$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: 7YOxDYrvH/Se8+3OKcu/AjBK8j1hyANT4XPLlVe/N5U= Subject key identifier: 4C:DC:9E:13:2E:38:E5:81:19:75:4C:96:5A:35:E8:C7:56:3C:DE:E8 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 058E Signing time: Sun 20 Sep 2026 23:09:53 +0000 Manifest this update: Sun 20 Sep 2026 23:09:53 +0000 Manifest next update: Sun 27 Sep 2026 23:09:53 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: rdR0uwl1ZvvY6A5G44t4MJNXevQ3YefyYULB+Q3nC+0=) 2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=) 4: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Sep 20 23:09:53 2026 GMT Not After : Sep 27 23:09:53 2026 GMT Subject: CN=6ab067c1-d7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:df:74:36:97:78:4e:e0:0a:9f:c6:ff:cc: b6:f8:96:60:06:fa:99:da:8e:fc:0f:83:01:95:df: 69:1c:45:0d:9d:51:c4:28:68:40:59:76:f9:db:88: c5:01:fa:53:3e:ec:1f:0e:1d:1c:84:18:e9:ed:a6: 2b:a3:99:ee:f6:86:ac:95:25:95:88:c5:ab:07:be: 23:d6:ab:c6:0a:fe:f0:3f:f5:0b:fb:9d:b4:39:cb: ab:6a:d8:ed:dc:68:ca:88:f4:4e:d0:24:48:9e:bf: 16:64:d5:b8:49:3f:a3:2f:d7:d4:78:c1:02:6d:c1: 99:ed:f5:c5:63:23:70:13:1d:12:38:66:85:40:fe: cd:f7:90:ba:52:d2:1b:42:a2:16:3e:8a:1e:35:6b: aa:4a:65:11:8f:b5:a0:4a:3b:e2:af:49:d9:93:47: 26:fd:b5:12:c5:15:b0:a9:bd:9e:69:06:a9:5d:49: 2b:d6:1c:82:96:44:9c:4e:dc:00:7e:c9:25:d6:24: 6c:80:61:b1:69:c2:47:b8:40:75:01:ff:0d:6a:62: d7:21:c9:f4:27:e0:76:e5:0c:fc:ce:3e:f3:61:a7: 63:23:25:ee:d5:26:b7:11:55:31:38:30:18:c4:7c: 8b:f4:e3:02:06:ee:8e:01:6b:fb:9d:ce:d6:15:98: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:9E:13:2E:38:E5:81:19:75:4C:96:5A:35:E8:C7:56:3C:DE:E8 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1d:d5:b7:ef:90:f7:28:83:12:74:ee:a3:2e:40:06:df:98: 8a:26:10:af:bd:7c:38:28:7e:18:65:07:b4:9c:23:cd:06:75: 30:bd:93:83:32:17:83:cd:a0:2b:7e:dd:59:c9:79:4a:be:e7: 4f:ce:e2:d1:bb:82:d2:fd:2d:11:e6:a7:06:84:11:2b:3a:c7: 39:7b:1a:43:fd:d8:ee:dc:e2:16:81:01:9d:6d:43:97:e9:4c: 47:0b:2e:7f:d1:62:e0:ba:07:cb:42:3c:5d:6a:d2:67:cd:33: 33:37:73:d9:a5:9e:fa:1a:0a:d6:a0:19:60:b9:9a:62:8e:e7: e2:68:81:96:e5:1e:fa:c3:37:0e:ed:1e:c3:eb:7d:7a:ff:ca: 65:55:aa:21:ae:1c:7a:ed:e6:38:e5:e3:47:bd:2d:63:99:f0: 7e:f7:84:5c:5a:95:36:9b:0c:f4:ce:36:06:22:ff:ec:f5:89: c8:1b:a7:09:75:60:83:1f:fe:61:c0:15:95:23:2f:37:4f:f8: c4:20:5e:ed:2a:a9:02:e9:04:15:4a:91:76:f9:c2:4b:7e:95: 23:9a:8f:04:46:f4:84:47:ea:b0:d7:d5:96:7f:b3:11:00:7b: a2:d0:c8:00:0a:10:74:45:25:f2:26:7d:cf:c7:a3:aa:ab:cb: e2:97:5d:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjYwOTIwMjMwOTUzWhcNMjYwOTI3MjMwOTUzWjAYMRYwFAYD VQQDEw02YWIwNjdjMS1kN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5DfdDaXeE7gCp/G/8y2+JZgBvqZ2o78D4MBld9pHEUNnVHEKGhAWXb524jF AfpTPuwfDh0chBjp7aYro5nu9oaslSWViMWrB74j1qvGCv7wP/UL+520Ocuratjt 3GjKiPRO0CRInr8WZNW4ST+jL9fUeMECbcGZ7fXFYyNwEx0SOGaFQP7N95C6UtIb QqIWPooeNWuqSmURj7WgSjvir0nZk0cm/bUSxRWwqb2eaQapXUkr1hyClkScTtwA fskl1iRsgGGxacJHuEB1Af8NamLXIcn0J+B25Qz8zj7zYadjIyXu1Sa3EVUxODAY xHyL9OMCBu6OAWv7nc7WFZjUsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzcnhMu OOWBGXVMllo16MdWPN7oMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjR3Vt++Q9yiDEnTuoy5ABt+YiiYQr718OCh+GGUHtJwjzQZ1ML2TgzIXg82g K37dWcl5Sr7nT87i0buC0v0tEeanBoQRKzrHOXsaQ/3Y7tziFoEBnW1Dl+lMRwsu f9Fi4LoHy0I8XWrSZ80zMzdz2aWe+hoK1qAZYLmaYo7n4miBluUe+sM3Du0ew+t9 ev/KZVWqIa4ceu3mOOXjR70tY5nwfveEXFqVNpsM9M42BiL/7PWJyBunCXVggx/+ YcAVlSMvN0/4xCBe7SqpAukEFUqRdvnCS36VI5qPBEb0hEfqsNfVln+zEQB7otDI AAoQdEUl8iZ9z8ejqqvL4pdd+Q== -----END CERTIFICATE-----Generated at Tue Sep 22 17:36:11 2026 by rpki-client