d8:90:58:8e:02: f0:85:b8:e0:6f:0f:f2:5f:f7:94:18:1e:30:93:6f:19:42:ca: 1f:25:1d:ef:c8:9a:5f:16:9d:12:75:d0:02:3c:9f:0c:6f:56: fe:bc:7d:03:9f:ed:79:68:26:8d:83:e0:c0:6e:1a:4e:f1:5c: a5:14:eb:e1:cb:9b:0b:71:1b:88:2b:ab:57:a6:d7:03:7b:1f: fb:75:29:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjYwOTIyMTYyMDQzWhcNMjYwOTI5MTYyMDQzWjAYMRYwFAYD VQQDEw02YWIyYWFkYy1jYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR+Dq6Epgc4vnTh604eqnuoBaBoL5yw4iF70strFeJe7y1MqhGZ/W5huHafD qlapnZpt5UV2nVMHenTfa06B/OZ7EV3dQ//M0MInmn6TWi0fQRM/4lmzwK3e9K2D NXDsOi7b4EIg9cuSzvzEiXW+IbnRHeu0aQF20lVetKfwHol/gwKvG6tgXOOMM/J8 t6QMkfa/sc0wg1QlHmtgqfD127j5n4kdHh+3qYP1VKPKDCqjP6jmXEQG/jnoLzqI 3Pnn6AyZ6xy+248Oqr8VQKrOawslK+/r/I9GJtqXxu6blzEzFlSmr4Xqhhg3yoAc 5pgcuXiAw9ChfkYf83XAHd2M4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcKxJpR mR14lOTiCKe55nGMfgR+MB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf7BiY+Y337xZ0Mq9MWIM9DcV3H06Z+uSKVKdkPxM4ngr9X5jhPY1pj7+ERHE atTH5BgMNNwOFKvp1YQtD23jFz29bd3YgIlmyHI9hhcodHrYh7BVwCz/8w8Zl14h FLqVi1CCM+6ncplWBhUzhcSnbMgxN12XcuCPlWYT8KvRPlsDSUFqxVMRLdvPJ/gI 4qB2xtXHVi/brHTXcYzf5yWXdB66UQyGmdXNaT9cutQtitiQWI4C8IW44G8P8l/3 lBgeMJNvGULKHyUd78iaXxadEnXQAjyfDG9W/rx9A5/teWgmjYPgwG4aTvFcpRTr 4cubC3EbiCurV6bXA3sf+3UpfA== -----END CERTIFICATE-----Generated at Thu Sep 24 13:26:14 2026 by rpki-client