$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: VkUohankF812U6HjJTqYGomUCZCoMyyDYG2puaZWDB4= Subject key identifier: BF:78:C6:3C:F2:13:2E:58:1E:81:73:FF:CB:A2:45:41:2D:C9:08:F6 Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 02A0 Signing time: Thu 05 Nov 2026 02:32:06 +0000 Manifest this update: Thu 05 Nov 2026 02:32:06 +0000 Manifest next update: Thu 12 Nov 2026 02:32:06 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: pf9TOjumOmydcvZT0GZHaCJoON1K6SMIjyt4PEOnT5I=) 2: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: nn3BG1+0AMLZ+WtxZmbDcIERFfevGh3kSq7PDXT0/WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 02:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Nov 5 02:32:06 2026 GMT Not After : Nov 12 02:32:06 2026 GMT Subject: CN=6aebeaa6-152f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:32:15:c2:53:47:7e:7c:48:28:0d:00:b7: 44:27:70:99:28:35:1e:8c:83:e0:78:5a:e4:6d:78: 77:d9:2f:04:9a:3a:ab:92:03:44:be:68:e0:2e:b0: 6f:81:a2:5c:51:81:a2:2a:7b:88:9b:fa:54:ec:e2: 66:cb:88:5c:af:a3:33:b5:58:f3:02:a3:24:85:ce: d8:cc:81:30:1b:89:15:8b:51:3e:2e:b9:40:2b:90: 79:15:e9:42:eb:a9:ad:9f:8c:e0:15:d9:d6:8f:15: 93:e6:61:fa:38:f0:09:22:49:96:31:4c:74:31:f4: ca:f5:81:0e:32:93:c6:0b:31:6e:24:be:de:11:20: 13:dd:e8:c0:30:19:38:4a:8a:c5:29:79:c0:60:92: 39:d4:2c:25:70:ba:b4:60:68:cb:00:a3:3c:1f:27: f1:04:6e:ab:30:23:4c:c2:b8:68:25:b4:0e:34:65: 7a:97:1b:96:44:7d:a1:9a:f4:3b:6e:72:b7:bb:65: d1:46:90:68:88:34:99:ea:2b:64:e4:75:21:16:ac: db:9c:65:49:b9:0d:50:9e:38:cc:95:cc:36:20:a6: 87:40:e8:10:2d:31:bc:e2:e0:f1:4b:1f:55:36:a9: 48:06:a7:54:9e:86:4b:7c:85:43:44:ac:01:d5:06: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:C6:3C:F2:13:2E:58:1E:81:73:FF:CB:A2:45:41:2D:C9:08:F6 X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:93:03:0a:ee:5a:e9:e8:8e:be:bf:7f:20:9e:b0:0e:27:b0: 08:da:90:c4:38:f7:b2:5a:70:7e:a8:f9:7a:8a:ab:94:1d:2c: 8e:f3:d6:ca:76:fb:10:5e:d0:0a:c3:ad:36:fc:6b:8c:4c:20: bc:55:7f:e6:0b:67:25:f4:9a:69:7f:b2:b1:40:ee:ab:51:8c: 99:e5:3d:1f:f3:68:40:3f:2e:b9:c2:05:2d:7c:68:67:06:e4: 83:17:e8:5e:97:ac:d0:41:91:a5:84:49:14:7b:a7:b6:b6:a4: a0:c7:62:56:1f:e6:eb:23:aa:49:86:be:db:f1:86:35:58:6d: 6a:1b:01:b8:24:10:f8:10:30:41:e1:c3:95:fe:6c:cd:05:29: bf:a3:8a:a1:1e:4e:7e:f1:d6:77:69:e9:f0:ef:70:5e:07:59: ab:4c:88:56:93:b4:7d:38:8f:34:79:a2:81:05:ae:aa:d1:c8: ae:14:52:92:36:c6:14:55:15:ed:a9:d0:7a:72:28:b5:2f:4e: e2:30:f0:73:26:ed:da:da:93:86:71:a0:01:b6:4f:28:1c:76: 5e:60:04:e9:0b:9d:b1:a9:fc:72:ec:c3:2e:40:59:14:78:00: 4e:5b:4a:90:85:88:88:d7:a1:a2:33:bb:14:3e:d7:43:17:8e: ec:a8:07:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjYxMTA1MDIzMjA2WhcNMjYxMTEyMDIzMjA2WjAYMRYwFAYD VQQDEw02YWViZWFhNi0xNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKcyFcJTR358SCgNALdEJ3CZKDUejIPgeFrkbXh32S8EmjqrkgNEvmjgLrBv gaJcUYGiKnuIm/pU7OJmy4hcr6MztVjzAqMkhc7YzIEwG4kVi1E+LrlAK5B5FelC 66mtn4zgFdnWjxWT5mH6OPAJIkmWMUx0MfTK9YEOMpPGCzFuJL7eESAT3ejAMBk4 SorFKXnAYJI51CwlcLq0YGjLAKM8HyfxBG6rMCNMwrhoJbQONGV6lxuWRH2hmvQ7 bnK3u2XRRpBoiDSZ6itk5HUhFqzbnGVJuQ1QnjjMlcw2IKaHQOgQLTG84uDxSx9V NqlIBqdUnoZLfIVDRKwB1Qa30QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL94xjzy Ey5YHoFz/8uiRUEtyQj2MB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZMDCu5a6eiOvr9/IJ6wDiewCNqQxDj3slpwfqj5eoqrlB0sjvPWynb7EF7Q CsOtNvxrjEwgvFV/5gtnJfSaaX+ysUDuq1GMmeU9H/NoQD8uucIFLXxoZwbkgxfo Xpes0EGRpYRJFHuntrakoMdiVh/m6yOqSYa+2/GGNVhtahsBuCQQ+BAwQeHDlf5s zQUpv6OKoR5OfvHWd2np8O9wXgdZq0yIVpO0fTiPNHmigQWuqtHIrhRSkjbGFFUV 7anQenIotS9O4jDwcybt2tqThnGgAbZPKBx2XmAE6Qudsan8cuzDLkBZFHgATltK kIWIiNehojO7FD7XQxeO7KgHRw== -----END CERTIFICATE-----Generated at Thu Nov 5 08:32:01 2026 by rpki-client