$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json) Hash identifier: y0p26IJAvakTb9Q3dDJy5AEiolLcHZ48fopsZ+f3HKo= Subject key identifier: 0D:2E:E9:B6:BE:B7:95:B8:40:3A:AB:77:07:81:24:18:D0:A1:71:90 Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft Manifest number: 024D Signing time: Thu 05 Nov 2026 03:09:18 +0000 Manifest this update: Thu 05 Nov 2026 03:09:18 +0000 Manifest next update: Thu 12 Nov 2026 03:09:18 +0000 Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: qfZ1ti7X1LVwXDsUAllNIakzbwjQmBVSioa5M8wPowU=) 2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: Nov 5 03:09:18 2026 GMT Not After : Nov 12 03:09:18 2026 GMT Subject: CN=6aebf35e-6c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:21:c7:35:84:52:d5:2e:3e:71:9c:54:59: c5:36:0b:30:48:86:cf:7d:bc:18:8c:d8:4c:f5:88: cf:ca:20:15:0c:14:da:6f:7b:a1:ea:10:f5:56:bf: 8a:f0:20:8e:d6:91:b0:8e:a8:dd:68:19:f7:2f:30: da:03:66:38:0f:f3:41:a0:2f:c1:61:83:0b:26:e2: d8:d0:ba:53:0a:c2:2c:4f:26:c6:e3:37:b7:e2:f9: 5b:48:cc:a5:86:2e:45:9b:a1:41:45:7d:86:4b:81: a5:b9:2a:87:4d:9f:59:b8:2e:37:ff:27:d8:7a:6e: 42:b2:5f:84:f5:d7:22:cf:d6:98:64:7a:52:aa:5a: 0e:c3:e6:39:9b:b5:8f:ab:b9:b6:56:09:e6:58:10: 4d:7f:2e:2f:e9:5f:63:92:65:7c:b4:17:55:e1:af: d9:76:a7:03:f7:58:3b:67:3a:d7:40:ff:05:1a:99: dc:33:98:2d:d0:c0:df:84:48:09:07:ac:2b:28:ea: da:79:c4:2e:b2:f2:ed:c6:76:77:d1:aa:79:04:74: 9f:99:a3:72:3f:3e:75:7d:af:f3:ed:4e:7c:4d:f8: b1:de:b0:15:91:f6:08:bd:50:7c:d2:a8:b8:bc:4e: 36:ed:02:ac:3f:0e:3c:3b:e5:a3:1e:da:00:c9:d5: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2E:E9:B6:BE:B7:95:B8:40:3A:AB:77:07:81:24:18:D0:A1:71:90 X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:cf:f5:89:56:59:d4:5b:48:7b:f4:cc:68:28:d6:63:b7:47: 66:0d:da:6a:95:3a:aa:d2:28:8e:3a:84:43:8f:b2:f1:87:d4: 0b:29:ad:ca:f5:3d:a8:07:f7:cb:d3:cd:69:10:12:05:7f:dc: 54:77:01:ee:7b:7b:80:e0:96:45:a7:db:82:8e:21:02:dc:0e: e3:ac:a7:ca:cf:e4:84:6a:ae:09:1a:45:9e:ef:b0:02:45:6a: ed:9b:24:10:8f:cb:49:43:92:cc:38:ff:da:ff:79:45:7d:c2: 3d:2e:fd:f3:af:f7:2d:df:66:b4:1c:aa:ca:4f:d2:5c:a0:87: c4:20:db:9d:4d:8d:4e:45:fe:31:de:f0:30:9a:24:55:f4:c4: 9c:cb:19:16:d3:fc:20:9e:c2:38:ac:2e:12:58:18:e8:ab:4b: fb:bb:d8:1d:40:9b:4d:03:f5:65:dc:9a:d2:2d:bd:57:8a:0b: cd:a6:97:07:fb:cd:a4:46:76:97:c6:59:09:5c:13:17:e7:4a: f8:a2:8e:71:d3:90:20:4c:0c:dd:8e:0a:04:05:67:6e:1c:db: 50:9c:18:62:7f:6f:00:d1:7e:b7:c5:dd:9b:aa:96:e4:67:c3: d2:dc:d5:02:99:96:88:54:d9:11:8a:2d:c4:86:95:0a:e1:24: 8d:ef:ac:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2 Nzc4RkVGMzUwHhcNMjYxMTA1MDMwOTE4WhcNMjYxMTEyMDMwOTE4WjAYMRYwFAYD VQQDEw02YWViZjM1ZS02YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnohxzWEUtUuPnGcVFnFNgswSIbPfbwYjNhM9YjPyiAVDBTab3uh6hD1Vr+K 8CCO1pGwjqjdaBn3LzDaA2Y4D/NBoC/BYYMLJuLY0LpTCsIsTybG4ze34vlbSMyl hi5Fm6FBRX2GS4GluSqHTZ9ZuC43/yfYem5Csl+E9dciz9aYZHpSqloOw+Y5m7WP q7m2VgnmWBBNfy4v6V9jkmV8tBdV4a/ZdqcD91g7ZzrXQP8FGpncM5gt0MDfhEgJ B6wrKOraecQusvLtxnZ30ap5BHSfmaNyPz51fa/z7U58Tfix3rAVkfYIvVB80qi4 vE427QKsPw48O+WjHtoAydWkHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0u6ba+ t5W4QDqrdweBJBjQoXGQMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5 REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV R25JWW1PbmdjLUZuZVA3elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUc/1iVZZ1FtIe/TMaCjWY7dHZg3aapU6qtIojjqEQ4+y8YfUCymtyvU9qAf3 y9PNaRASBX/cVHcB7nt7gOCWRafbgo4hAtwO46ynys/khGquCRpFnu+wAkVq7Zsk EI/LSUOSzDj/2v95RX3CPS7986/3Ld9mtByqyk/SXKCHxCDbnU2NTkX+Md7wMJok VfTEnMsZFtP8IJ7COKwuElgY6KtL+7vYHUCbTQP1Zdya0i29V4oLzaaXB/vNpEZ2 l8ZZCVwTF+dK+KKOcdOQIEwM3Y4KBAVnbhzbUJwYYn9vANF+t8Xdm6qW5GfD0tzV ApmWiFTZEYotxIaVCuEkje+sSA== -----END CERTIFICATE-----Generated at Thu Nov 5 17:28:37 2026 by rpki-client