$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft File: bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json) Hash identifier: wNJAs6zkv6XxgWvyo9Da9YXTDwBonP4uShGef/zWdSI= Subject key identifier: 6C:9B:EB:63:A2:B7:B2:5C:2C:74:26:91:81:04:CA:2D:37:B3:F4:4F Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft Manifest number: 0B15 Signing time: Tue 22 Sep 2026 19:10:06 +0000 Manifest this update: Tue 22 Sep 2026 19:10:06 +0000 Manifest next update: Tue 29 Sep 2026 19:10:06 +0000 Files and hashes: 1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: Y6m3hoN2tp3zry0nTWxYgDOGkGZlXqUr3HOF5yDOQAc=) 2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=) 3: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: L46lyNGF7xref2PgtpwYQAu20HQOQ2fkzes7fFR03pE=) 4: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Sep 22 19:10:06 2026 GMT Not After : Sep 29 19:10:06 2026 GMT Subject: CN=6ab2d28e-ce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:72:58:21:bf:8f:89:38:a1:f3:d2:ee:01: 32:09:62:87:29:48:dc:fe:19:93:ce:8c:d9:c9:bf: 8a:be:76:ac:a1:12:75:e2:82:74:b6:53:dc:b1:0d: ce:29:6a:7b:40:d6:ce:ef:01:57:33:9e:8b:2a:ed: f0:42:c6:45:69:44:18:59:e3:53:8d:ce:1d:77:af: ba:6c:be:31:f5:61:24:b5:d2:3c:c9:99:7f:ce:cd: 7c:3d:dd:77:0c:93:38:fa:4e:b9:33:a1:38:c8:f2: ef:70:50:cb:ef:0a:fa:2b:5f:d0:de:d8:40:63:fe: a1:90:f5:45:21:32:63:84:71:37:83:34:2e:13:9a: 50:d5:5d:55:91:04:4e:15:8b:17:33:8b:4c:16:74: 5d:3a:d6:6c:84:6c:3b:1d:34:e5:19:b3:39:3f:43: 9b:32:46:56:33:9d:af:76:2a:67:89:bc:84:d0:e9: 5f:22:64:91:e5:98:af:77:81:65:e4:ba:27:d5:f7: 8f:3b:81:8e:5f:f5:cf:17:7d:fb:3d:43:1f:21:c1: 9b:56:62:89:7e:13:a8:cb:7b:73:79:3b:49:a4:7a: 8e:11:de:e9:d9:11:cc:8d:7b:67:08:8e:ab:c5:fd: 47:e2:56:19:1a:c3:be:cf:68:00:55:65:87:10:ec: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:EB:63:A2:B7:B2:5C:2C:74:26:91:81:04:CA:2D:37:B3:F4:4F X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:da:20:2b:7c:87:6e:52:d4:29:9c:28:02:cb:7b:75:4c:cd: e5:2a:4c:5e:1f:6d:13:18:ca:45:b3:a4:7d:6d:8a:e4:89:b5: 60:e4:2c:59:85:45:df:d3:35:bc:6a:28:97:39:bf:c5:c2:49: 9f:bf:ef:9b:d7:1c:3e:e0:4e:dd:37:bf:66:cb:20:79:3f:68: 6b:79:cd:13:cb:6d:34:aa:8d:22:c7:26:26:e7:fa:9d:cf:0e: 9a:e3:33:2d:3c:38:1d:35:1d:99:02:3e:91:3f:3e:2e:6d:f3: 5f:ff:31:df:67:22:7a:d7:fd:f5:ff:00:21:b3:a1:a0:e3:16: c8:a6:66:37:6d:92:58:72:14:3e:2e:1c:82:01:76:97:36:24: 17:aa:e0:c0:c1:74:4e:ff:37:c7:5d:a5:1a:75:30:55:72:77: 14:04:04:82:99:21:e9:ce:0c:76:7c:32:8d:a0:6c:e0:06:42: ae:50:f7:02:c3:c1:66:53:04:a2:7e:e9:65:94:4c:ca:ad:c8: 7b:45:4c:db:7c:52:0d:69:cf:a1:1a:0a:29:75:33:ed:52:8a: c6:cb:f1:f9:1e:b0:25:a0:06:bf:05:ab:25:d8:0c:40:73:32: 5e:8c:4f:e0:b1:d7:ae:89:8b:fd:1d:ce:1a:61:f2:3d:f2:11: 3a:d7:68:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjYwOTIyMTkxMDA2WhcNMjYwOTI5MTkxMDA2WjAYMRYwFAYD VQQDEw02YWIyZDI4ZS1jZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMtyWCG/j4k4ofPS7gEyCWKHKUjc/hmTzozZyb+KvnasoRJ14oJ0tlPcsQ3O KWp7QNbO7wFXM56LKu3wQsZFaUQYWeNTjc4dd6+6bL4x9WEktdI8yZl/zs18Pd13 DJM4+k65M6E4yPLvcFDL7wr6K1/Q3thAY/6hkPVFITJjhHE3gzQuE5pQ1V1VkQRO FYsXM4tMFnRdOtZshGw7HTTlGbM5P0ObMkZWM52vdipnibyE0OlfImSR5Zivd4Fl 5Lon1fePO4GOX/XPF337PUMfIcGbVmKJfhOoy3tzeTtJpHqOEd7p2RHMjXtnCI6r xf1H4lYZGsO+z2gAVWWHEOwvVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyb62Oi t7JcLHQmkYEEyi03s/RPMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2 TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAidogK3yHblLUKZwoAst7dUzN5SpMXh9tExjKRbOkfW2K5Im1YOQsWYVF39M1 vGoolzm/xcJJn7/vm9ccPuBO3Te/ZssgeT9oa3nNE8ttNKqNIscmJuf6nc8OmuMz LTw4HTUdmQI+kT8+Lm3zX/8x32cietf99f8AIbOhoOMWyKZmN22SWHIUPi4cggF2 lzYkF6rgwMF0Tv83x12lGnUwVXJ3FAQEgpkh6c4MdnwyjaBs4AZCrlD3AsPBZlME on7pZZRMyq3Ie0VM23xSDWnPoRoKKXUz7VKKxsvx+R6wJaAGvwWrJdgMQHMyXoxP 4LHXromL/R3OGmHyPfIROtdosA== -----END CERTIFICATE-----Generated at Thu Sep 24 18:03:58 2026 by rpki-client