$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: JH8mpxAAze1sucMKbjwItZGR5e0ZfOxcIiRjPwa0ceg= Subject key identifier: 5A:9F:26:91:AD:4C:26:52:5A:FD:6B:75:4A:22:C1:BF:D1:18:64:7D Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D59 Signing time: Tue 28 Jul 2026 18:21:18 +0000 Manifest this update: Tue 28 Jul 2026 18:21:17 +0000 Manifest next update: Tue 04 Aug 2026 18:21:17 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: e+J/73kWYxyxG1NPhsrMavVPdlunQBdFTGM6/npMZxg=) 2: 1Tpg7YzcQziHe-csGNB6dRnrmak.asa (hash: sbQuTo/lyfQ4HCZCJQERF/0zsihc9Q3a5ZscI3SwxpQ=) 3: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=) 4: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=) 5: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=) 6: ZalB4shFIqzfzkOMiSb08RSiuXk.asa (hash: PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=) 7: lhlS5_TEJHo3UVrOxBep1TpMUiA.asa (hash: LeBm2quaHok7A5PLZUmdjey6RQlm/dDEh2VyeIlI3tQ=) 8: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Jul 28 18:21:17 2026 GMT Not After : Aug 4 18:21:17 2026 GMT Subject: CN=6a68f31e-a74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:2b:dd:ab:2e:bd:a2:35:4c:9f:d0:87:d3: b6:97:57:37:da:f1:8d:15:bb:c2:02:e9:6e:05:f6: 80:a3:dd:05:0a:c3:cf:08:65:ca:d1:7a:43:6b:58: 21:35:a9:00:79:b7:59:6f:f1:bb:63:ca:5f:12:59: a1:01:30:81:2c:8f:30:4d:a2:a4:41:1f:4e:c2:e1: 04:53:8b:67:16:72:ff:32:31:cf:a8:ed:2a:2d:23: d9:e1:3d:5e:aa:de:b1:91:1e:fa:c1:7c:f2:d3:2f: f2:9f:de:15:22:55:59:2e:98:09:d7:56:be:4c:d5: 0c:b5:55:03:83:c6:e8:1f:3d:e8:c8:ec:3c:84:df: c3:64:b4:45:bf:13:10:6b:d0:f2:02:82:53:e5:24: 74:0d:29:53:74:a7:aa:2a:e3:46:a8:26:3c:5f:1b: 59:20:e2:d8:4f:83:14:8a:c4:b9:6d:5b:76:3c:03: 2f:ba:1a:43:eb:81:7c:df:58:db:83:40:c4:81:86: ee:67:97:26:1e:32:1f:8b:4b:c1:63:3a:28:0d:b0: c3:a9:71:99:10:7c:73:93:c4:3b:ac:e5:50:ea:f7: 99:21:60:69:95:69:e2:66:26:a5:58:a3:e0:86:d7: e1:fe:d4:1c:20:15:c7:e2:8c:fd:be:0e:e9:86:a4: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:26:91:AD:4C:26:52:5A:FD:6B:75:4A:22:C1:BF:D1:18:64:7D X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bf:20:45:c4:a4:ae:69:a2:b7:3d:f0:af:61:13:ca:82:06: 1f:e6:13:cf:c7:08:65:8d:66:db:36:25:b7:c9:92:8b:07:09: 3b:96:c8:7a:3a:ba:5a:28:b0:6b:de:0f:02:2c:07:33:cc:82: c6:9c:da:83:32:f6:4e:af:7b:aa:82:ed:f8:56:e7:17:42:95: cb:78:78:a8:e4:94:21:ea:9b:c7:06:5a:9d:53:fe:c5:62:28: e1:0a:76:ac:19:ac:7e:87:e2:84:41:57:ec:28:bf:89:cf:3e: 7f:73:4d:c0:f7:6a:a3:f4:af:67:0f:9c:16:66:b6:dd:7b:40: 01:5e:e1:3f:58:f4:a1:c1:a4:c4:45:7f:a7:96:14:e8:35:87: 06:dd:a3:2e:67:b5:ed:41:ea:9f:27:7b:36:bd:aa:c2:44:63: 3d:69:47:75:6e:b8:2c:62:ab:b9:25:5b:c7:c2:2a:5f:d9:74: 31:15:e1:f1:58:02:36:5f:cf:2b:b2:3a:67:74:28:71:6f:77: 10:d0:20:74:46:c7:f0:b6:96:9d:26:5a:05:f4:2d:a7:32:05: 69:3a:b6:9f:6d:71:bf:cd:a7:f5:62:33:f9:26:3c:78:62:68: ca:2d:bd:f2:5e:25:f7:6b:49:04:15:e5:d1:77:15:d8:ac:d7: 6d:0a:a5:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwNzI4MTgyMTE3WhcNMjYwODA0MTgyMTE3WjAYMRYwFAYD VQQDEw02YTY4ZjMxZS1hNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL0r3asuvaI1TJ/Qh9O2l1c32vGNFbvCAuluBfaAo90FCsPPCGXK0XpDa1gh NakAebdZb/G7Y8pfElmhATCBLI8wTaKkQR9OwuEEU4tnFnL/MjHPqO0qLSPZ4T1e qt6xkR76wXzy0y/yn94VIlVZLpgJ11a+TNUMtVUDg8boHz3oyOw8hN/DZLRFvxMQ a9DyAoJT5SR0DSlTdKeqKuNGqCY8XxtZIOLYT4MUisS5bVt2PAMvuhpD64F831jb g0DEgYbuZ5cmHjIfi0vBYzooDbDDqXGZEHxzk8Q7rOVQ6veZIWBplWniZialWKPg htfh/tQcIBXH4oz9vg7phqSxTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqfJpGt TCZSWv1rdUoiwb/RGGR9MB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABb8gRcSkrmmitz3wr2ETyoIGH+YTz8cIZY1m2zYlt8mSiwcJO5bIejq6Wiiw a94PAiwHM8yCxpzagzL2Tq97qoLt+FbnF0KVy3h4qOSUIeqbxwZanVP+xWIo4Qp2 rBmsfofihEFX7Ci/ic8+f3NNwPdqo/SvZw+cFma23XtAAV7hP1j0ocGkxEV/p5YU 6DWHBt2jLme17UHqnyd7Nr2qwkRjPWlHdW64LGKruSVbx8IqX9l0MRXh8VgCNl/P K7I6Z3QocW93ENAgdEbH8LaWnSZaBfQtpzIFaTq2n21xv82n9WIz+SY8eGJoyi29 8l4l92tJBBXl0XcV2KzXbQql8w== -----END CERTIFICATE-----Generated at Wed Jul 29 13:33:56 2026 by rpki-client