$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft File: bxP1UQCfJIptmHQ2AE6FeVFWkns.mft (raw, json) Hash identifier: Fpm2nVFW5b8gG5poVWofq1K993YxngJdxeBqFGcmtKs= Subject key identifier: 3F:73:55:13:FA:EF:85:76:4A:45:6C:66:43:69:5E:7E:B6:DD:AB:BA Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B Certificate issuer: /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft Manifest number: 09E8 Signing time: Thu 24 Sep 2026 19:49:03 +0000 Manifest this update: Thu 24 Sep 2026 19:49:02 +0000 Manifest next update: Thu 01 Oct 2026 19:49:02 +0000 Files and hashes: 1: bxP1UQCfJIptmHQ2AE6FeVFWkns.crl (hash: 0uYH11AJa0cPkF7mbPffXngBpXOdVXTA/Av8otHWAEQ=) 2: D2039A56AABC11EEA0370F2CC4F9AE02.roa (hash: ynhPE5wAgaVqH7nCW5tR8ne/clm5wNEfqCy2a6X1yEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAFC4, serialNumber=6F13F551009F248A6D987436004E85795156927B Validity Not Before: Sep 24 19:49:02 2026 GMT Not After : Oct 1 19:49:02 2026 GMT Subject: CN=6ab57eaf-f782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:36:b5:c3:60:60:aa:c2:74:88:3c:59:ec: 0c:57:2c:43:eb:88:12:41:54:2b:bb:f3:8d:36:ff: f7:a9:2e:d9:28:fb:ef:f3:6a:55:bc:60:58:0d:ee: 6c:6a:54:18:e6:e3:d5:a8:66:6d:d5:92:9f:39:9c: 64:d3:7c:74:5a:38:1f:c6:51:df:26:5d:79:c6:af: 67:a4:b4:85:5e:29:f4:f1:a3:b4:03:a8:c3:65:88: 4d:0f:e8:fd:76:3a:73:93:ff:9d:a7:af:13:a1:75: 90:d3:08:ca:8d:b7:3c:e0:f1:f6:04:aa:40:3c:03: 43:57:06:d4:23:6c:6c:d7:c3:52:e5:f8:34:59:64: 68:65:eb:20:c4:07:d9:27:16:06:92:91:3f:b3:9f: d7:97:d9:a8:24:41:6a:bd:07:b8:f9:f6:e1:88:50: 77:31:16:48:c8:a7:22:fb:3d:8b:63:3f:a7:f2:14: 55:9e:82:44:03:76:f1:df:5f:06:d3:67:63:c7:5d: c2:9f:db:1f:32:ad:af:3e:14:cc:92:80:12:06:4a: 38:b6:8e:29:f2:9e:13:04:5a:e4:49:c0:d0:c1:c0: 00:8f:0b:77:a0:b0:0f:8b:e1:a9:24:14:58:42:3b: 8f:80:ce:58:e1:19:69:16:65:52:ee:33:cc:46:65: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:55:13:FA:EF:85:76:4A:45:6C:66:43:69:5E:7E:B6:DD:AB:BA X509v3 Authority Key Identifier: keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:95:30:70:45:e0:bf:a2:a0:f3:cf:f1:b6:1e:57:9a:3e:38: 15:af:72:91:f0:c8:c3:d1:3d:fd:d2:38:ae:c6:43:6c:97:e2: 14:1b:1c:e6:20:5d:a1:96:65:af:f1:7f:21:5a:09:2d:d7:c6: c2:8c:9a:d2:a1:d5:b6:6d:56:7c:8c:dc:ee:8b:4d:c3:9c:53: 5c:54:77:fe:a4:61:8b:79:7a:b7:fa:5d:01:c9:b6:70:3c:39: fb:c2:47:f1:33:9e:dd:9e:51:4e:ab:7e:41:a5:58:ed:e2:bb: 22:b5:b6:12:17:1c:d5:bc:0c:df:98:b4:6e:51:83:0c:9a:ce: ed:b2:d7:21:0e:37:37:49:49:d6:43:a6:d0:71:6b:4c:f5:b3: ef:89:a5:0b:4d:57:c3:55:2f:7b:82:56:5d:8b:09:98:89:1d: 26:03:86:f8:fd:e6:e3:f5:b7:b6:e7:ed:0e:86:a4:bc:a0:e2: b1:65:35:bb:76:b8:bc:59:93:30:95:b9:eb:42:f6:40:1d:df: ab:a8:87:3a:3c:25:72:51:b7:5a:ec:db:2b:14:4b:ec:4d:db: 8c:ec:57:8c:5c:1f:88:93:28:37:32:9d:12:18:93:41:8d:c3: 48:be:6f:9f:a8:23:43:c8:18:ca:8f:d5:09:02:31:13:0a:7a: 54:ec:b0:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FGQzQxMTAvBgNVBAUTKDZGMTNGNTUxMDA5RjI0OEE2RDk4NzQzNjAwNEU4NTc5 NTE1NjkyN0IwHhcNMjYwOTI0MTk0OTAyWhcNMjYxMDAxMTk0OTAyWjAYMRYwFAYD VQQDEw02YWI1N2VhZi1mNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw02tcNgYKrCdIg8WewMVyxD64gSQVQru/ONNv/3qS7ZKPvv82pVvGBYDe5s alQY5uPVqGZt1ZKfOZxk03x0WjgfxlHfJl15xq9npLSFXin08aO0A6jDZYhND+j9 djpzk/+dp68ToXWQ0wjKjbc84PH2BKpAPANDVwbUI2xs18NS5fg0WWRoZesgxAfZ JxYGkpE/s5/Xl9moJEFqvQe4+fbhiFB3MRZIyKci+z2LYz+n8hRVnoJEA3bx318G 02djx13Cn9sfMq2vPhTMkoASBko4to4p8p4TBFrkScDQwcAAjwt3oLAPi+GpJBRY QjuPgM5Y4RlpFmVS7jPMRmVntwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9zVRP6 74V2SkVsZkNpXn623au6MB8GA1UdIwQYMBaAFG8T9VEAnySKbZh0NgBOhXlRVpJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUZDNC9CQzYwNjJEQ0FG OEExMUVBODU0MkQ4NUZDNEY5QUUwMi9ieFAxVVFDZkpJcHRtSFEyQUU2RmVWRldr bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J4UDFVUUNmSklwdG1IUTJBRTZGZVZGV2tucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUZDNC9CQzYwNjJEQ0FGOEExMUVBODU0MkQ4NUZDNEY5QUUwMi9ieFAxVVFDZkpJ cHRtSFEyQUU2RmVWRldrbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALpUwcEXgv6Kg88/xth5Xmj44Fa9ykfDIw9E9/dI4rsZDbJfiFBsc5iBdoZZl r/F/IVoJLdfGwoya0qHVtm1WfIzc7otNw5xTXFR3/qRhi3l6t/pdAcm2cDw5+8JH 8TOe3Z5RTqt+QaVY7eK7IrW2Ehcc1bwM35i0blGDDJrO7bLXIQ43N0lJ1kOm0HFr TPWz74mlC01Xw1Uve4JWXYsJmIkdJgOG+P3m4/W3tuftDoakvKDisWU1u3a4vFmT MJW560L2QB3fq6iHOjwlclG3WuzbKxRL7E3bjOxXjFwfiJMoNzKdEhiTQY3DSL5v n6gjQ8gYyo/VCQIxEwp6VOywJg== -----END CERTIFICATE-----Generated at Fri Sep 25 00:18:23 2026 by rpki-client