$ rpki-client -vvvf rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft File: BejGeyhlieCN1T6NfF_LGa17nWI.mft (raw, json) Hash identifier: 9l83SSQ0JQLgjlAprnL4g1WgFZFwXy2uEDDusHBSNdQ= Subject key identifier: 51:F9:C0:1F:DB:81:63:B4:0C:4C:87:D6:62:E8:D2:DA:B9:52:23:AC Authority key identifier: 05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62 Certificate issuer: /CN=A91930DA/serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft Manifest number: 1F Signing time: Mon 21 Sep 2026 08:53:28 +0000 Manifest this update: Mon 21 Sep 2026 08:53:27 +0000 Manifest next update: Mon 28 Sep 2026 08:53:27 +0000 Files and hashes: 1: BejGeyhlieCN1T6NfF_LGa17nWI.crl (hash: Y5dn3FRKYgC27B/jqxkIDvE08Vomwmw/dVvAFBYTcT8=) 2: 246A33168BEF11F1ACDDCCF43911F970.roa (hash: gCFF0Q2ZwbsUUaQyHh3frrYjgtR3Y10EKfitU5Uk3LE=) 3: 4963B08E8BEF11F1870042623A11F970.roa (hash: AEMBzlbpiuLRvCY2ce6fFVjAW0yXmrS7aP4V+jY9Yx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91930DA, serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62 Validity Not Before: Sep 21 08:53:27 2026 GMT Not After : Sep 28 08:53:27 2026 GMT Subject: CN=6ab0f088-cbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:6d:86:cc:10:1e:88:0a:b4:44:af:5c:92: 67:21:26:e9:97:70:ac:aa:18:6c:ad:8d:00:c9:b9: b7:17:50:7f:49:01:51:e8:bb:5b:25:6f:6d:4c:e4: 99:1b:ba:73:da:9d:58:4c:f5:5c:ae:89:f7:2a:a2: 47:06:84:d9:c9:6c:6e:25:3f:5c:0e:24:0c:60:0b: f3:91:50:c3:ba:91:15:9f:a8:56:8f:7f:6a:ed:bd: 3e:33:77:1f:08:86:63:44:15:2e:2c:3a:95:1c:18: 02:eb:50:d2:ab:03:7a:f6:24:14:ef:19:e1:7f:d4: 7d:91:44:6e:03:3a:96:c8:fe:37:35:2d:cd:9a:39: bc:a8:4d:4f:09:09:3b:57:c6:22:02:4c:65:ad:21: e5:ab:b6:4f:58:a9:87:19:11:ae:59:b9:12:df:25: 1b:6d:82:b4:9b:83:12:88:53:b5:6b:2e:44:eb:58: 34:10:7e:7f:65:76:36:0e:a9:6f:a0:58:17:6a:2e: 7d:35:18:ec:0a:d2:47:76:48:d9:3b:54:e8:f6:09: 66:9d:ea:dc:cc:17:3a:7c:d0:8d:b8:a4:c7:1d:79: ed:30:f3:54:ab:e0:63:8c:45:97:9f:20:c2:f3:2d: 4e:5e:ce:6a:ce:dc:18:dd:84:f8:77:6f:f8:be:4d: dc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F9:C0:1F:DB:81:63:B4:0C:4C:87:D6:62:E8:D2:DA:B9:52:23:AC X509v3 Authority Key Identifier: keyid:05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b0:00:6e:3c:89:9b:81:98:02:af:c9:1a:c1:65:0e:82:50: 9a:ae:a5:fd:a2:16:58:3f:73:b2:c4:55:74:fa:1c:09:34:17: 32:ad:96:1e:26:c3:b2:1b:02:df:31:4c:3d:c0:97:f9:97:af: 66:4b:ff:42:f1:e0:9c:eb:4a:a2:81:a4:a3:e7:52:2c:a5:9e: 39:dc:48:e2:ac:32:7e:d1:d6:4b:d4:da:87:62:0d:c1:74:0d: a9:12:95:d0:3f:76:c6:55:1f:43:32:69:da:01:7f:ee:2a:2a: 18:1a:f8:ed:52:36:98:81:8c:4c:09:5c:60:c9:5d:6e:4c:9d: 41:22:69:68:8c:ac:e4:b8:5c:66:76:d2:62:45:9a:b1:da:b9: 6b:49:43:2e:c5:4d:5b:e3:e6:85:81:6d:13:64:98:93:4d:b8: 0f:8e:0d:e6:3c:30:b8:1c:15:73:8a:5b:34:24:d6:d2:83:f6: b4:11:f1:b7:88:0c:74:50:e3:ba:4a:15:e7:54:5a:6a:7f:1d: fe:1c:02:a1:2f:4d:42:3e:03:d0:39:f8:38:e2:46:60:1f:a4: 45:1d:92:c9:18:b7:d5:aa:1a:14:99:9b:ef:c3:2e:5a:67:cf: 68:2f:14:f4:70:99:fd:09:cf:24:4d:8c:67:9d:7b:95:4d:a0: a7:87:51:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzBEQTExMC8GA1UEBRMoMDVFOEM2N0IyODY1ODlFMDhERDUzRThEN0M1RkNCMTlB RDdCOUQ2MjAeFw0yNjA5MjEwODUzMjdaFw0yNjA5MjgwODUzMjdaMBgxFjAUBgNV BAMTDTZhYjBmMDg4LWNiYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtFm2GzBAeiAq0RK9ckmchJumXcKyqGGytjQDJubcXUH9JAVHou1slb21M5Jkb unPanVhM9VyuifcqokcGhNnJbG4lP1wOJAxgC/ORUMO6kRWfqFaPf2rtvT4zdx8I hmNEFS4sOpUcGALrUNKrA3r2JBTvGeF/1H2RRG4DOpbI/jc1Lc2aObyoTU8JCTtX xiICTGWtIeWrtk9YqYcZEa5ZuRLfJRttgrSbgxKIU7VrLkTrWDQQfn9ldjYOqW+g WBdqLn01GOwK0kd2SNk7VOj2CWad6tzMFzp80I24pMcdee0w81Sr4GOMRZefIMLz LU5ezmrO3BjdhPh3b/i+Tdy1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUfnAH9uB Y7QMTIfWYujS2rlSI6wwHwYDVR0jBBgwFoAUBejGeyhlieCN1T6NfF/LGa17nWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMERBLzFDMDZDMjRFOEJF RTExRjFBODQ4OEE3QTM5MTFGOTcwL0JlakdleWhsaWVDTjFUNk5mRl9MR2ExN25X SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQmVqR2V5aGxpZUNOMVQ2TmZGX0xHYTE3bldJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MERBLzFDMDZDMjRFOEJFRTExRjFBODQ4OEE3QTM5MTFGOTcwL0JlakdleWhsaWVD TjFUNk5mRl9MR2ExN25XSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5sABuPImbgZgCr8kawWUOglCarqX9ohZYP3OyxFV0+hwJNBcyrZYeJsOyGwLf MUw9wJf5l69mS/9C8eCc60qigaSj51IspZ453EjirDJ+0dZL1NqHYg3BdA2pEpXQ P3bGVR9DMmnaAX/uKioYGvjtUjaYgYxMCVxgyV1uTJ1BImlojKzkuFxmdtJiRZqx 2rlrSUMuxU1b4+aFgW0TZJiTTbgPjg3mPDC4HBVzils0JNbSg/a0EfG3iAx0UOO6 ShXnVFpqfx3+HAKhL01CPgPQOfg44kZgH6RFHZLJGLfVqhoUmZvvwy5aZ89oLxT0 cJn9Cc8kTYxnnXuVTaCnh1ES -----END CERTIFICATE-----Generated at Mon Sep 21 18:56:51 2026 by rpki-client