$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: ap6VJNETf922P9YmHhS/TS05wwGkM2dt9zh3Cd/Gzak= Subject key identifier: D1:E9:B6:D8:CC:DA:C4:89:8B:5F:50:59:F5:F7:58:D5:EF:EF:7A:D2 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 01AF Signing time: Mon 21 Sep 2026 04:04:11 +0000 Manifest this update: Mon 21 Sep 2026 04:04:11 +0000 Manifest next update: Mon 28 Sep 2026 04:04:11 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: +9TLw30QL7BpT6Oyt9jYxmKiBm8LbmHEsvKgz1Bn9I8=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 9L09hQIBaOVE5f616sgiqulORBkTSjHL+znxkwZEmL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Sep 21 04:04:11 2026 GMT Not After : Sep 28 04:04:11 2026 GMT Subject: CN=6ab0acbb-2794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:60:67:ba:75:bc:d2:b3:73:3e:97:62:13: 7e:19:35:53:03:25:1e:86:92:c2:66:87:d2:92:8d: 32:38:56:db:28:f1:33:ba:39:9b:e4:ec:3a:cf:74: a3:51:cd:f2:b1:b1:b6:07:0c:3e:b2:a3:8f:e3:0f: a4:8c:3f:e6:1c:a2:e4:5e:76:38:e3:e3:b0:12:ef: 7b:0e:c1:45:14:8c:1c:05:c9:68:42:e4:33:2e:5e: a4:80:2d:9e:03:d4:29:db:2f:b6:8d:66:ba:f2:a1: e0:2d:f2:ec:ba:38:d9:3c:9d:64:c6:79:59:8d:58: 0c:72:bd:df:e0:49:5b:17:6e:0d:a2:d2:37:8e:4d: de:08:0c:05:58:42:a5:9b:c6:82:7b:e2:fd:67:c7: 0d:95:2d:76:af:fd:18:f0:5c:b7:95:14:f3:d8:2e: 3e:b4:d1:a3:c6:9b:4e:1b:b5:78:f4:7e:33:c2:16: 26:e4:44:a2:36:9e:bc:48:19:08:e1:8d:f7:b2:fc: 50:eb:7d:11:7e:ff:3c:a3:97:05:bc:0b:9d:8e:30: 8d:cb:8d:ff:de:fb:16:8d:10:d3:62:22:c1:ca:60: 5b:08:bb:b3:1a:2a:0a:92:6d:45:7e:b9:33:f4:83: 94:20:01:9a:80:db:c0:b8:e1:f2:ea:53:0b:d6:8a: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:B6:D8:CC:DA:C4:89:8B:5F:50:59:F5:F7:58:D5:EF:EF:7A:D2 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:de:6c:95:b5:e3:e9:9e:e0:98:b9:77:ee:4e:4c:91:f2:c7: 09:6b:7b:7b:55:0e:ab:81:bc:55:30:e3:1e:da:54:46:87:6e: e7:0e:c9:f8:c0:04:0d:6b:d3:b9:fc:05:30:b6:0a:21:0e:79: 32:dc:29:17:54:54:c4:fd:d3:9a:3e:31:21:85:74:90:aa:85: 74:c2:85:5c:68:bb:f8:f9:ce:90:c5:46:b4:f7:e6:dd:1c:99: e3:e8:7c:6a:a4:53:7b:db:e3:07:e4:ef:b5:3a:11:c7:9e:df: 45:9a:16:db:a5:f4:71:23:35:f7:3c:99:62:97:8f:4a:d7:45: cd:d3:da:27:12:c9:ed:33:e2:17:8b:6a:24:40:5d:80:27:b2: c6:33:49:1d:c5:a9:88:3f:38:bd:f4:68:06:df:23:50:6e:a0: 07:a7:24:67:b7:95:8f:32:cf:9c:b4:bc:6d:d4:48:bb:49:20: df:5c:c1:5b:e4:e3:dd:79:c0:6d:4c:75:d0:33:98:7f:6f:c8: f8:d3:1d:5a:69:bc:23:68:f7:68:56:7d:db:4e:cb:77:c1:87: d7:6f:4a:ad:ef:a8:fd:85:a5:e9:29:50:80:d2:dd:1d:df:56: 95:e1:f2:51:4b:92:13:c5:61:b5:9f:4f:e0:ce:c3:0d:69:95: e8:8f:22:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjYwOTIxMDQwNDExWhcNMjYwOTI4MDQwNDExWjAYMRYwFAYD VQQDEw02YWIwYWNiYi0yNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU1gZ7p1vNKzcz6XYhN+GTVTAyUehpLCZofSko0yOFbbKPEzujmb5Ow6z3Sj Uc3ysbG2Bww+sqOP4w+kjD/mHKLkXnY44+OwEu97DsFFFIwcBcloQuQzLl6kgC2e A9Qp2y+2jWa68qHgLfLsujjZPJ1kxnlZjVgMcr3f4ElbF24NotI3jk3eCAwFWEKl m8aCe+L9Z8cNlS12r/0Y8Fy3lRTz2C4+tNGjxptOG7V49H4zwhYm5ESiNp68SBkI 4Y33svxQ630Rfv88o5cFvAudjjCNy43/3vsWjRDTYiLBymBbCLuzGioKkm1Ffrkz 9IOUIAGagNvAuOHy6lML1oqotwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHpttjM 2sSJi19QWfX3WNXv73rSMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf95slbXj6Z7gmLl37k5MkfLHCWt7e1UOq4G8VTDjHtpURodu5w7J+MAEDWvT ufwFMLYKIQ55MtwpF1RUxP3Tmj4xIYV0kKqFdMKFXGi7+PnOkMVGtPfm3RyZ4+h8 aqRTe9vjB+TvtToRx57fRZoW26X0cSM19zyZYpePStdFzdPaJxLJ7TPiF4tqJEBd gCeyxjNJHcWpiD84vfRoBt8jUG6gB6ckZ7eVjzLPnLS8bdRIu0kg31zBW+Tj3XnA bUx10DOYf2/I+NMdWmm8I2j3aFZ9207Ld8GH129Kre+o/YWl6SlQgNLdHd9WleHy UUuSE8VhtZ9P4M7DDWmV6I8iPA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:17:07 2026 by rpki-client