$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft File: BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json) Hash identifier: GBCsPq6BTuhm3pVJyBev8fVBpEC6X+4v2LGxLIOtVm8= Subject key identifier: E9:E0:85:E1:E7:B1:B0:58:AC:19:53:B9:20:D7:EA:45:32:75:25:E3 Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft Manifest number: D7 Signing time: Mon 27 Jul 2026 08:49:57 +0000 Manifest this update: Mon 27 Jul 2026 08:49:56 +0000 Manifest next update: Mon 03 Aug 2026 08:49:56 +0000 Files and hashes: 1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: O1g+FPZ4C/SR6ASIyJogD9pPzJgzuNzlWNwPiq7pEbw=) 2: 7B744F9C754311F1B2D369B17FA30FBC.roa (hash: 6h+dViv9HHF043rn54yjzvjKc8Qv6o5bk2lEUKwA0u0=) 3: 6BB1AB46753D11F192ADDCCA7EA30FBC.roa (hash: 54hEOegvqKHFu2sFkesEF7BLwvXcxGU9hQJpTA8Y7Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B Validity Not Before: Jul 27 08:49:56 2026 GMT Not After : Aug 3 08:49:56 2026 GMT Subject: CN=6a671bb5-997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:12:b9:f4:80:22:4d:b6:81:26:b7:e5:f2: 27:1c:a0:04:a8:b1:55:4f:62:42:4a:f6:17:31:b2: d2:e8:81:9e:d0:37:d3:2a:83:42:7c:20:b5:d5:28: b1:93:8b:b9:2c:6f:13:51:b7:71:32:d5:7e:bc:46: ce:6e:36:21:92:58:96:b6:a5:29:cf:fc:8a:98:3d: 6f:ab:5d:5b:4b:04:90:b6:a8:77:19:88:41:4b:cf: c0:73:5d:dd:64:13:b0:06:05:79:4d:46:54:57:c8: 6a:22:74:7a:ba:00:c0:b5:0a:8f:b7:6b:62:d0:9d: 0a:6b:01:02:a9:44:57:ef:b4:81:2b:0a:5e:09:b5: 2a:37:04:a9:e7:6c:47:ed:aa:30:1a:2b:b2:04:3d: 4a:85:3b:33:27:51:94:75:9f:c2:a5:3c:36:ed:20: 66:07:5e:11:b5:35:a9:0b:ed:c3:bc:e5:2b:e4:14: eb:ed:a8:c1:2d:ea:99:64:e0:5e:40:fb:b0:bf:be: 06:7c:fd:71:ea:74:e3:cb:d1:d4:f8:16:cf:70:f8: 6f:11:4e:3e:a5:be:d9:47:e1:0c:15:1f:af:e9:ea: 1a:14:38:bf:17:53:10:6f:ef:4e:d5:09:96:09:5c: ca:b5:e9:c4:39:1b:06:37:5c:02:85:cc:97:2d:e7: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:85:E1:E7:B1:B0:58:AC:19:53:B9:20:D7:EA:45:32:75:25:E3 X509v3 Authority Key Identifier: keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b6:51:ea:5c:68:6e:e3:f9:6e:64:70:47:b2:9e:bb:0e:4f: 17:79:a0:5c:b3:d0:d8:7f:6f:fa:78:6a:2a:78:f3:59:8d:ff: 78:c6:29:4c:46:46:47:2a:75:ac:c7:0b:49:75:cc:16:79:b2: 03:b6:74:89:17:fe:40:c5:5f:cb:66:8c:38:b5:5b:a4:3b:2d: 71:bc:b8:98:10:85:a3:46:ed:f2:2a:60:63:33:d3:ac:93:b9: 08:b6:ae:62:6f:87:17:5d:f7:44:11:f4:75:4d:85:14:44:70: 5a:72:e8:1d:2e:5b:9a:db:7c:4d:6c:0d:c0:47:f8:2a:8e:d5: 24:54:86:dc:43:6c:d1:4c:fe:22:3d:8b:3a:be:7e:b2:90:1f: 87:c8:d4:01:b6:71:6a:dc:2d:1e:8b:ca:86:ff:90:62:90:32: 4c:2a:41:26:c9:2f:06:14:f8:1a:90:72:df:e5:b0:5c:e3:81: 4d:40:94:7f:73:7c:f2:b0:f6:2d:81:2a:d0:30:50:22:c8:43: fc:bc:f5:c1:d0:9a:4d:00:fb:03:4e:bd:68:9b:e7:b1:ec:fa: b8:4d:f5:f5:74:99:52:d0:22:0f:fd:38:0d:6d:4f:93:b5:1f: d5:7c:64:36:a1:e4:18:fd:5b:de:53:00:c8:a1:51:f2:6f:93: e3:44:bd:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDA2Q0I0OEY1N0Q1NDNBOTc4MkQ4QTdDOTZEQTRFMURF REJDM0MzMEIwHhcNMjYwNzI3MDg0OTU2WhcNMjYwODAzMDg0OTU2WjAYMRYwFAYD VQQDEw02YTY3MWJiNS05OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDgSufSAIk22gSa35fInHKAEqLFVT2JCSvYXMbLS6IGe0DfTKoNCfCC11Six k4u5LG8TUbdxMtV+vEbObjYhkliWtqUpz/yKmD1vq11bSwSQtqh3GYhBS8/Ac13d ZBOwBgV5TUZUV8hqInR6ugDAtQqPt2ti0J0KawECqURX77SBKwpeCbUqNwSp52xH 7aowGiuyBD1KhTszJ1GUdZ/CpTw27SBmB14RtTWpC+3DvOUr5BTr7ajBLeqZZOBe QPuwv74GfP1x6nTjy9HU+BbPcPhvEU4+pb7ZR+EMFR+v6eoaFDi/F1MQb+9O1QmW CVzKtenEORsGN1wChcyXLeewCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOngheHn sbBYrBlTuSDX6kUydSXjMB8GA1UdIwQYMBaAFAbLSPV9VDqXgtinyW2k4d7bw8ML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BMzE0ODQ3QzQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9wZUMyS2ZKYmFUaDN0dkR3 d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JzdEk5WDFVT3BlQzJLZkpiYVRoM3R2RHd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BMzE0ODQ3QzQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9w ZUMyS2ZKYmFUaDN0dkR3d3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHbZR6lxobuP5bmRwR7Keuw5PF3mgXLPQ2H9v+nhqKnjzWY3/eMYpTEZGRyp1 rMcLSXXMFnmyA7Z0iRf+QMVfy2aMOLVbpDstcby4mBCFo0bt8ipgYzPTrJO5CLau Ym+HF133RBH0dU2FFERwWnLoHS5bmtt8TWwNwEf4Ko7VJFSG3ENs0Uz+Ij2LOr5+ spAfh8jUAbZxatwtHovKhv+QYpAyTCpBJskvBhT4GpBy3+WwXOOBTUCUf3N88rD2 LYEq0DBQIshD/Lz1wdCaTQD7A069aJvnsez6uE319XSZUtAiD/04DW1Pk7Uf1Xxk NqHkGP1b3lMAyKFR8m+T40S9tA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:09:41 2026 by rpki-client