$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: JTe2BPZz2GxSsV8LuQ0s82J3SGzUB/ds9dOmcH98AKg= Subject key identifier: 64:EC:E4:39:13:D8:C2:09:38:D9:12:C0:EB:02:1B:D6:35:AF:46:9E Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 0483 Signing time: Mon 21 Sep 2026 00:00:46 +0000 Manifest this update: Mon 21 Sep 2026 00:00:46 +0000 Manifest next update: Mon 28 Sep 2026 00:00:46 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: ibOJY3vAemmQhXObJvXQfx3kbJL4/IgKn16vMtoQrDM=) 2: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=) 3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=) 4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=) 5: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: DqvdHy0dVK5CWNPfPNrFUaz/YCxyxg+f1hCph6DAQYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Sep 21 00:00:46 2026 GMT Not After : Sep 28 00:00:46 2026 GMT Subject: CN=6ab073ae-8dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:50:3d:7a:9f:ce:5c:05:3a:55:e2:8d:8e: c8:33:cb:ce:0f:4e:01:ce:35:e1:69:7c:8f:94:68: 7c:b2:06:4e:61:00:a2:01:53:32:cd:17:44:10:bc: 5c:b6:76:52:4d:b8:c1:8a:19:05:b5:59:42:4f:c4: 63:81:88:cc:4a:cb:0b:57:e0:be:8d:e2:38:37:ba: 23:66:42:e5:66:1e:17:38:2c:8b:cd:93:f8:8a:05: f7:d5:c3:23:ba:43:97:d4:cb:8d:d4:2e:58:16:78: 3d:0a:3c:97:07:ac:68:46:a0:5e:3a:42:c1:87:7b: cc:d7:7c:c5:91:e2:53:bb:cc:49:8e:a3:4d:7b:a0: ad:6f:9f:ec:87:c2:c2:7a:ec:7d:eb:28:4c:6a:80: fd:54:0c:0c:58:73:58:6c:e1:d0:0c:08:5c:ec:4a: 1d:e4:60:0b:a1:dd:c0:1e:b7:c4:88:ff:db:ff:3f: d1:71:13:21:b3:2f:84:cc:47:3f:06:7d:0a:f5:f4: 06:5d:2e:58:24:97:06:8e:99:96:7f:cb:1d:16:e7: 82:a6:d5:9b:05:f5:cd:68:e5:65:a2:9f:7a:cd:5b: 64:d6:47:88:8f:4d:e8:3f:75:d6:c3:bf:6d:78:0f: 8b:df:1a:1a:cc:82:10:d5:bb:c8:f6:3e:6e:0f:31: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:E4:39:13:D8:C2:09:38:D9:12:C0:EB:02:1B:D6:35:AF:46:9E X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9d:e9:8d:f2:cd:f0:c5:c1:85:0d:2f:07:c3:5f:4c:ef:40: 6f:62:87:be:8f:d9:93:3f:84:d9:43:e9:ee:bf:bc:58:d7:2b: d7:69:3d:0d:a1:e3:fa:40:67:dd:44:8d:c6:b5:4e:7f:97:d6: cf:ee:a7:ae:58:37:46:f7:0d:67:94:cf:eb:a2:34:7e:48:b7: d5:52:55:76:fe:40:a8:f4:d8:2b:3b:e0:3b:74:0c:a8:36:c0: 93:d4:81:7d:0e:1a:e4:0f:f7:2e:de:e0:ee:fc:d4:64:66:92: 74:c5:99:6e:73:52:85:a2:61:4e:40:00:a3:fb:5e:6a:3d:9b: 88:39:2e:ff:cc:7a:22:4f:6d:46:ac:af:d9:eb:ee:68:05:a5: f7:4e:86:7f:be:85:75:44:37:aa:54:13:98:95:46:b0:7f:88: 88:5e:27:b8:99:da:8b:e2:d7:67:cd:4d:7c:fa:0b:44:20:28: 8d:94:5b:18:82:22:78:95:a5:c0:de:d0:fc:89:42:e4:dd:3a: 63:40:f2:bb:cd:37:42:a5:f8:bf:9a:43:d5:3f:c9:ec:42:a4: 49:df:72:f1:43:c3:17:a5:d6:ad:0c:b8:46:9c:f6:26:6a:79: e5:83:f1:89:3e:a2:ff:ea:cd:e0:ce:1d:54:a2:62:4d:c1:9f: 3f:4a:2d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjYwOTIxMDAwMDQ2WhcNMjYwOTI4MDAwMDQ2WjAYMRYwFAYD VQQDEw02YWIwNzNhZS04ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDVQPXqfzlwFOlXijY7IM8vOD04BzjXhaXyPlGh8sgZOYQCiAVMyzRdEELxc tnZSTbjBihkFtVlCT8RjgYjMSssLV+C+jeI4N7ojZkLlZh4XOCyLzZP4igX31cMj ukOX1MuN1C5YFng9CjyXB6xoRqBeOkLBh3vM13zFkeJTu8xJjqNNe6Ctb5/sh8LC eux96yhMaoD9VAwMWHNYbOHQDAhc7Eod5GALod3AHrfEiP/b/z/RcRMhsy+EzEc/ Bn0K9fQGXS5YJJcGjpmWf8sdFueCptWbBfXNaOVlop96zVtk1keIj03oP3XWw79t eA+L3xoazIIQ1bvI9j5uDzFdvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTs5DkT 2MIJONkSwOsCG9Y1r0aeMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB53pjfLN8MXBhQ0vB8NfTO9Ab2KHvo/Zkz+E2UPp7r+8WNcr12k9DaHj+kBn 3USNxrVOf5fWz+6nrlg3RvcNZ5TP66I0fki31VJVdv5AqPTYKzvgO3QMqDbAk9SB fQ4a5A/3Lt7g7vzUZGaSdMWZbnNShaJhTkAAo/teaj2biDku/8x6Ik9tRqyv2evu aAWl906Gf76FdUQ3qlQTmJVGsH+IiF4nuJnai+LXZ81NfPoLRCAojZRbGIIieJWl wN7Q/IlC5N06Y0Dyu803QqX4v5pD1T/J7EKkSd9y8UPDF6XWrQy4Rpz2Jmp55YPx iT6i/+rN4M4dVKJiTcGfP0otjg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:30:31 2026 by rpki-client