$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json) Hash identifier: 8HRHghnQC+aZ3t+9I++TSS/UgfTn89kIGKRMk1Nz5CY= Subject key identifier: 58:B9:D2:F1:16:15:D2:FF:1D:D4:73:40:AD:3D:06:1B:5E:F8:BB:B8 Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft Manifest number: 01D2 Signing time: Mon 21 Sep 2026 03:42:18 +0000 Manifest this update: Mon 21 Sep 2026 03:42:17 +0000 Manifest next update: Mon 28 Sep 2026 03:42:17 +0000 Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: mW+zIqiNhpkPa7VZUmkpOLzTMUMZ2nppKxs6qPYDlUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Validity Not Before: Sep 21 03:42:17 2026 GMT Not After : Sep 28 03:42:17 2026 GMT Subject: CN=6ab0a79a-cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:25:0f:54:c3:34:96:d0:54:04:fb:b4:50: b9:56:0d:84:30:d4:c9:1d:5e:b7:1b:5a:95:e4:3f: 6b:8a:cf:7b:f9:c6:11:70:ed:e5:99:33:ca:98:7a: 68:4a:09:02:06:a1:8e:30:51:b1:01:2e:e0:38:12: ad:ef:59:ed:fa:d2:73:db:10:7d:87:78:fe:a2:70: d4:93:12:20:63:94:05:ed:89:50:9a:ab:97:a1:7d: d1:57:eb:e9:3e:1f:e2:c7:be:23:56:11:d1:4d:f2: dd:3b:41:35:e0:27:86:0b:1d:07:34:2f:96:6a:fe: b0:bb:d0:9c:87:98:03:3f:b5:5c:60:26:43:8f:7a: 7a:e8:ef:b8:78:83:a8:fa:72:fe:de:1b:6e:01:b3: 4d:b8:4d:a3:b9:71:39:38:0f:e8:6e:e6:fb:56:79: 0c:36:a0:33:25:43:a9:d8:53:22:9f:be:0b:90:be: c1:38:52:f8:5c:80:04:b9:42:89:24:d8:1b:d4:f7: 44:6b:34:26:f8:2c:73:cb:43:5c:53:5f:06:d6:7d: 4e:8c:0a:dc:0c:db:1b:87:aa:8f:ee:0f:03:8d:be: 4c:cf:cf:59:cf:06:c9:06:bb:c4:43:3c:0b:eb:8e: 46:e5:d7:b4:73:32:20:4a:65:0e:0f:a7:02:49:c1: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B9:D2:F1:16:15:D2:FF:1D:D4:73:40:AD:3D:06:1B:5E:F8:BB:B8 X509v3 Authority Key Identifier: keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:75:e6:46:01:a3:cf:93:cf:e7:40:f5:22:fc:86:23:1f:86: a4:1f:e9:0b:1b:b4:7e:ad:f8:1b:7b:b6:ff:6e:cc:0e:ba:d8: d9:15:58:3b:88:c2:66:5e:5a:c8:c9:09:50:b8:4b:42:86:4c: 1b:0d:a1:66:0f:03:4b:41:eb:8d:b7:d1:b5:92:33:9d:cc:9c: c5:37:15:b7:d0:ae:48:4c:2f:c9:10:82:37:25:a5:04:06:d7: 64:0b:43:be:a9:43:15:5e:89:73:a2:b6:a0:6c:12:7e:b1:bd: a3:f1:2c:db:ca:84:cf:24:a1:ad:c9:74:cf:b4:8e:e5:5a:bc: 10:3c:9f:d7:b5:03:18:09:ea:29:1e:42:30:b6:31:d2:bc:27: 2c:26:96:7c:47:07:fa:8a:80:78:b4:4b:2a:7f:e3:15:95:b2: 09:87:88:63:28:b0:b8:7a:3f:b5:18:e5:80:b9:9d:f7:89:0a: d7:d0:c2:58:fd:0b:f4:6d:e9:86:98:18:a3:8f:0f:33:5f:87: 36:7a:34:16:71:72:cd:c8:ac:7f:55:52:a2:42:57:23:5b:b7: 22:15:37:6c:1e:95:13:3e:c7:6d:e3:bb:07:a5:3f:21:c8:93: 12:55:e0:77:ae:1e:10:59:31:a4:06:0c:15:e0:e1:dc:fe:f0: 17:3f:f5:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDA0RjBEOEE5MzAyQjIyQjYwRTMwRjQ2NTFCODJBRTk5 OUZGNzRDOUIwHhcNMjYwOTIxMDM0MjE3WhcNMjYwOTI4MDM0MjE3WjAYMRYwFAYD VQQDEw02YWIwYTc5YS1jZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw60lD1TDNJbQVAT7tFC5Vg2EMNTJHV63G1qV5D9ris97+cYRcO3lmTPKmHpo SgkCBqGOMFGxAS7gOBKt71nt+tJz2xB9h3j+onDUkxIgY5QF7YlQmquXoX3RV+vp Ph/ix74jVhHRTfLdO0E14CeGCx0HNC+Wav6wu9Cch5gDP7VcYCZDj3p66O+4eIOo +nL+3htuAbNNuE2juXE5OA/obub7VnkMNqAzJUOp2FMin74LkL7BOFL4XIAEuUKJ JNgb1PdEazQm+Cxzy0NcU18G1n1OjArcDNsbh6qP7g8Djb5Mz89ZzwbJBrvEQzwL 645G5de0czIgSmUOD6cCScERDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFi50vEW FdL/HdRzQK09Bhte+Lu4MB8GA1UdIwQYMBaAFATw2KkwKyK2DjD0ZRuCrpmf90yb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9CMjM4QTE4NEYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBcklyWU9NUFJsRzRLdW1aXzNU SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBckly WU9NUFJsRzRLdW1aXzNUSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApHXmRgGjz5PP50D1IvyGIx+GpB/pCxu0fq34G3u2/27MDrrY2RVYO4jCZl5a yMkJULhLQoZMGw2hZg8DS0HrjbfRtZIzncycxTcVt9CuSEwvyRCCNyWlBAbXZAtD vqlDFV6Jc6K2oGwSfrG9o/Es28qEzyShrcl0z7SO5Vq8EDyf17UDGAnqKR5CMLYx 0rwnLCaWfEcH+oqAeLRLKn/jFZWyCYeIYyiwuHo/tRjlgLmd94kK19DCWP0L9G3p hpgYo48PM1+HNno0FnFyzcisf1VSokJXI1u3IhU3bB6VEz7HbeO7B6U/IciTElXg d64eEFkxpAYMFeDh3P7wFz/1tg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:59:11 2026 by rpki-client