$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json) Hash identifier: BJ7gvStY0OUhrcGwY3UR8LaEe2sHCcLKqBh6yaqGyOQ= Subject key identifier: 48:E4:31:53:03:F0:FD:C6:9D:6F:A8:5D:19:2A:8D:3C:8B:3B:F7:4E Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft Manifest number: 016F Signing time: Wed 23 Sep 2026 04:41:06 +0000 Manifest this update: Wed 23 Sep 2026 04:41:05 +0000 Manifest next update: Wed 30 Sep 2026 04:41:05 +0000 Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: 8bEVkxVSjSVzBMAIh9y1cHp0tDj8r7SF8cDDRBGnyNQ=) 2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Validity Not Before: Sep 23 04:41:05 2026 GMT Not After : Sep 30 04:41:05 2026 GMT Subject: CN=6ab35861-4402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:53:35:a0:74:7d:96:3d:fc:b5:20:a9:0b: d6:e1:ba:83:b7:7c:28:99:b7:ed:ce:c8:50:fc:c7: 51:8a:2b:6f:bf:bd:58:8c:9e:15:2a:e7:01:25:54: 5c:65:b5:01:95:9c:bd:9a:0e:54:16:f8:21:7e:69: 31:93:58:eb:ff:ee:65:5c:64:13:db:c6:8f:b6:7e: eb:1b:66:9a:d6:96:36:66:90:3c:6a:ea:2a:b4:06: 45:ea:93:d9:06:cb:f7:a1:af:ed:77:29:be:b8:71: 45:1f:69:9d:75:82:7a:0f:89:a0:85:2c:1f:9a:3b: 68:dd:26:b3:f3:e5:7e:70:38:27:6d:ba:e4:d2:04: 00:0a:1f:ed:1a:d3:74:ef:bf:fe:7c:21:6e:5c:0b: b4:68:00:f1:30:4e:67:a7:13:7c:e0:42:6d:70:fb: 76:73:ed:a4:08:4a:95:81:7a:a5:4d:18:b3:98:c4: 75:19:4f:d0:b3:c6:15:55:f8:cb:dd:a1:91:95:c9: df:1c:68:79:36:ee:72:9c:f2:de:1b:2a:7b:02:6e: e9:40:a8:09:2c:03:f9:f5:61:49:3b:47:6e:88:94: 23:5a:1c:37:df:b1:b2:09:db:90:72:46:3d:2d:84: b0:e3:f3:fd:0a:99:e4:f3:2f:d1:c7:90:72:11:b2: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E4:31:53:03:F0:FD:C6:9D:6F:A8:5D:19:2A:8D:3C:8B:3B:F7:4E X509v3 Authority Key Identifier: keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:16:03:37:93:74:85:74:08:8f:93:b5:c6:aa:90:64:68: 79:c9:81:12:b8:f4:ba:1f:9d:14:c7:83:a8:a9:64:41:09:4b: a2:01:c4:b1:7d:7b:57:53:20:77:58:2a:fd:4a:93:c5:49:d6: 13:03:73:70:03:56:b3:b2:be:3f:80:93:a6:7d:1f:60:ec:4b: c4:59:44:42:e0:ad:bc:e8:d4:0f:92:92:de:58:1c:74:ad:14: 9d:2a:f9:f4:88:3d:cf:8c:4a:3a:6c:4f:46:2d:5e:54:da:90: a8:58:9d:d1:59:5e:2f:bc:06:5d:ae:03:98:a3:52:a7:6d:6d: 4c:6f:aa:a9:41:de:98:08:15:9b:1e:3e:fb:39:20:d1:1e:e0: 50:6f:e2:2b:0c:12:1c:5e:63:f4:9c:97:11:f0:fa:0a:9b:d2: b8:ca:5a:87:08:ea:91:5c:a0:02:63:18:41:34:12:b1:5c:5c: d5:91:20:be:5e:b6:8a:f4:62:bd:bb:de:4f:ed:74:7a:46:2e: bd:7c:1e:5c:70:ce:47:9f:2b:8a:2b:99:e4:9d:50:1d:9b:16: a3:77:00:64:4f:77:83:20:f3:9d:82:db:ca:c0:00:44:90:b1: 0c:87:68:4c:1e:9e:d7:3b:57:13:47:54:47:6f:7a:52:50:b0: e1:ae:fc:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDZDMTk0Njk3ODE2RjlCMTMwQkE1M0NGNEJFRTY3NjAx NTk0RThDQjEwHhcNMjYwOTIzMDQ0MTA1WhcNMjYwOTMwMDQ0MTA1WjAYMRYwFAYD VQQDEw02YWIzNTg2MS00NDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAottTNaB0fZY9/LUgqQvW4bqDt3wombftzshQ/MdRiitvv71YjJ4VKucBJVRc ZbUBlZy9mg5UFvghfmkxk1jr/+5lXGQT28aPtn7rG2aa1pY2ZpA8auoqtAZF6pPZ Bsv3oa/tdym+uHFFH2mddYJ6D4mghSwfmjto3Saz8+V+cDgnbbrk0gQACh/tGtN0 77/+fCFuXAu0aADxME5npxN84EJtcPt2c+2kCEqVgXqlTRizmMR1GU/Qs8YVVfjL 3aGRlcnfHGh5Nu5ynPLeGyp7Am7pQKgJLAP59WFJO0duiJQjWhw337GyCduQckY9 LYSw4/P9Cpnk8y/Rx5ByEbIQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjkMVMD 8P3GnW+oXRkqjTyLO/dOMB8GA1UdIwQYMBaAFGwZRpeBb5sTC6U89L7mdgFZToyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wOUMwRDM2NjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14TUxwVHowdnVaMkFWbE9q TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wOUMwRDM2NjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14 TUxwVHowdnVaMkFWbE9qTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtcWAzeTdIV0CI+TtcaqkGRoecmBErj0uh+dFMeDqKlkQQlLogHEsX17V1Mg d1gq/UqTxUnWEwNzcANWs7K+P4CTpn0fYOxLxFlEQuCtvOjUD5KS3lgcdK0UnSr5 9Ig9z4xKOmxPRi1eVNqQqFid0VleL7wGXa4DmKNSp21tTG+qqUHemAgVmx4++zkg 0R7gUG/iKwwSHF5j9JyXEfD6CpvSuMpahwjqkVygAmMYQTQSsVxc1ZEgvl62ivRi vbveT+10ekYuvXweXHDOR58riiuZ5J1QHZsWo3cAZE93gyDznYLbysAARJCxDIdo TB6e1ztXE0dUR296UlCw4a78mA== -----END CERTIFICATE-----Generated at Wed Sep 23 23:47:36 2026 by rpki-client