$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: za6Ea84NEfiAWCFkW/lPa4sL3z0InzXbCuBswTbB1Ew= Subject key identifier: 34:E6:60:99:60:63:DE:42:5A:13:5E:EA:05:C7:72:2D:B4:6F:9B:27 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09E4 Signing time: Sat 26 Sep 2026 20:02:30 +0000 Manifest this update: Sat 26 Sep 2026 20:02:30 +0000 Manifest next update: Sat 03 Oct 2026 20:02:30 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: K49HWv/eVabbVysmfmew08T0Vem4WznWOlb9dpa+sEU=) 2: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 3: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 4: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 5: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 6: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Sep 26 20:02:30 2026 GMT Not After : Oct 3 20:02:30 2026 GMT Subject: CN=6ab824d6-151d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:76:c9:4b:f4:60:2d:94:d1:c1:3f:cd:74: 46:f1:43:5a:94:f9:43:66:69:e4:fb:e9:0a:8f:bc: 52:af:06:9d:7a:a7:e4:42:09:d9:9e:f7:a8:b8:51: 49:77:7f:df:4b:50:6d:67:34:ee:d6:21:dd:18:a7: b4:64:87:fe:7e:93:62:19:f9:71:93:13:0b:2d:6b: 77:f2:ac:71:49:6e:92:04:ad:6e:73:9f:87:74:2b: fb:f2:fc:a9:2b:81:2b:16:19:fd:78:2f:b9:1f:e3: 7f:dc:12:a6:7f:c4:d3:d7:a7:c4:1e:45:f4:99:05: 9b:c9:ab:d0:02:26:c9:69:2d:d8:25:21:82:29:85: 5e:55:bb:66:b6:6d:bd:ca:dd:ed:43:f1:22:fd:15: 3d:73:67:f2:96:c3:93:97:b0:b7:53:05:73:14:3f: 4e:cf:7d:5b:9a:08:80:ce:06:f8:32:68:39:4c:d9: c7:d2:88:7c:d7:93:4e:aa:ff:ad:2b:f3:0a:29:1b: df:c9:cd:84:16:e9:f0:e4:c9:28:12:37:98:62:53: 88:b3:3c:54:35:0b:c8:66:51:7c:1c:f6:e9:ca:fd: 1e:27:27:80:ee:17:78:89:25:cf:e9:cb:1d:17:2a: f2:6d:5a:cd:30:c4:72:06:3a:06:17:f5:9f:e3:81: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E6:60:99:60:63:DE:42:5A:13:5E:EA:05:C7:72:2D:B4:6F:9B:27 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d2:ac:a6:85:70:ac:3d:39:7e:c2:3d:12:ec:32:a5:d9:e1: 9c:12:15:40:cd:1c:0c:fe:08:37:cf:32:b5:e5:b0:16:78:94: 16:a6:3a:9e:e3:59:50:f0:fa:c9:91:18:ac:e8:c3:52:fc:2b: f6:0c:78:bc:a5:20:a6:3a:22:13:bd:8e:74:1f:51:f5:09:ce: 08:69:38:6e:17:0f:d6:e0:39:77:2e:89:ee:84:07:b4:c5:9c: da:ae:6d:c4:ec:6c:b9:70:f3:ef:6e:1f:3c:58:66:b4:36:96: 0f:1c:3b:8c:e9:8b:5e:7a:95:86:af:77:ca:e3:b0:e1:06:fb: ba:24:f6:08:28:78:90:e9:af:18:24:fd:3e:db:19:30:b4:f4: 35:85:29:a7:21:af:d7:4e:a7:43:09:1e:33:1e:af:cf:44:61: 84:20:e3:01:4a:3c:3f:5d:63:cc:c0:05:f1:32:cb:05:99:62: df:0a:b2:f3:52:6f:f2:56:5a:c4:8b:d8:ed:61:04:4e:69:39: 32:47:ac:b8:fe:27:70:b8:0e:3c:de:19:47:97:9a:16:24:90: 17:9d:75:35:54:ba:7e:bd:25:26:b6:72:2c:fe:91:b5:31:a3: 92:39:d0:44:ff:f8:9f:d3:78:e8:5e:d3:f9:c7:7d:d9:f1:ad: f0:34:2c:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwOTI2MjAwMjMwWhcNMjYxMDAzMjAwMjMwWjAYMRYwFAYD VQQDEw02YWI4MjRkNi0xNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNl2yUv0YC2U0cE/zXRG8UNalPlDZmnk++kKj7xSrwadeqfkQgnZnveouFFJ d3/fS1BtZzTu1iHdGKe0ZIf+fpNiGflxkxMLLWt38qxxSW6SBK1uc5+HdCv78vyp K4ErFhn9eC+5H+N/3BKmf8TT16fEHkX0mQWbyavQAibJaS3YJSGCKYVeVbtmtm29 yt3tQ/Ei/RU9c2fylsOTl7C3UwVzFD9Oz31bmgiAzgb4Mmg5TNnH0oh815NOqv+t K/MKKRvfyc2EFunw5MkoEjeYYlOIszxUNQvIZlF8HPbpyv0eJyeA7hd4iSXP6csd FyrybVrNMMRyBjoGF/Wf44FleQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTmYJlg Y95CWhNe6gXHci20b5snMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9KspoVwrD05fsI9EuwypdnhnBIVQM0cDP4IN88yteWwFniUFqY6nuNZUPD6 yZEYrOjDUvwr9gx4vKUgpjoiE72OdB9R9QnOCGk4bhcP1uA5dy6J7oQHtMWc2q5t xOxsuXDz724fPFhmtDaWDxw7jOmLXnqVhq93yuOw4Qb7uiT2CCh4kOmvGCT9PtsZ MLT0NYUppyGv106nQwkeMx6vz0RhhCDjAUo8P11jzMAF8TLLBZli3wqy81Jv8lZa xIvY7WEETmk5MkesuP4ncLgOPN4ZR5eaFiSQF511NVS6fr0lJrZyLP6RtTGjkjnQ RP/4n9N46F7T+cd92fGt8DQsfQ== -----END CERTIFICATE-----Generated at Sun Sep 27 10:59:55 2026 by rpki-client