$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: MlJKwaA9KYnNl+CJJt/V+iJDfAmj2w5RWXmmgIWQV2c= Subject key identifier: 87:61:0D:B5:9D:66:84:53:70:C5:6F:B9:5A:B5:18:0C:71:2C:6C:2A Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0C0C Signing time: Sun 20 Sep 2026 18:48:56 +0000 Manifest this update: Sun 20 Sep 2026 18:48:56 +0000 Manifest next update: Sun 27 Sep 2026 18:48:56 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: LA0kaq8FfOQ1WcC/KGCEdeFM6d3QgPB/guEjMo5NDm8=) 2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Sep 20 18:48:56 2026 GMT Not After : Sep 27 18:48:56 2026 GMT Subject: CN=6ab02a98-e458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:47:0d:ac:e9:bb:76:85:d4:eb:d5:71:80: c7:de:ee:93:38:46:86:d0:26:b1:0c:04:3f:f3:ed: c4:42:d7:9a:96:55:6d:44:9d:13:73:42:22:13:c2: 25:37:f3:5d:e3:5e:ac:f6:fb:74:61:de:3b:c1:9e: 10:d3:68:21:d6:19:3d:58:89:db:b2:a5:3e:35:a6: a1:90:aa:20:6a:39:b9:af:6b:7f:3f:86:e6:ce:12: 43:9c:10:78:2c:31:c7:f2:d1:af:d8:c5:a6:89:9b: 3f:ce:51:de:00:cf:f8:0b:d6:0c:8d:6f:5f:39:ca: 64:fd:91:96:3b:ef:d3:1a:97:73:c9:c9:b8:04:33: 30:bd:31:d1:9b:ac:57:e4:c4:84:c0:c9:60:db:43: 78:ce:e2:2a:00:5a:8b:a6:0e:ec:37:d4:c5:97:ee: 6a:6e:a7:5a:21:94:1b:43:cd:64:c1:d3:e3:c8:3b: 70:d8:2e:f8:4b:3f:0d:90:f2:06:be:e7:07:2f:ba: 8e:4a:5c:e9:7e:5d:44:7e:4f:3a:73:02:a9:a8:c3: c1:8f:05:22:b1:2c:76:c3:a9:22:87:53:ff:94:40: 06:7a:f3:22:a0:10:90:9b:3c:8d:8f:cb:c2:59:6e: 3d:7f:20:dd:15:2d:4c:66:2b:65:ec:82:dd:bd:e4: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:0D:B5:9D:66:84:53:70:C5:6F:B9:5A:B5:18:0C:71:2C:6C:2A X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9b:3d:7e:07:43:1f:f2:40:4e:48:57:9d:37:32:51:2a:85: d8:a4:46:cc:c9:bd:cc:16:58:c4:de:6e:a2:2c:f6:e6:43:c1: ba:d3:00:22:2e:53:bd:ab:08:cc:42:a7:38:9c:db:8f:da:9f: 33:71:97:40:3b:a7:b7:8d:76:b6:45:ff:ed:43:54:34:e6:c4: 37:ee:fb:bc:49:fb:dd:a7:eb:0b:ca:06:5e:ea:c9:91:76:68: 0b:ab:94:c5:3d:dd:b0:70:8d:1f:f0:01:ef:a5:94:48:2f:60: 79:90:ac:0a:67:65:50:09:7c:35:52:53:18:54:f3:5b:c1:37: 74:01:2f:2d:fc:7a:7e:98:26:5e:30:cc:51:c3:12:82:26:4b: 42:4b:f3:90:1f:54:4c:5f:e0:d5:64:e3:ca:f8:06:30:58:f0: f3:51:17:b5:9a:93:96:d0:61:a7:67:56:37:24:d3:de:1f:50: 6d:64:da:2a:5a:a3:39:47:4b:84:2f:34:6d:fd:31:10:f7:4d: 26:2e:b1:47:5e:26:ec:f4:75:8e:f0:0a:d2:ef:39:f4:ef:c4: a9:35:68:79:35:49:f3:20:27:33:e6:a9:57:39:7b:cc:68:95: 52:af:96:14:32:de:ef:90:84:83:ba:33:cc:b2:ff:7f:a1:94: ec:21:e7:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjYwOTIwMTg0ODU2WhcNMjYwOTI3MTg0ODU2WjAYMRYwFAYD VQQDEw02YWIwMmE5OC1lNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApalHDazpu3aF1OvVcYDH3u6TOEaG0CaxDAQ/8+3EQteallVtRJ0Tc0IiE8Il N/Nd416s9vt0Yd47wZ4Q02gh1hk9WInbsqU+NaahkKogajm5r2t/P4bmzhJDnBB4 LDHH8tGv2MWmiZs/zlHeAM/4C9YMjW9fOcpk/ZGWO+/TGpdzycm4BDMwvTHRm6xX 5MSEwMlg20N4zuIqAFqLpg7sN9TFl+5qbqdaIZQbQ81kwdPjyDtw2C74Sz8NkPIG vucHL7qOSlzpfl1Efk86cwKpqMPBjwUisSx2w6kih1P/lEAGevMioBCQmzyNj8vC WW49fyDdFS1MZitl7ILdveTF3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdhDbWd ZoRTcMVvuVq1GAxxLGwqMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC5s9fgdDH/JATkhXnTcyUSqF2KRGzMm9zBZYxN5uoiz25kPButMAIi5TvasI zEKnOJzbj9qfM3GXQDunt412tkX/7UNUNObEN+77vEn73afrC8oGXurJkXZoC6uU xT3dsHCNH/AB76WUSC9geZCsCmdlUAl8NVJTGFTzW8E3dAEvLfx6fpgmXjDMUcMS giZLQkvzkB9UTF/g1WTjyvgGMFjw81EXtZqTltBhp2dWNyTT3h9QbWTaKlqjOUdL hC80bf0xEPdNJi6xR14m7PR1jvAK0u859O/EqTVoeTVJ8yAnM+apVzl7zGiVUq+W FDLe75CEg7ozzLL/f6GU7CHnNA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:36:33 2026 by rpki-client