$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft File: BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft (raw, json) Hash identifier: nsX5/oHOWnUgETIapY+alpxb99RdhGhLdAFf6WnTKJ8= Subject key identifier: E8:F7:EF:A2:F0:52:5B:70:AB:CC:97:A6:A4:B6:B3:C9:99:C2:44:9E Authority key identifier: 04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49 Certificate issuer: /CN=A919AF98/serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft Manifest number: 1F Signing time: Fri 09 Oct 2026 09:45:09 +0000 Manifest this update: Fri 09 Oct 2026 09:45:08 +0000 Manifest next update: Fri 16 Oct 2026 09:45:08 +0000 Files and hashes: 1: BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl (hash: Dg+F5/ETgbx4EKr/MnIqX7DOPvfOq0Tjbhv11oLrhnU=) 2: C00714349B8411F18334ED1A4411F970.roa (hash: WvayS8kOXeERf8gs4145wljiF/5B9WMa83/H0yClaxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AF98, serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049 Validity Not Before: Oct 9 09:45:08 2026 GMT Not After : Oct 16 09:45:08 2026 GMT Subject: CN=6ac8b7a5-f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:61:cc:f3:8d:c0:cf:aa:c1:6b:54:66:54: ab:03:c4:b7:a7:30:ff:fa:9e:06:a9:76:eb:d7:5d: 21:c8:6a:47:48:82:de:f8:a5:62:41:f6:eb:89:75: d1:9f:e1:98:82:cd:bf:e3:c1:91:80:7f:01:da:9a: 90:a7:b4:77:4c:ff:96:e3:89:ab:0b:bc:83:36:91: 72:69:c0:34:13:4b:3c:db:49:fa:7e:8a:a7:33:0b: d9:e7:6d:09:ea:2c:98:b1:42:85:00:61:63:2f:5b: 6d:11:1d:7e:49:0d:ad:62:ec:87:30:a0:ed:b7:dc: 15:00:20:3d:d1:b9:5c:46:e4:09:0f:9b:ce:da:67: 47:5f:e1:ec:35:76:a5:40:2d:d4:39:71:05:66:a1: 19:34:66:ca:66:a5:90:62:e7:3d:0a:a7:b8:a7:06: 4f:98:87:b0:b3:6d:e8:9e:67:46:be:c6:d1:b3:ac: c6:7a:d6:c3:e9:e3:13:51:61:0e:a5:0a:33:ba:ca: 46:11:2f:1e:14:86:34:b5:d7:6d:a1:62:32:45:60: e1:6e:71:ef:9b:cc:90:06:0e:85:e7:eb:bf:2f:3f: 51:cd:1b:30:77:b3:e3:d9:2d:e1:37:c9:97:e0:09: be:46:e2:3b:1e:9b:c2:9a:d8:6e:07:ab:fa:a3:ee: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:EF:A2:F0:52:5B:70:AB:CC:97:A6:A4:B6:B3:C9:99:C2:44:9E X509v3 Authority Key Identifier: keyid:04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e4:40:a2:21:f5:84:1d:0a:d7:27:a9:66:65:62:e2:8c:f9: 12:00:ce:be:af:9c:d0:18:b8:42:e1:6e:62:d6:df:ff:d2:cc: 75:61:fc:76:d1:0a:39:62:84:f6:cf:88:7b:da:fd:39:9c:24: e9:9c:97:32:c1:65:a3:df:60:b5:02:de:04:c1:bb:89:d5:7f: ef:2d:0f:91:1d:b7:4e:b5:0a:ac:03:1c:2c:27:ac:bf:19:b8: 4d:f2:9c:88:42:cc:43:5a:46:71:1b:55:0e:d1:d4:65:0b:a0: 28:8e:b2:33:b9:b4:83:61:32:ee:95:93:a5:4d:bd:69:27:53: 17:d1:2e:e1:ea:07:f5:6e:20:52:62:60:75:29:56:87:dd:46: 28:71:c0:90:ee:a1:02:ea:93:8e:21:4b:37:0c:c1:fd:6b:1a: 92:9f:41:80:f7:1b:de:81:08:dd:8d:2c:82:14:da:f3:79:88: 95:f9:6c:fe:fc:09:7d:a6:fe:af:79:59:a9:49:be:2d:52:57: 6b:34:81:d9:7e:08:ad:db:01:f6:11:46:15:1b:d3:61:1d:d6: 38:6e:ed:b1:07:00:08:fd:64:fb:72:36:dc:6e:c0:fe:77:ab: bd:02:4e:c0:c7:6f:bd:6f:5a:78:ad:45:71:09:20:29:24:0c: c4:72:2d:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUY5ODExMC8GA1UEBRMoMDREMEY4NEIxQUI2RTMxMzE5QjAzM0JFQ0JDMDUzNDVG RUNGRjA0OTAeFw0yNjEwMDkwOTQ1MDhaFw0yNjEwMTYwOTQ1MDhaMBgxFjAUBgNV BAMTDTZhYzhiN2E1LWYwYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAtmHM843Az6rBa1RmVKsDxLenMP/6ngapduvXXSHIakdIgt74pWJB9uuJddGf 4ZiCzb/jwZGAfwHampCntHdM/5bjiasLvIM2kXJpwDQTSzzbSfp+iqczC9nnbQnq LJixQoUAYWMvW20RHX5JDa1i7IcwoO233BUAID3RuVxG5AkPm87aZ0df4ew1dqVA LdQ5cQVmoRk0ZspmpZBi5z0Kp7inBk+Yh7CzbeieZ0a+xtGzrMZ61sPp4xNRYQ6l CjO6ykYRLx4UhjS1122hYjJFYOFuce+bzJAGDoXn678vP1HNGzB3s+PZLeE3yZfg Cb5G4jsem8Ka2G4Hq/qj7o85AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6PfvovBS W3CrzJempLazyZnCRJ4wHwYDVR0jBBgwFoAUBND4Sxq24xMZsDO+y8BTRf7P8Ekw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRjk4LzIxNDM0NjlDOUI4 NDExRjE4NUVBNERFNTQyMTFGOTcwL0JORDRTeHEyNHhNWnNETy15OEJUUmY3UDhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQk5ENFN4cTI0eE1ac0RPLXk4QlRSZjdQOEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB Rjk4LzIxNDM0NjlDOUI4NDExRjE4NUVBNERFNTQyMTFGOTcwL0JORDRTeHEyNHhN WnNETy15OEJUUmY3UDhFay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC25ECiIfWEHQrXJ6lmZWLijPkSAM6+r5zQGLhC4W5i1t//0sx1Yfx20Qo5YoT2 z4h72v05nCTpnJcywWWj32C1At4EwbuJ1X/vLQ+RHbdOtQqsAxwsJ6y/GbhN8pyI QsxDWkZxG1UO0dRlC6AojrIzubSDYTLulZOlTb1pJ1MX0S7h6gf1biBSYmB1KVaH 3UYoccCQ7qEC6pOOIUs3DMH9axqSn0GA9xvegQjdjSyCFNrzeYiV+Wz+/Al9pv6v eVmpSb4tUldrNIHZfgit2wH2EUYVG9NhHdY4bu2xBwAI/WT7cjbcbsD+d6u9Ak7A x2+9b1p4rUVxCSApJAzEci15 -----END CERTIFICATE-----Generated at Fri Oct 9 21:48:02 2026 by rpki-client