$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: jJsYA66HGeyLzd9TgC0GOTpOTg613ZqQ3O9Y0ap9rlk= Subject key identifier: 5E:53:B6:72:AF:71:99:70:99:BF:15:39:B7:1E:09:C2:97:98:5B:AE Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 04AE Signing time: Sun 20 Sep 2026 23:45:02 +0000 Manifest this update: Sun 20 Sep 2026 23:45:01 +0000 Manifest next update: Sun 27 Sep 2026 23:45:01 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: L/sPbwpY8iWma3cQ615B1iysS6CRl3TV5vTXdClML0w=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Sep 20 23:45:01 2026 GMT Not After : Sep 27 23:45:01 2026 GMT Subject: CN=6ab06ffe-2b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:27:26:90:68:0a:e7:06:71:be:ab:e9:ea: e6:72:db:2c:21:2c:43:e7:71:77:02:6a:64:cb:4e: 87:1d:3e:22:0d:e3:87:8a:aa:9f:35:59:53:41:a9: 6e:68:b2:ac:30:47:1e:36:af:4a:cf:c2:f1:74:76: 34:be:9b:12:93:ea:4c:c8:50:e4:70:d0:0a:79:b9: b3:61:fb:f2:49:5e:48:c3:e9:24:a2:5e:37:23:a2: ef:27:5d:76:d5:a8:40:8a:c0:28:18:ab:44:83:e9: e0:e2:2d:ac:65:02:bc:2a:e2:ac:fc:9a:ce:a1:e3: ca:49:06:d6:e6:fe:77:6d:f5:2b:ee:6e:36:9a:5e: b1:22:0f:0f:3f:02:2d:91:d3:0b:71:a3:4e:82:c8: 7d:3c:11:83:1e:41:d9:c6:5e:5f:0b:7d:f7:fc:6f: 1b:47:93:c2:48:fa:fe:dc:ec:6e:62:9d:79:15:1a: fc:20:35:27:01:44:be:71:be:92:35:7f:6f:59:c5: fd:6e:99:06:dd:53:27:61:cb:95:72:f5:32:61:84: 8d:63:14:29:56:6f:97:a9:8b:d7:ba:3a:c9:a1:75: 2a:d7:5e:87:cd:da:58:dd:87:da:7a:bd:17:25:ab: 53:fc:11:60:46:81:c7:72:dc:65:d4:84:0c:8e:a7: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:53:B6:72:AF:71:99:70:99:BF:15:39:B7:1E:09:C2:97:98:5B:AE X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ab:a5:6c:c4:2f:bf:a7:e7:82:2b:1e:51:27:b1:8b:4f:14: 66:36:d0:87:4c:e2:b3:a2:69:82:31:59:aa:fd:d1:de:de:69: db:da:be:bd:4c:1e:f7:b9:ba:7a:3b:12:8e:67:6b:8e:bc:cc: 1c:55:c3:2f:60:3d:42:bf:4c:b3:7c:6e:e2:b4:0b:c6:8e:62: 5f:19:a5:cf:2e:dd:54:e4:fa:3b:39:b3:17:63:93:5f:de:fb: d9:8a:c4:2b:4d:4d:31:3f:a3:1d:8c:0f:61:a6:0e:8e:77:67: 08:52:1b:a8:db:7b:e1:1e:21:40:78:e5:86:c8:09:12:7a:48: cb:50:65:0a:08:35:74:c8:1b:c6:c2:1c:52:07:53:dd:5f:ad: ea:23:9d:7c:65:65:7c:ab:27:13:94:85:9f:97:63:50:a3:ee: 21:b8:d6:a8:09:2a:2d:43:28:30:3b:92:68:9e:ef:6d:f3:2f: bd:8c:0e:4a:4b:6b:8c:c4:b6:0e:e0:a7:2b:7d:08:d5:d5:f5: 45:2e:84:ce:55:99:58:24:6b:be:11:b3:42:4f:12:8f:dc:0d: bf:f6:09:be:48:96:13:3c:1e:82:8f:ea:75:a4:40:c9:86:5b: f3:81:e3:73:88:1b:46:73:d1:63:26:18:c7:a7:e9:6c:af:43: d5:7a:a4:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjYwOTIwMjM0NTAxWhcNMjYwOTI3MjM0NTAxWjAYMRYwFAYD VQQDEw02YWIwNmZmZS0yYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr0nJpBoCucGcb6r6ermctssISxD53F3Ampky06HHT4iDeOHiqqfNVlTQalu aLKsMEceNq9Kz8LxdHY0vpsSk+pMyFDkcNAKebmzYfvySV5Iw+kkol43I6LvJ112 1ahAisAoGKtEg+ng4i2sZQK8KuKs/JrOoePKSQbW5v53bfUr7m42ml6xIg8PPwIt kdMLcaNOgsh9PBGDHkHZxl5fC333/G8bR5PCSPr+3OxuYp15FRr8IDUnAUS+cb6S NX9vWcX9bpkG3VMnYcuVcvUyYYSNYxQpVm+XqYvXujrJoXUq116HzdpY3Yfaer0X JatT/BFgRoHHctxl1IQMjqdNpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5TtnKv cZlwmb8VObceCcKXmFuuMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs6ulbMQvv6fngiseUSexi08UZjbQh0zis6JpgjFZqv3R3t5p29q+vUwe97m6 ejsSjmdrjrzMHFXDL2A9Qr9Ms3xu4rQLxo5iXxmlzy7dVOT6OzmzF2OTX9772YrE K01NMT+jHYwPYaYOjndnCFIbqNt74R4hQHjlhsgJEnpIy1BlCgg1dMgbxsIcUgdT 3V+t6iOdfGVlfKsnE5SFn5djUKPuIbjWqAkqLUMoMDuSaJ7vbfMvvYwOSktrjMS2 DuCnK30I1dX1RS6EzlWZWCRrvhGzQk8Sj9wNv/YJvkiWEzwego/qdaRAyYZb84Hj c4gbRnPRYyYYx6fpbK9D1XqkLQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:32:57 2026 by rpki-client