$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft File: bmfAks6I_8_-rcHcpibbZyygdeU.mft (raw, json) Hash identifier: KQ0ZeL/94n/f/gF0j7CMsHSEEOb10iEwuIZgpz2Gc9A= Subject key identifier: 55:64:35:10:59:1D:D0:5C:0F:8B:F5:A7:73:EA:41:E6:24:BD:A9:7B Authority key identifier: 6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 Certificate issuer: /CN=A91E1EC0/serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft Manifest number: 32 Signing time: Fri 25 Sep 2026 08:47:47 +0000 Manifest this update: Fri 25 Sep 2026 08:47:46 +0000 Manifest next update: Fri 02 Oct 2026 08:47:46 +0000 Files and hashes: 1: bmfAks6I_8_-rcHcpibbZyygdeU.crl (hash: 9ThBGxCvTS+5oKTDJI1ts8DTj0anFIWT0TCcJ1ayE0s=) 2: 333E8C3E6DE511F19EDFEF3F5BA30FBC.roa (hash: Ue3cv5Sg9mqnsZPT5Yk4nejtqsmOyqU5EUN+qBTBPzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC0, serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Validity Not Before: Sep 25 08:47:46 2026 GMT Not After : Oct 2 08:47:46 2026 GMT Subject: CN=6ab63532-2ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:a7:09:ef:c4:06:12:4c:ab:70:e4:65:e4: 71:53:01:b0:b7:35:ee:53:7f:39:4a:d8:99:20:3d: cf:b6:68:cf:2c:7d:ab:34:a4:17:0e:17:10:06:eb: 80:f8:72:66:97:2c:97:04:7c:b2:19:0f:c9:b0:5a: 94:bb:87:43:de:06:5d:b5:36:fc:14:a2:3f:18:a2: 53:d6:27:34:c8:7a:d7:60:bd:05:b6:bd:eb:c8:6f: dc:90:b9:b9:82:95:bd:b3:58:86:66:fa:17:8d:02: 4c:99:0e:c7:72:5e:f0:b2:4e:d9:d8:c9:a3:79:c8: 1e:f8:a6:4e:d2:b0:96:91:f0:81:01:f5:97:00:b1: 1b:58:db:bd:da:61:ce:e4:fa:45:6b:5e:10:33:ed: 38:e5:75:c4:bd:34:ab:26:6e:d6:58:ac:d4:32:67: 2b:a1:f8:a7:7a:7a:05:60:0c:bf:19:af:52:0f:04: 99:ec:f4:b6:33:19:21:20:f6:9d:f1:65:10:6e:13: de:ca:de:05:33:07:01:29:9f:e8:6c:f9:67:91:82: c1:b4:62:22:2d:df:c5:b2:9e:bd:69:d3:95:ad:ff: 59:71:8d:52:a5:7b:eb:0a:a4:67:32:92:27:a4:61: a5:de:32:23:44:39:65:77:4b:3a:85:6e:0b:f8:84: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:64:35:10:59:1D:D0:5C:0F:8B:F5:A7:73:EA:41:E6:24:BD:A9:7B X509v3 Authority Key Identifier: keyid:6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:19:69:32:20:35:c5:74:65:a6:28:59:56:7e:a6:82:9c: cd:cc:cf:00:a4:d2:6f:3f:69:69:8b:5f:f7:6a:de:e6:bc:7b: 8b:b8:44:d0:81:ae:e9:98:bd:2e:c3:c8:3c:b0:01:56:25:52: 18:9a:11:11:86:7b:28:f6:13:75:a9:49:4e:f2:08:e9:75:4a: 0d:32:9d:6d:e6:12:a3:dc:c7:68:2d:c3:fc:6c:eb:9e:62:f6: 8d:48:ac:e2:6d:70:b2:81:87:5d:97:5a:ed:70:e0:13:ce:c5: 21:d4:b1:0b:28:1e:72:73:79:5d:bd:ec:5a:84:f5:8c:1b:25: f1:b5:59:4f:80:5d:fb:3b:ca:dd:df:b8:2d:01:65:97:de:9b: b0:47:6f:66:17:36:de:da:e6:18:a4:48:42:91:9a:a1:46:bf: 24:9e:d0:d8:01:64:12:2e:3f:a2:cb:cc:b1:54:ab:23:71:78: 69:fb:e5:a9:65:b0:78:cd:ec:a3:14:6c:77:b3:4e:60:1a:d7: e2:aa:c0:a5:68:71:af:6a:d0:87:9d:a1:54:8d:65:ff:9b:ed: c9:b3:de:fe:b7:0d:4e:2c:34:ca:14:ce:2d:62:97:d1:bf:ac: 96:25:cd:e4:a4:01:36:ea:75:44:64:20:37:1d:85:8f:07:e2: 8a:e8:43:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDMDExMC8GA1UEBRMoNkU2N0MwOTJDRTg4RkZDRkZFQURDMURDQTYyNkRCNjcy Q0EwNzVFNTAeFw0yNjA5MjUwODQ3NDZaFw0yNjEwMDIwODQ3NDZaMBgxFjAUBgNV BAMTDTZhYjYzNTMyLTJjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC/KcJ78QGEkyrcORl5HFTAbC3Ne5TfzlK2JkgPc+2aM8sfas0pBcOFxAG64D4 cmaXLJcEfLIZD8mwWpS7h0PeBl21NvwUoj8YolPWJzTIetdgvQW2vevIb9yQubmC lb2zWIZm+heNAkyZDsdyXvCyTtnYyaN5yB74pk7SsJaR8IEB9ZcAsRtY273aYc7k +kVrXhAz7TjldcS9NKsmbtZYrNQyZyuh+Kd6egVgDL8Zr1IPBJns9LYzGSEg9p3x ZRBuE97K3gUzBwEpn+hs+WeRgsG0YiIt38Wynr1p05Wt/1lxjVKle+sKpGcykiek YaXeMiNEOWV3SzqFbgv4hDIfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVWQ1EFkd 0FwPi/Wnc+pB5iS9qXswHwYDVR0jBBgwFoAUbmfAks6I/8/+rcHcpibbZyygdeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0U5MDJDREM0NkRF NDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhfLXJjSGNwaWJiWnl5Z2Rl VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYm1mQWtzNklfOF8tcmNIY3BpYmJaeXlnZGVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUMwL0U5MDJDREM0NkRFNDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhf LXJjSGNwaWJiWnl5Z2RlVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEsBlpMiA1xXRlpihZVn6mgpzNzM8ApNJvP2lpi1/3at7mvHuLuETQga7pmL0u w8g8sAFWJVIYmhERhnso9hN1qUlO8gjpdUoNMp1t5hKj3MdoLcP8bOueYvaNSKzi bXCygYddl1rtcOATzsUh1LELKB5yc3ldvexahPWMGyXxtVlPgF37O8rd37gtAWWX 3puwR29mFzbe2uYYpEhCkZqhRr8kntDYAWQSLj+iy8yxVKsjcXhp++WpZbB4zeyj FGx3s05gGtfiqsClaHGvatCHnaFUjWX/m+3Js97+tw1OLDTKFM4tYpfRv6yWJc3k pAE26nVEZCA3HYWPB+KK6EOI -----END CERTIFICATE-----Generated at Fri Sep 25 18:07:46 2026 by rpki-client