$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json) Hash identifier: SYhrsPRX5jby3UqMUtPQVsC9L6YN/6/DMNeES4qFZAM= Subject key identifier: 05:BB:71:E3:75:9F:4C:70:49:1E:A5:3A:C5:B9:4C:15:E6:98:DF:9A Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft Manifest number: 28 Signing time: Sat 19 Sep 2026 08:48:38 +0000 Manifest this update: Sat 19 Sep 2026 08:48:37 +0000 Manifest next update: Sat 26 Sep 2026 08:48:37 +0000 Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: enoPGVh6dC0afWI1PlKHi0HZfYWQhWME0OTGC+gQQXI=) 2: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=) 3: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Validity Not Before: Sep 19 08:48:37 2026 GMT Not After : Sep 26 08:48:37 2026 GMT Subject: CN=6aae4c66-c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:e0:0f:8b:7c:29:b4:68:ee:cb:77:52:6d: 90:66:c2:60:70:b4:f0:b7:21:95:8f:63:ba:cf:28: 9e:fc:69:69:06:e9:01:e6:9b:3b:8d:20:b1:4e:c8: f4:15:46:e2:22:7e:cd:64:5b:16:d5:aa:0d:1d:a3: 78:84:a3:be:12:3e:da:ee:08:cc:e2:96:d5:32:e1: dc:6d:da:fa:30:24:ca:fd:be:50:a3:29:f5:db:23: 52:51:63:e5:54:e8:51:19:b9:42:a6:01:41:b1:d0: c8:9e:9b:41:4e:91:a9:7f:35:b7:3e:16:b1:03:8f: 95:04:23:f5:5f:75:f1:6d:51:f4:93:bb:e0:80:df: dd:42:6a:04:45:93:9b:b1:b9:a1:a7:1c:be:96:6d: 57:ed:b4:28:11:52:1c:2d:2e:9a:16:4c:63:48:10: 42:64:86:46:9c:70:19:84:94:60:5a:1b:a4:a6:f4: db:a9:23:d4:c5:17:82:36:89:65:ad:a2:31:3f:e8: 58:85:47:51:da:6f:61:b0:f4:36:46:9c:d9:00:52: a8:b8:ce:c1:31:91:e4:63:85:e4:08:81:32:c8:75: cc:f3:07:63:fd:92:95:f8:67:50:79:e8:e6:d5:90: 90:15:ee:8c:df:89:b0:fd:af:61:97:1b:02:39:2c: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BB:71:E3:75:9F:4C:70:49:1E:A5:3A:C5:B9:4C:15:E6:98:DF:9A X509v3 Authority Key Identifier: keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:dd:05:a2:39:c8:99:ce:c6:87:38:7c:24:e1:0e:f0:92:ed: b0:3f:c0:d0:d4:b5:e4:0a:d5:9c:04:1e:3a:07:1a:f3:04:42: 71:d5:9e:fb:37:57:c8:ea:f8:28:8a:62:90:7b:e7:b9:40:af: 98:8d:d7:c8:e8:f1:53:27:db:98:d0:72:09:6d:1d:d8:1f:e6: 2e:46:c8:f8:a3:e6:34:d0:e4:f7:82:54:a7:0e:a6:3f:8d:13: 87:6f:90:d3:4d:82:f0:4a:a1:d2:4d:b3:75:95:61:93:c4:90: 72:3c:fd:8b:df:51:a4:a0:7d:4f:d5:84:ee:17:d9:2e:3f:61: cc:40:2d:c9:9a:e4:e6:3a:b9:ce:b5:f9:7a:74:4b:50:2b:4e: 96:4c:c8:d1:16:84:48:6e:83:39:62:2c:54:14:37:4a:13:cd: 0d:e1:d4:1a:b4:a0:a2:3a:14:ac:5f:fa:b8:ab:88:c8:1f:83: 08:65:17:69:46:c5:84:2e:51:e9:e9:6f:cc:6e:12:e2:22:8e: 64:84:b9:b6:ee:94:b4:ae:ee:5d:bb:16:e7:43:8d:a5:a7:e8: d4:c7:0e:f0:c1:61:52:98:5b:6b:2e:02:dc:80:16:00:1f:bd: 8a:14:ef:2e:57:5b:6e:02:bb:44:b6:b3:01:b0:0f:1f:48:27: 2f:42:86:b8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjU2NDExMC8GA1UEBRMoNkQ5NDgwQ0YzMjg0RDAwMkI1OTFGNUUyMURCMTEyMDk3 RkNFNzBCMTAeFw0yNjA5MTkwODQ4MzdaFw0yNjA5MjYwODQ4MzdaMBgxFjAUBgNV BAMTDTZhYWU0YzY2LWMwM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKP+APi3wptGjuy3dSbZBmwmBwtPC3IZWPY7rPKJ78aWkG6QHmmzuNILFOyPQV RuIifs1kWxbVqg0do3iEo74SPtruCMziltUy4dxt2vowJMr9vlCjKfXbI1JRY+VU 6FEZuUKmAUGx0Miem0FOkal/Nbc+FrEDj5UEI/VfdfFtUfSTu+CA391CagRFk5ux uaGnHL6WbVfttCgRUhwtLpoWTGNIEEJkhkaccBmElGBaG6Sm9NupI9TFF4I2iWWt ojE/6FiFR1Hab2Gw9DZGnNkAUqi4zsExkeRjheQIgTLIdczzB2P9kpX4Z1B56ObV kJAV7ozfibD9r2GXGwI5LP3bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBbtx43Wf THBJHqU6xblMFeaY35owHwYDVR0jBBgwFoAUbZSAzzKE0AK1kfXiHbESCX/OcLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCNTY0L0E4NzVEMDBBN0E0 OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFLMWtmWGlIYkVTQ1hfT2NM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpTQXp6S0UwQUsxa2ZYaUhiRVNDWF9PY0xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC NTY0L0E4NzVEMDBBN0E0OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFL MWtmWGlIYkVTQ1hfT2NMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC73QWiOciZzsaHOHwk4Q7wku2wP8DQ1LXkCtWcBB46BxrzBEJx1Z77N1fI6vgo imKQe+e5QK+YjdfI6PFTJ9uY0HIJbR3YH+YuRsj4o+Y00OT3glSnDqY/jROHb5DT TYLwSqHSTbN1lWGTxJByPP2L31GkoH1P1YTuF9kuP2HMQC3JmuTmOrnOtfl6dEtQ K06WTMjRFoRIboM5YixUFDdKE80N4dQatKCiOhSsX/q4q4jIH4MIZRdpRsWELlHp 6W/MbhLiIo5khLm27pS0ru5duxbnQ42lp+jUxw7wwWFSmFtrLgLcgBYAH72KFO8u V1tuArtEtrMBsA8fSCcvQoa4 -----END CERTIFICATE-----Generated at Mon Sep 21 03:38:54 2026 by rpki-client