$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: NQ1CdT9iJJTK+HAfxvwoNZ1fhmWnnsrq2I8sIgoCdeo= Subject key identifier: 6B:5B:B9:B0:11:76:84:22:FA:B2:99:58:6D:0A:A6:C1:9A:4E:60:1B Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: 0139 Signing time: Mon 21 Sep 2026 05:32:09 +0000 Manifest this update: Mon 21 Sep 2026 05:32:08 +0000 Manifest next update: Mon 28 Sep 2026 05:32:08 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: kDg20tmTqSOUPIJCIchvJKnqIrkW+ztUXAQFeJ/yadc=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Sep 21 05:32:08 2026 GMT Not After : Sep 28 05:32:08 2026 GMT Subject: CN=6ab0c159-d28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:11:ac:5c:ed:72:91:5d:67:55:99:5e:f7: 34:2b:9e:a8:a5:ab:ea:f2:bd:03:f4:c5:5b:54:41: c6:df:7e:b7:e9:3c:04:4d:d6:5f:02:6d:31:33:65: 41:10:ce:b0:be:83:4c:8c:19:d1:d0:dd:5a:b4:af: f5:e1:1f:ac:59:59:22:d7:6f:16:1f:b2:4a:b3:fe: d5:09:d1:8f:cf:96:35:fb:87:6e:57:67:ab:2b:5b: f1:34:30:0a:d4:31:67:82:92:84:74:65:c9:73:a2: d9:dd:1c:f1:e6:b8:90:f6:21:35:7f:80:0a:31:b8: 3c:ca:86:26:4d:23:ac:de:4e:62:86:c8:87:c8:dd: 88:3c:e4:6c:3f:ff:05:62:cb:39:b6:52:f3:a3:af: 98:1b:a7:78:b4:2a:cd:38:b3:b5:40:4d:44:cf:76: f3:8f:54:58:ac:0c:30:fa:64:ad:ce:83:37:64:47: b7:5a:a8:01:6b:47:90:1a:7a:9e:6c:cc:dd:09:19: 4d:93:33:02:33:20:61:5b:cc:b6:f5:19:33:d3:f1: 68:d8:4f:e4:8f:2c:7d:2e:c9:94:77:35:c7:c5:d8: 09:af:3a:d5:80:bb:42:29:07:de:83:08:87:cf:78: cd:11:68:30:9c:fe:47:1d:fc:a5:63:d9:fb:9c:ef: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:B9:B0:11:76:84:22:FA:B2:99:58:6D:0A:A6:C1:9A:4E:60:1B X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2d:a5:99:24:55:aa:71:9c:f5:55:9c:7a:d3:72:58:e8:33: 49:21:a8:91:f2:12:8e:35:3e:78:a5:06:ea:1e:e3:5c:20:7c: 7d:5c:3e:16:cc:ce:cc:59:dd:c0:10:83:b4:8e:59:dc:fe:32: 15:9e:9c:86:a9:f4:ca:10:e6:fc:6d:7b:71:0d:3c:4b:c1:b3: 3b:5d:a4:3d:46:72:d9:3a:31:48:4f:59:24:a5:1f:9b:15:9e: ff:af:a0:16:a0:cd:9f:2a:7d:e5:da:da:bf:65:38:01:e8:dd: 39:86:93:8e:c9:ef:35:ed:20:3e:5d:af:17:a9:1f:15:14:ae: f4:9b:be:80:d7:c6:f2:c2:55:b3:1c:0a:60:39:41:5a:75:31: 6d:01:0e:49:3c:5f:09:ee:aa:fc:9e:0a:98:da:bc:91:ec:0a: 84:2d:33:87:97:fd:81:48:83:3d:79:c2:7b:33:83:e3:12:f3: 36:2e:a6:c6:5f:49:6c:17:23:9b:d1:0c:99:9e:21:ba:a9:d5: 30:78:b6:a5:ae:3c:7c:07:09:f6:35:85:01:4f:ee:54:65:06: de:cb:b8:53:92:35:62:37:0a:0e:fb:59:fe:c0:92:39:81:5a: 30:a3:58:d9:22:36:cd:f6:bd:4a:17:84:5c:53:8a:77:02:cc: f9:1b:ad:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjYwOTIxMDUzMjA4WhcNMjYwOTI4MDUzMjA4WjAYMRYwFAYD VQQDEw02YWIwYzE1OS1kMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ0RrFztcpFdZ1WZXvc0K56opavq8r0D9MVbVEHG33636TwETdZfAm0xM2VB EM6wvoNMjBnR0N1atK/14R+sWVki128WH7JKs/7VCdGPz5Y1+4duV2erK1vxNDAK 1DFngpKEdGXJc6LZ3Rzx5riQ9iE1f4AKMbg8yoYmTSOs3k5ihsiHyN2IPORsP/8F Yss5tlLzo6+YG6d4tCrNOLO1QE1Ez3bzj1RYrAww+mStzoM3ZEe3WqgBa0eQGnqe bMzdCRlNkzMCMyBhW8y29Rkz0/Fo2E/kjyx9LsmUdzXHxdgJrzrVgLtCKQfegwiH z3jNEWgwnP5HHfylY9n7nO8ktwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtbubAR doQi+rKZWG0KpsGaTmAbMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF c3RsQW05OEg4bFJmNXRDeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAli2lmSRVqnGc9VWcetNyWOgzSSGokfISjjU+eKUG6h7jXCB8fVw+FszOzFnd wBCDtI5Z3P4yFZ6chqn0yhDm/G17cQ08S8GzO12kPUZy2ToxSE9ZJKUfmxWe/6+g FqDNnyp95drav2U4AejdOYaTjsnvNe0gPl2vF6kfFRSu9Ju+gNfG8sJVsxwKYDlB WnUxbQEOSTxfCe6q/J4KmNq8kewKhC0zh5f9gUiDPXnCezOD4xLzNi6mxl9JbBcj m9EMmZ4huqnVMHi2pa48fAcJ9jWFAU/uVGUG3su4U5I1YjcKDvtZ/sCSOYFaMKNY 2SI2zfa9SheEXFOKdwLM+RutEg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:03:38 2026 by rpki-client