$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: 8lBjGzhpypUw/1jwwVzdQnI6q7NyzxjB69OdDqb33Ys= Subject key identifier: 00:56:3A:11:44:75:77:D5:3A:D9:54:B7:59:19:32:D7:30:08:F0:74 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0CBF Signing time: Tue 22 Sep 2026 18:24:03 +0000 Manifest this update: Tue 22 Sep 2026 18:24:03 +0000 Manifest next update: Tue 29 Sep 2026 18:24:03 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: PnX7qWIj4l65kAeNzs9OuBaTUooijPulrAJrAOR4AKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Sep 22 18:24:03 2026 GMT Not After : Sep 29 18:24:03 2026 GMT Subject: CN=6ab2c7c3-82aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:09:92:73:58:73:bc:0c:0e:c9:f4:e1:86: 7a:1e:c9:b7:52:25:39:5e:0a:ea:c8:62:54:da:96: 2b:5d:5c:e2:76:50:a1:35:85:7c:6b:51:af:73:53: 38:5f:61:82:ec:78:e6:58:ff:a2:79:3a:57:8a:20: e9:dd:79:4a:21:dc:88:48:54:f2:39:02:69:4f:94: 62:da:5f:4a:ee:bd:15:6d:41:7d:09:28:63:2c:84: 3b:ae:42:54:c9:1a:21:45:11:90:50:00:e7:b5:3a: 2b:c5:52:22:95:bd:09:1d:da:d0:f6:e8:d9:38:db: 94:71:a1:b4:ed:70:02:20:18:27:d4:42:56:b1:cf: 31:5f:69:be:8b:ab:97:23:49:39:72:59:5c:58:05: 1b:e5:71:98:01:e6:63:aa:cc:3b:1d:dd:fa:9c:17: 32:be:26:a2:d7:6d:d7:81:07:f9:94:de:95:be:04: e2:37:11:45:13:f3:88:bd:cd:97:28:db:ab:5e:2d: 06:48:72:bf:30:7c:42:9f:02:e3:ab:5b:5c:d6:c7: 32:4e:4b:e8:04:68:8f:25:12:b5:bb:5e:35:88:7c: e7:32:84:79:c7:73:8d:6e:24:ca:07:f7:7a:90:50: 12:2b:98:77:64:f0:8a:0a:5e:45:b3:bd:f8:97:3a: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:3A:11:44:75:77:D5:3A:D9:54:B7:59:19:32:D7:30:08:F0:74 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:ae:cb:98:9a:4d:d5:4e:7e:7b:4b:d5:b4:e8:30:8e:ad: dc:97:b3:24:00:a5:21:16:96:34:5f:63:cc:8c:b6:1d:cc:8d: 49:e5:c0:1e:0a:ad:ef:d1:14:b8:a2:13:12:1e:02:1a:3e:5e: 73:15:44:88:39:1a:12:47:eb:4f:83:5f:c2:94:ef:bc:65:58: 47:25:10:15:b3:fb:65:8a:c4:f6:92:aa:e9:37:38:2e:f4:3e: 59:37:b6:ea:47:03:81:83:9c:56:bf:c2:de:04:b8:fb:e1:94: e9:a4:7c:fb:94:33:76:25:50:d5:dc:35:52:8f:15:67:ed:1f: 54:09:97:cc:e3:2c:13:3b:70:44:33:7c:3b:c6:75:93:76:66: a0:d8:20:fb:ad:74:8d:9d:9d:b0:1f:d1:a2:4a:28:c0:2c:ac: 5a:1e:79:02:f0:7b:30:62:57:fc:5f:04:3c:b9:3c:c5:78:16: c7:76:b9:6b:1f:c0:67:be:6d:f7:b3:6d:89:f0:70:1d:d6:2c: 0b:08:2f:8e:c3:86:3e:42:a6:fe:1c:58:b6:98:87:f5:de:a0: 53:13:89:e1:47:4f:cc:54:53:98:9f:28:d5:f9:e2:67:da:d9: 28:df:b6:0b:d1:25:7d:f6:00:4a:12:42:ce:b6:ca:33:81:85: 55:f3:89:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjYwOTIyMTgyNDAzWhcNMjYwOTI5MTgyNDAzWjAYMRYwFAYD VQQDEw02YWIyYzdjMy04MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9kJknNYc7wMDsn04YZ6Hsm3UiU5XgrqyGJU2pYrXVzidlChNYV8a1Gvc1M4 X2GC7HjmWP+ieTpXiiDp3XlKIdyISFTyOQJpT5Ri2l9K7r0VbUF9CShjLIQ7rkJU yRohRRGQUADntTorxVIilb0JHdrQ9ujZONuUcaG07XACIBgn1EJWsc8xX2m+i6uX I0k5cllcWAUb5XGYAeZjqsw7Hd36nBcyviai123XgQf5lN6VvgTiNxFFE/OIvc2X KNurXi0GSHK/MHxCnwLjq1tc1scyTkvoBGiPJRK1u141iHznMoR5x3ONbiTKB/d6 kFASK5h3ZPCKCl5Fs734lzoK1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABWOhFE dXfVOtlUt1kZMtcwCPB0MB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJyuy5iaTdVOfntL1bToMI6t3JezJAClIRaWNF9jzIy2HcyNSeXAHgqt79EU uKITEh4CGj5ecxVEiDkaEkfrT4NfwpTvvGVYRyUQFbP7ZYrE9pKq6Tc4LvQ+WTe2 6kcDgYOcVr/C3gS4++GU6aR8+5QzdiVQ1dw1Uo8VZ+0fVAmXzOMsEztwRDN8O8Z1 k3ZmoNgg+610jZ2dsB/RokoowCysWh55AvB7MGJX/F8EPLk8xXgWx3a5ax/AZ75t 97NtifBwHdYsCwgvjsOGPkKm/hxYtpiH9d6gUxOJ4UdPzFRTmJ8o1fniZ9rZKN+2 C9ElffYAShJCzrbKM4GFVfOJ3g== -----END CERTIFICATE-----Generated at Wed Sep 23 21:10:41 2026 by rpki-client