$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: N5Fd1EhseaTPIGDQMabCFKL9A4ntZLqF88q/u6yBTGU= Subject key identifier: 7D:0A:F5:4B:19:1F:40:92:C6:F7:83:85:5A:67:F8:55:07:DA:A3:A3 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 08FE Signing time: Tue 22 Sep 2026 20:08:21 +0000 Manifest this update: Tue 22 Sep 2026 20:08:20 +0000 Manifest next update: Tue 29 Sep 2026 20:08:20 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: HS3Y352PWCAiOzopWYp3mLMU9jfqcoUIaiS4SxkOFVg=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: kaqTTfX4xcgq0jrDteDEHbQZsGepuw4xi4fZYEf2NxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Sep 22 20:08:20 2026 GMT Not After : Sep 29 20:08:20 2026 GMT Subject: CN=6ab2e035-d62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:72:ae:fb:c6:77:4f:90:49:61:9d:67:5e: 21:d4:d9:51:bf:64:4b:f4:99:75:ab:fc:8b:83:87: e4:f6:77:84:fd:a5:bf:a3:8a:33:cc:8c:05:d3:49: c5:bc:32:a5:b3:7f:28:26:80:74:ac:96:cb:23:6f: 23:b8:4e:fa:78:2e:77:7e:1a:77:45:61:59:9f:af: 0e:df:54:d1:d3:86:b4:9f:fd:ca:3a:d9:23:05:f6: b2:50:79:2d:6f:c6:e8:a2:37:70:3c:23:5d:42:d1: 24:bd:ef:6e:9c:bb:82:d2:30:a3:e7:7d:65:95:5d: d4:6f:50:c8:5d:0e:70:a8:62:4d:3d:98:6d:64:64: 68:a7:f8:5f:63:70:cd:57:db:5d:be:35:da:02:1f: 63:ae:e7:0b:1f:11:7b:a5:ca:04:29:f0:ce:dc:72: 88:31:e6:31:cf:52:9f:ad:7e:c6:a1:3e:73:ff:fc: 3e:b6:91:1f:e2:e8:1e:7c:d4:54:ce:01:01:12:a3: dd:d8:66:bc:4f:66:88:58:16:bd:93:d0:50:84:9f: fd:ab:88:c8:26:a4:d6:84:18:53:8c:50:d1:31:de: 07:09:c4:52:18:1a:bc:c5:e9:b1:59:f9:6d:2b:35: a7:70:c6:12:11:89:ed:1f:f9:f4:ba:14:32:c4:c1: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0A:F5:4B:19:1F:40:92:C6:F7:83:85:5A:67:F8:55:07:DA:A3:A3 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:c7:cf:29:d1:8b:77:5c:6d:d5:7e:fb:fe:4a:7e:d9:ba: a7:68:4b:f4:83:6c:63:cc:96:e4:6d:e5:0b:d9:4f:b2:1b:e6: c5:fe:42:8d:48:be:fb:df:8d:c2:2b:ec:63:ed:68:83:24:2c: fa:f7:3a:64:80:66:05:90:3c:59:92:e3:ee:91:cb:ee:9d:72: 0c:09:b4:5d:da:6c:cf:8f:81:f3:d6:8c:1e:1f:89:69:d3:1f: 82:ea:90:16:95:a1:ab:11:61:e1:9a:81:19:83:83:95:f0:48: 14:1b:df:d0:5c:99:69:f4:9c:05:e8:d8:1f:db:c6:7f:49:6b: c9:4a:c1:b9:e9:31:6c:51:a9:0d:f7:ab:bd:cf:33:a3:f4:29: f9:07:c9:5a:01:c3:55:dd:6b:de:5e:8a:e2:25:fe:ab:5f:27: 90:d4:04:ab:d7:58:53:2a:67:a1:f8:69:56:4e:bd:52:5e:93: 5f:4a:8b:f7:ac:4e:19:72:aa:1e:8e:69:6f:95:cb:c5:c4:36: 9e:5c:4d:77:cf:cc:8b:19:00:bc:87:9b:a8:22:0e:84:54:0c: 6d:84:e3:52:b0:84:c5:3c:4b:47:be:7a:c0:8c:53:b4:d3:67: bf:fd:b6:58:a4:4d:1b:8a:59:f2:f9:83:1e:f9:fe:06:f2:fc: 60:0d:1c:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjYwOTIyMjAwODIwWhcNMjYwOTI5MjAwODIwWjAYMRYwFAYD VQQDEw02YWIyZTAzNS1kNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIdyrvvGd0+QSWGdZ14h1NlRv2RL9Jl1q/yLg4fk9neE/aW/o4ozzIwF00nF vDKls38oJoB0rJbLI28juE76eC53fhp3RWFZn68O31TR04a0n/3KOtkjBfayUHkt b8boojdwPCNdQtEkve9unLuC0jCj531llV3Ub1DIXQ5wqGJNPZhtZGRop/hfY3DN V9tdvjXaAh9jrucLHxF7pcoEKfDO3HKIMeYxz1KfrX7GoT5z//w+tpEf4ugefNRU zgEBEqPd2Ga8T2aIWBa9k9BQhJ/9q4jIJqTWhBhTjFDRMd4HCcRSGBq8xemxWflt KzWncMYSEYntH/n0uhQyxMF0hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0K9UsZ H0CSxveDhVpn+FUH2qOjMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARJPHzynRi3dcbdV++/5Kftm6p2hL9INsY8yW5G3lC9lPshvmxf5CjUi++9+N wivsY+1ogyQs+vc6ZIBmBZA8WZLj7pHL7p1yDAm0Xdpsz4+B89aMHh+JadMfguqQ FpWhqxFh4ZqBGYODlfBIFBvf0FyZafScBejYH9vGf0lryUrBuekxbFGpDfervc8z o/Qp+QfJWgHDVd1r3l6K4iX+q18nkNQEq9dYUypnofhpVk69Ul6TX0qL96xOGXKq Ho5pb5XLxcQ2nlxNd8/MixkAvIebqCIOhFQMbYTjUrCExTxLR756wIxTtNNnv/22 WKRNG4pZ8vmDHvn+BvL8YA0cGQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:49:21 2026 by rpki-client