$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: FFtiHKa8U5GUWgPztQKPyB2o12GkqBCzkqMmRvF9Otg= Subject key identifier: 36:4D:60:F3:03:D7:84:73:DD:BD:06:91:44:01:43:36:57:D0:B5:17 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09E3 Signing time: Thu 24 Sep 2026 19:53:50 +0000 Manifest this update: Thu 24 Sep 2026 19:53:49 +0000 Manifest next update: Thu 01 Oct 2026 19:53:49 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: t4jBIkwvBcMFTGE+NPXB4V39rF9+g2703C7B5rAITLQ=) 2: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 3: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 4: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 5: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 6: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Sep 24 19:53:49 2026 GMT Not After : Oct 1 19:53:49 2026 GMT Subject: CN=6ab57fce-f086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:03:9b:75:7c:b6:41:44:df:ae:80:c7:2f: 08:a9:0e:aa:e0:0f:4c:ec:35:f8:19:b8:92:2c:ce: fe:73:73:77:10:6b:12:3f:99:be:3f:75:e6:8d:ca: 86:64:79:c1:58:eb:f6:2c:b3:24:44:6b:46:60:6b: ae:04:ea:9a:26:e4:62:00:ca:80:ec:70:38:86:eb: 32:2f:24:bd:47:be:84:f8:1d:82:8c:59:24:11:2e: 8e:17:c2:03:fb:63:bd:17:8c:de:f6:82:54:91:86: 50:41:cb:50:34:e7:86:f9:a3:45:97:32:a5:48:70: 0e:d3:e4:12:27:f8:93:62:1b:53:64:68:6c:4f:8d: 60:63:30:2d:5c:98:2a:3f:c2:ec:ec:d0:9e:1e:80: 12:7f:84:d5:d3:28:82:5d:52:b7:c2:59:e5:8d:4d: 8a:71:88:a8:1d:9f:d7:f8:70:a1:9f:ed:37:05:bc: 4b:6d:6f:09:4c:cd:99:7c:91:ca:58:c9:da:0f:ae: fb:da:f1:fc:97:03:a8:80:29:d6:c2:54:13:f5:f4: 99:76:89:f8:98:d1:d5:5a:4d:32:a6:9a:04:aa:d0: 23:e0:ca:27:88:74:b6:53:c3:ff:94:e9:a2:81:c4: ba:e4:67:e2:b1:54:fa:a9:b7:e5:71:bb:4a:1c:6c: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:60:F3:03:D7:84:73:DD:BD:06:91:44:01:43:36:57:D0:B5:17 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e7:b9:be:d0:b6:46:78:a9:c2:e6:d0:9b:1a:af:40:4b:35: 4c:5b:23:d1:65:b3:81:3d:1d:3c:2e:d0:24:e0:fc:d0:2d:7a: 13:ab:a5:a7:63:20:eb:78:22:d8:4f:9a:64:64:5e:91:21:e8: 6e:3c:15:5b:a2:2b:1f:3a:68:40:03:c3:6f:92:c8:35:aa:1a: 50:1e:09:ec:74:16:07:d2:77:17:e2:13:29:eb:ec:3b:c4:56: 93:c3:48:8f:22:4d:bd:98:ba:e8:63:f8:57:0c:49:53:4c:40: be:6b:72:e3:5d:b5:7b:f5:ba:ce:31:8e:3c:b3:35:d9:83:14: e1:93:f1:8b:c5:36:d6:cc:e7:55:e3:d2:54:d4:8b:7a:bc:a4: 3f:d6:7c:1a:85:84:cb:94:f6:6a:2a:ca:21:c3:83:d6:ff:c3: b6:47:11:d0:75:d2:78:b0:a2:06:07:04:02:ca:1d:94:89:52: d1:ad:b3:21:96:ee:2d:44:ff:f9:35:04:18:5f:72:a0:c0:96: 8a:c9:43:1a:3b:4f:60:64:02:87:ab:11:b6:21:50:8c:a4:ad: 1e:6e:24:eb:4c:5d:44:15:f5:f1:24:3b:23:d7:61:47:28:91: 2b:fd:f2:99:d1:da:fb:22:fc:e3:39:f5:9e:fe:82:45:cc:90: a5:d0:cf:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwOTI0MTk1MzQ5WhcNMjYxMDAxMTk1MzQ5WjAYMRYwFAYD VQQDEw02YWI1N2ZjZS1mMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iUDm3V8tkFE366Axy8IqQ6q4A9M7DX4GbiSLM7+c3N3EGsSP5m+P3XmjcqG ZHnBWOv2LLMkRGtGYGuuBOqaJuRiAMqA7HA4husyLyS9R76E+B2CjFkkES6OF8ID +2O9F4ze9oJUkYZQQctQNOeG+aNFlzKlSHAO0+QSJ/iTYhtTZGhsT41gYzAtXJgq P8Ls7NCeHoASf4TV0yiCXVK3wlnljU2KcYioHZ/X+HChn+03BbxLbW8JTM2ZfJHK WMnaD6772vH8lwOogCnWwlQT9fSZdon4mNHVWk0yppoEqtAj4MoniHS2U8P/lOmi gcS65GfisVT6qbflcbtKHGzxvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZNYPMD 14Rz3b0GkUQBQzZX0LUXMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALee5vtC2RnipwubQmxqvQEs1TFsj0WWzgT0dPC7QJOD80C16E6ulp2Mg63gi 2E+aZGRekSHobjwVW6IrHzpoQAPDb5LINaoaUB4J7HQWB9J3F+ITKevsO8RWk8NI jyJNvZi66GP4VwxJU0xAvmty4121e/W6zjGOPLM12YMU4ZPxi8U21sznVePSVNSL erykP9Z8GoWEy5T2airKIcOD1v/DtkcR0HXSeLCiBgcEAsodlIlS0a2zIZbuLUT/ +TUEGF9yoMCWislDGjtPYGQCh6sRtiFQjKStHm4k60xdRBX18SQ7I9dhRyiRK/3y mdHa+yL84zn1nv6CRcyQpdDP2g== -----END CERTIFICATE-----Generated at Sat Sep 26 07:19:11 2026 by rpki-client