$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: C/Gv5yKz12H+3/QHRR3NyVraAsWygqwS9ZzSEvtH7bs= Subject key identifier: E5:1B:72:FD:4D:E0:9D:31:27:B7:56:18:C0:8B:2E:CF:DB:24:6F:CC Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 0286 Signing time: Sat 19 Sep 2026 02:07:54 +0000 Manifest this update: Sat 19 Sep 2026 02:07:54 +0000 Manifest next update: Sat 26 Sep 2026 02:07:54 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: Zey83e7libMO2toCf4TJajE31oR0hxup240dmIp07ps=) 2: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: 0NWy9uzlmlVP6XgEKzHCIkE1793aYzIulkG89nveM1w=) 3: 00FB58CE5D4611F186A46996B2833773.roa (hash: NVOHwEnXASVBqmCqfxY3gSyyM9N1jznjqr0Pc3+NqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Sep 19 02:07:54 2026 GMT Not After : Sep 26 02:07:54 2026 GMT Subject: CN=6aadee7a-3688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:92:83:cc:d8:95:6e:e6:60:76:78:5c:20: 61:56:7a:c5:d8:48:b4:75:17:74:f6:a2:1c:cb:c3: 18:07:90:58:29:4a:2e:9f:ac:52:05:cd:57:ed:53: e4:26:f1:64:3e:6c:aa:a4:af:39:ec:e1:aa:a7:86: 9e:9b:4c:61:cb:16:ed:a8:53:b4:28:a0:60:7e:24: b0:2b:b9:20:dc:50:8d:e3:93:77:2d:37:7f:36:a0: f6:80:37:69:a6:df:17:73:cd:3f:0e:4f:bc:25:f7: 5b:a7:ac:bf:6d:20:88:9f:c2:e2:2f:53:c6:9a:5c: ff:e6:cf:e8:d3:c2:62:46:0e:77:15:23:7c:27:84: ab:cb:68:e0:97:fc:c1:29:a6:01:b3:88:b5:87:d0: 67:6e:57:3b:02:ad:1c:78:bf:da:ee:e9:71:ad:22: c3:d9:55:24:98:5c:0a:2a:43:c4:12:52:27:aa:ca: c6:da:60:8e:3c:05:f7:de:25:e0:d8:72:f5:e2:0a: 16:6e:0e:74:96:ad:d6:9c:ee:0a:7e:90:2c:b4:4e: 8a:d7:81:8f:a1:c3:d8:44:d1:5a:28:3b:dc:b0:3b: 3f:8b:f3:6d:46:f1:a3:99:34:da:f8:6a:e8:2d:4e: 95:b8:31:a5:07:63:cb:4b:cd:a4:d7:19:f0:60:78: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1B:72:FD:4D:E0:9D:31:27:B7:56:18:C0:8B:2E:CF:DB:24:6F:CC X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:4e:21:fd:e8:ec:f6:fb:34:39:7c:ec:c2:71:c7:e2:ec:cf: 9c:3e:55:86:93:fc:25:1d:5f:04:8e:ac:7f:8c:cb:a8:d9:e4: b3:cc:46:75:43:7d:21:0d:c0:51:19:1a:b4:32:65:6f:fc:dc: c9:21:dc:3b:f0:a0:92:07:6f:38:1f:eb:83:88:eb:77:7f:76: 6c:da:65:f1:ed:9d:98:b9:7e:92:0b:1c:ec:a0:8b:9f:18:ff: 13:1e:74:29:0f:9a:8b:7c:50:42:5c:19:14:44:0e:2b:93:60: b2:6b:db:80:b7:b5:69:44:bd:b7:50:06:8d:92:22:f4:66:01: 3d:ac:31:15:5f:36:1d:62:42:07:dc:2c:68:ea:b7:24:9b:15: 65:98:b0:5b:6a:b3:c4:19:d8:2f:9a:07:b8:ff:37:ae:16:f6: 4c:48:cb:99:13:f8:c6:b7:b9:b6:f4:79:6a:64:1e:8c:12:35: 27:c7:2d:40:8b:cb:ca:68:64:20:4c:7c:d1:28:10:4b:86:8f: 39:f3:c7:e1:31:94:59:9f:30:6d:1d:14:83:47:cc:c4:8f:39: 0e:05:1d:e1:09:8c:7a:b8:30:03:79:d7:d8:2c:84:13:2a:01: 3a:84:eb:0c:65:56:d4:de:ee:d1:55:ec:48:1f:1a:61:d3:4c: 89:38:bb:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjYwOTE5MDIwNzU0WhcNMjYwOTI2MDIwNzU0WjAYMRYwFAYD VQQDEw02YWFkZWU3YS0zNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQSSg8zYlW7mYHZ4XCBhVnrF2Ei0dRd09qIcy8MYB5BYKUoun6xSBc1X7VPk JvFkPmyqpK857OGqp4aem0xhyxbtqFO0KKBgfiSwK7kg3FCN45N3LTd/NqD2gDdp pt8Xc80/Dk+8Jfdbp6y/bSCIn8LiL1PGmlz/5s/o08JiRg53FSN8J4Sry2jgl/zB KaYBs4i1h9Bnblc7Aq0ceL/a7ulxrSLD2VUkmFwKKkPEElInqsrG2mCOPAX33iXg 2HL14goWbg50lq3WnO4KfpAstE6K14GPocPYRNFaKDvcsDs/i/NtRvGjmTTa+Gro LU6VuDGlB2PLS82k1xnwYHh5dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUbcv1N 4J0xJ7dWGMCLLs/bJG/MMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuU4h/ejs9vs0OXzswnHH4uzPnD5VhpP8JR1fBI6sf4zLqNnks8xGdUN9IQ3A URkatDJlb/zcySHcO/CgkgdvOB/rg4jrd392bNpl8e2dmLl+kgsc7KCLnxj/Ex50 KQ+ai3xQQlwZFEQOK5NgsmvbgLe1aUS9t1AGjZIi9GYBPawxFV82HWJCB9wsaOq3 JJsVZZiwW2qzxBnYL5oHuP83rhb2TEjLmRP4xre5tvR5amQejBI1J8ctQIvLymhk IEx80SgQS4aPOfPH4TGUWZ8wbR0Ug0fMxI85DgUd4QmMergwA3nX2CyEEyoBOoTr DGVW1N7u0VXsSB8aYdNMiTi7Ag== -----END CERTIFICATE-----Generated at Mon Sep 21 01:59:42 2026 by rpki-client