$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft File: bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft (raw, json) Hash identifier: A5/zJ9Z/PERcV0ZHtZnIZIG+MZRZjGmb84//+ii4LiA= Subject key identifier: 42:04:BE:90:3D:98:0C:2B:B1:11:C2:64:CE:7E:CE:4E:9F:9F:DC:FD Authority key identifier: 6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E Certificate issuer: /CN=A91D4FA2/serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft Manifest number: 5B Signing time: Fri 09 Oct 2026 08:55:11 +0000 Manifest this update: Fri 09 Oct 2026 08:55:10 +0000 Manifest next update: Fri 16 Oct 2026 08:55:10 +0000 Files and hashes: 1: bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl (hash: TnqlvBT7xbV75rtSuCsTsvLQl84BTJCP205k0Ce6j6I=) 2: 747DC16E3EF211F19456D02EC1833773.roa (hash: DzgxAcs3xQLb7+MwxDBKIN04csW3+rM4yVXnENoQ1uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4FA2, serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E Validity Not Before: Oct 9 08:55:10 2026 GMT Not After : Oct 16 08:55:10 2026 GMT Subject: CN=6ac8abef-28a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:63:ca:15:af:f3:0e:b8:02:42:f9:ee:bc: 1b:d7:b8:13:4e:08:d0:72:9a:2c:d7:07:2e:32:cd: 42:39:2f:0f:49:5c:b6:a0:d4:a7:c3:17:8e:ae:11: 50:dc:0d:4c:26:1d:32:69:c2:90:fc:38:1e:c4:d9: dc:16:2f:e0:13:3e:32:6b:2c:53:e6:eb:48:02:52: a4:12:c4:8f:c5:55:74:81:f7:e3:fd:48:79:ee:09: 8a:1c:77:48:60:48:e8:93:99:dd:4b:b6:5a:2c:84: fe:e2:8e:68:47:de:b3:2f:a6:05:97:a6:a9:19:29: 22:35:65:cf:c6:91:3b:77:51:cb:db:e8:02:75:de: dc:06:9f:5e:99:41:0f:ff:a5:b6:4b:63:af:79:da: 36:7e:5b:12:15:1c:4b:1a:8c:6f:7e:2a:0e:c8:07: 7f:5d:ae:20:08:86:b7:31:f3:d0:da:ed:c7:64:73: cd:90:f6:35:48:47:de:79:34:1f:08:71:45:a3:70: 12:06:ab:a6:b2:cd:a0:6c:ae:39:d4:fe:33:f7:f3: 14:9d:ba:98:f2:d3:70:8e:22:67:a5:5f:96:b4:1a: a3:7b:0b:7b:2a:1f:bb:ef:d5:dd:ca:51:1b:6c:a5: 94:f0:03:b2:a1:d5:39:0b:99:a5:37:5b:10:ff:02: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:BE:90:3D:98:0C:2B:B1:11:C2:64:CE:7E:CE:4E:9F:9F:DC:FD X509v3 Authority Key Identifier: keyid:6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:60:e9:28:85:4e:30:88:5d:55:9f:59:d4:0e:97:5e:a5:8a: ee:70:4d:3b:c0:5c:c1:7d:7d:64:ec:f5:cc:bc:6d:f7:b0:cc: a8:b0:c1:c1:c7:4a:d6:08:b0:c2:98:74:38:d5:5c:9d:52:69: 08:51:37:5d:d4:73:c6:c7:13:f5:28:2d:aa:c9:eb:56:6d:e0: d9:08:ae:f6:6a:24:50:ab:c4:1e:0b:3c:f8:d3:9d:1c:e2:93: 83:bb:c2:89:57:61:15:b7:b2:8f:c7:71:ec:17:ea:cb:ba:e5: ac:68:f5:14:3b:20:48:d0:53:a6:15:65:6b:8a:12:03:85:f1: 93:44:1a:3b:65:f8:fe:ba:b9:75:6f:c5:c6:61:79:57:e1:9a: 74:36:ea:aa:e0:a5:67:59:80:0b:6e:2b:9a:ed:64:ec:4d:71: 9c:77:5a:e9:53:14:0a:2a:e9:e0:31:55:97:e5:c9:74:f9:31: 91:29:ab:8d:ad:bf:5e:51:bf:72:65:e0:7c:06:4d:cc:2b:fc: 4a:ff:70:83:91:18:9a:f3:91:07:54:43:bd:9a:1d:55:03:d3: eb:d6:1e:99:d6:f0:82:60:75:97:d6:4c:5f:08:4d:e7:61:eb: 5f:18:a8:a9:61:6c:81:b2:56:43:01:96:ac:7e:3d:cf:7a:92: c9:51:ed:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEZBMjExMC8GA1UEBRMoNkRBNzNGQjdDMTYzODIzNDhCRkY5MEE5RjRFMzJENEJF OEJDQzMxRTAeFw0yNjEwMDkwODU1MTBaFw0yNjEwMTYwODU1MTBaMBgxFjAUBgNV BAMTDTZhYzhhYmVmLTI4YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzoWPKFa/zDrgCQvnuvBvXuBNOCNBymizXBy4yzUI5Lw9JXLag1KfDF46uEVDc DUwmHTJpwpD8OB7E2dwWL+ATPjJrLFPm60gCUqQSxI/FVXSB9+P9SHnuCYocd0hg SOiTmd1LtloshP7ijmhH3rMvpgWXpqkZKSI1Zc/GkTt3Ucvb6AJ13twGn16ZQQ// pbZLY6952jZ+WxIVHEsajG9+Kg7IB39driAIhrcx89Da7cdkc82Q9jVIR955NB8I cUWjcBIGq6ayzaBsrjnU/jP38xSdupjy03COImelX5a0GqN7C3sqH7vv1d3KURts pZTwA7Kh1TkLmaU3WxD/AtVjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQgS+kD2Y DCuxEcJkzn7OTp+f3P0wHwYDVR0jBBgwFoAUbac/t8FjgjSL/5Cp9OMtS+i8wx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0RkEyLzY5MTIyMzcwM0Qz RTExRjE4QkQyNzgzQTlGODMzNzczL2JhY190OEZqZ2pTTF81Q3A5T010Uy1pOHd4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmFjX3Q4RmpnalNMXzVDcDlPTXRTLWk4d3g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 RkEyLzY5MTIyMzcwM0QzRTExRjE4QkQyNzgzQTlGODMzNzczL2JhY190OEZqZ2pT TF81Q3A5T010Uy1pOHd4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnYOkohU4wiF1Vn1nUDpdepYrucE07wFzBfX1k7PXMvG33sMyosMHBx0rWCLDC mHQ41VydUmkIUTdd1HPGxxP1KC2qyetWbeDZCK72aiRQq8QeCzz4050c4pODu8KJ V2EVt7KPx3HsF+rLuuWsaPUUOyBI0FOmFWVrihIDhfGTRBo7Zfj+url1b8XGYXlX 4Zp0Nuqq4KVnWYALbiua7WTsTXGcd1rpUxQKKungMVWX5cl0+TGRKauNrb9eUb9y ZeB8Bk3MK/xK/3CDkRia85EHVEO9mh1VA9Pr1h6Z1vCCYHWX1kxfCE3nYetfGKip YWyBslZDAZasfj3PepLJUe1K -----END CERTIFICATE-----Generated at Sun Oct 11 07:53:25 2026 by rpki-client