$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft File: BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json) Hash identifier: zJHaFIaMzaYpKk/mGMqMf58BE2AHhIWRaRRYRRKDZMw= Subject key identifier: 74:9E:51:66:2C:8D:E5:BF:9B:AD:23:D4:80:1B:1F:79:3C:70:DB:AD Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft Manifest number: F4 Signing time: Mon 21 Sep 2026 06:21:38 +0000 Manifest this update: Mon 21 Sep 2026 06:21:38 +0000 Manifest next update: Mon 28 Sep 2026 06:21:38 +0000 Files and hashes: 1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: ArgD5NLZAYNQOsj0ri/gzePlTcD4qgi9Y5YEOTIFwz0=) 2: 6BB1AB46753D11F192ADDCCA7EA30FBC.roa (hash: 54hEOegvqKHFu2sFkesEF7BLwvXcxGU9hQJpTA8Y7Js=) 3: 7B744F9C754311F1B2D369B17FA30FBC.roa (hash: 6h+dViv9HHF043rn54yjzvjKc8Qv6o5bk2lEUKwA0u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Validity Not Before: Sep 21 06:21:38 2026 GMT Not After : Sep 28 06:21:38 2026 GMT Subject: CN=6ab0ccf2-d87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:5c:8d:0b:17:3b:f4:3b:af:ef:97:06:a4: de:4e:e0:13:c3:b4:94:f9:d5:7a:79:72:0e:42:f3: a0:18:eb:bc:ce:e3:db:00:a5:b5:34:c5:5b:63:37: dd:64:76:da:0d:a6:e1:e5:e5:78:3d:8e:53:7c:ae: 54:52:48:ed:09:1f:6d:2a:e9:b7:3c:9d:1b:88:f5: d6:5b:57:ec:7b:17:9a:a7:72:3b:4b:a7:aa:dc:b7: 76:49:19:23:a7:ca:20:84:9c:2e:ae:ee:ca:dc:6a: 74:d2:ec:47:e1:3c:1a:08:d5:a5:cc:b2:2b:9a:6c: 84:d7:0d:f5:a0:60:41:c0:d8:67:dc:68:1e:66:4a: 26:84:06:62:e4:cb:c1:99:a0:0a:94:3e:ab:7c:af: 6d:fc:29:1a:74:93:0d:b9:89:6d:5e:40:e1:04:f2: 38:60:e9:fa:c8:78:f9:75:fc:4d:01:f8:75:0b:98: b3:14:ac:ad:fc:be:78:9f:fe:ed:b7:73:46:20:83: 55:58:29:ec:71:dd:1c:fc:df:7d:47:50:a8:e2:f0: ab:52:c6:7b:7c:69:0a:bc:ee:ce:e5:27:09:b5:df: 2d:a1:e3:68:92:f9:f9:8b:47:c9:a5:bc:5e:e8:66: 77:f4:6e:bd:b5:49:03:a7:cb:cd:3c:8d:c5:04:6f: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:51:66:2C:8D:E5:BF:9B:AD:23:D4:80:1B:1F:79:3C:70:DB:AD X509v3 Authority Key Identifier: keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ab:73:82:62:54:f0:dd:3b:e7:42:9d:b1:b2:7d:14:ef:cb: 6a:d0:c4:dc:ab:48:58:f1:af:38:0b:90:c9:12:f9:74:2e:75: c2:bf:b7:50:47:77:7a:01:f9:b0:35:a4:6d:4a:d8:3e:83:06: 1b:bc:d1:d3:3a:fa:5c:74:43:42:e7:9b:9f:ea:bd:4f:57:6b: 0b:e1:cb:a6:5f:8e:2b:8e:0a:5b:ee:5f:58:bd:fd:a9:0a:0a: 96:be:e2:d8:ae:ba:28:3f:15:56:5c:b5:d3:40:0f:22:b2:59: 6c:3d:9d:45:4d:99:33:94:88:21:08:83:91:e9:77:66:17:36: 83:95:70:8f:15:79:10:69:a6:a0:07:24:aa:59:5a:7d:95:1c: 32:50:48:d7:b1:3e:fe:27:53:b9:54:2b:dc:c4:d9:bb:8a:63: 6b:25:66:43:18:34:37:c9:9b:5f:79:65:9f:ec:1e:4c:1f:cf: 53:fa:3a:51:4a:7e:8f:78:f6:db:30:7b:b9:12:8f:cf:1b:c6: 63:00:58:21:45:4d:9c:39:29:67:1d:34:2a:2d:43:aa:be:3f: 68:1e:f5:97:5a:ae:6d:3c:09:36:0f:2a:dc:53:43:08:d9:25: 75:42:ef:aa:3a:d4:ed:de:22:4f:cd:79:ce:7b:af:b1:34:e3: 41:34:b0:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDA2Q0I0OEY1N0Q1NDNBOTc4MkQ4QTdDOTZEQTRFMURF REJDM0MzMEIwHhcNMjYwOTIxMDYyMTM4WhcNMjYwOTI4MDYyMTM4WjAYMRYwFAYD VQQDEw02YWIwY2NmMi1kODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFBcjQsXO/Q7r++XBqTeTuATw7SU+dV6eXIOQvOgGOu8zuPbAKW1NMVbYzfd ZHbaDabh5eV4PY5TfK5UUkjtCR9tKum3PJ0biPXWW1fsexeap3I7S6eq3Ld2SRkj p8oghJwuru7K3Gp00uxH4TwaCNWlzLIrmmyE1w31oGBBwNhn3GgeZkomhAZi5MvB maAKlD6rfK9t/CkadJMNuYltXkDhBPI4YOn6yHj5dfxNAfh1C5izFKyt/L54n/7t t3NGIINVWCnscd0c/N99R1Co4vCrUsZ7fGkKvO7O5ScJtd8toeNokvn5i0fJpbxe 6GZ39G69tUkDp8vNPI3FBG8oNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSeUWYs jeW/m60j1IAbH3k8cNutMB8GA1UdIwQYMBaAFAbLSPV9VDqXgtinyW2k4d7bw8ML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BMzE0ODQ3QzQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9wZUMyS2ZKYmFUaDN0dkR3 d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JzdEk5WDFVT3BlQzJLZkpiYVRoM3R2RHd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BMzE0ODQ3QzQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9w ZUMyS2ZKYmFUaDN0dkR3d3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApatzgmJU8N0750KdsbJ9FO/LatDE3KtIWPGvOAuQyRL5dC51wr+3UEd3egH5 sDWkbUrYPoMGG7zR0zr6XHRDQuebn+q9T1drC+HLpl+OK44KW+5fWL39qQoKlr7i 2K66KD8VVly100APIrJZbD2dRU2ZM5SIIQiDkel3Zhc2g5VwjxV5EGmmoAckqlla fZUcMlBI17E+/idTuVQr3MTZu4pjayVmQxg0N8mbX3lln+weTB/PU/o6UUp+j3j2 2zB7uRKPzxvGYwBYIUVNnDkpZx00Ki1Dqr4/aB71l1qubTwJNg8q3FNDCNkldULv qjrU7d4iT815znuvsTTjQTSwfA== -----END CERTIFICATE-----Generated at Tue Sep 22 00:56:47 2026 by rpki-client