$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: L1QzxGN3C8ZukUp4yvLygYsvW3Z2dH8W8gusnB79Pds= Subject key identifier: A9:F3:F9:8E:70:09:53:8F:AD:4E:C6:D1:FA:CE:32:6C:01:81:E8:71 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: 01ED Signing time: Mon 21 Sep 2026 03:24:05 +0000 Manifest this update: Mon 21 Sep 2026 03:24:05 +0000 Manifest next update: Mon 28 Sep 2026 03:24:05 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: pXLmcJhG8/exLup9PTQKApP+fppCNxXXxIrfas7eo5s=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: b/pfyAz5rp6mzw6WWGb7CmVVosPd7X9N4rdBir+XR2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: Sep 21 03:24:05 2026 GMT Not After : Sep 28 03:24:05 2026 GMT Subject: CN=6ab0a355-cd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:89:32:f9:61:8b:64:16:ad:9c:94:b0:e3: 84:a8:20:51:2c:3c:08:75:2d:94:46:61:88:5c:cf: 83:85:61:7a:48:c1:6f:f2:67:d6:a4:99:7d:ff:17: 37:aa:95:d7:e7:bd:b5:1f:55:6e:1c:42:ec:8b:03: 58:cd:c5:25:6d:17:93:8b:e6:d1:0c:cb:9d:5e:a2: b7:ce:38:c3:f7:4a:d7:51:fe:44:e5:90:55:e0:cf: 74:03:d4:e2:60:00:23:13:6a:35:7d:82:65:2c:aa: 44:ac:99:c8:59:d9:71:e5:42:a5:1a:f0:ff:7b:9b: df:63:19:22:ff:b9:57:8e:3e:63:50:8b:d7:c9:f3: d7:9b:62:a5:2e:34:12:cf:dd:55:b6:2b:86:8b:ab: 60:d4:bf:22:3d:02:21:78:19:54:65:89:01:93:9d: 81:99:53:cf:72:ac:38:62:38:75:9d:cc:ad:03:6e: 04:35:84:63:f5:01:39:0d:16:91:dc:26:c0:26:21: 63:cd:ff:24:bd:97:89:c6:d5:4b:16:c3:ab:aa:3a: d7:b8:a7:d0:81:1e:82:7d:ef:d3:bf:da:d0:ae:8f: 66:55:bf:a2:97:00:60:30:05:d9:09:7f:d8:7e:4b: cf:33:53:b1:51:da:94:1a:59:fc:e1:a2:88:77:ea: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:F9:8E:70:09:53:8F:AD:4E:C6:D1:FA:CE:32:6C:01:81:E8:71 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ce:93:47:c3:72:e8:ef:fa:0a:64:46:68:75:65:c4:21:73: fe:a6:c4:3f:a4:0e:cb:1a:50:1b:8a:f7:81:67:d0:55:fc:14: e6:a8:2e:bf:0e:56:b9:a6:f8:4b:d4:0c:94:06:13:97:73:e8: 47:ef:64:e9:18:ed:a4:de:71:5b:3a:21:7f:fc:80:80:77:bb: 67:3d:bd:05:e0:69:1e:3f:93:ee:12:c2:11:ab:c0:a5:fe:0c: af:33:d4:09:6e:e0:66:0e:0c:e5:c2:0f:f4:8a:86:83:de:81: 45:4c:3f:e8:77:d5:83:47:29:a2:74:a6:03:63:3a:32:58:01: 34:71:45:a6:80:32:32:4a:1d:8d:88:83:33:95:ee:ee:16:35: ac:57:cd:81:21:84:03:21:82:80:5b:32:77:8b:5f:56:21:50: e1:21:22:cf:5f:83:d2:f1:27:1d:c5:3c:eb:e8:1e:bc:28:71: 21:7a:5d:ad:1a:78:f1:c7:4d:40:65:e4:6d:6e:5b:60:69:64: ea:54:48:36:e3:52:a4:9a:53:23:9e:32:75:95:2a:f3:e0:c8: 24:2c:66:10:ac:a4:9d:0b:de:69:f0:d6:21:a2:d2:13:ae:d7: 39:09:2d:36:50:c4:d9:d7:52:78:7f:50:e0:f3:f6:9d:ac:0a: 58:90:71:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjYwOTIxMDMyNDA1WhcNMjYwOTI4MDMyNDA1WjAYMRYwFAYD VQQDEw02YWIwYTM1NS1jZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyuJMvlhi2QWrZyUsOOEqCBRLDwIdS2URmGIXM+DhWF6SMFv8mfWpJl9/xc3 qpXX5721H1VuHELsiwNYzcUlbReTi+bRDMudXqK3zjjD90rXUf5E5ZBV4M90A9Ti YAAjE2o1fYJlLKpErJnIWdlx5UKlGvD/e5vfYxki/7lXjj5jUIvXyfPXm2KlLjQS z91VtiuGi6tg1L8iPQIheBlUZYkBk52BmVPPcqw4Yjh1ncytA24ENYRj9QE5DRaR 3CbAJiFjzf8kvZeJxtVLFsOrqjrXuKfQgR6Cfe/Tv9rQro9mVb+ilwBgMAXZCX/Y fkvPM1OxUdqUGln84aKId+rHpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnz+Y5w CVOPrU7G0frOMmwBgehxMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx dEt1cW50SnFPcHRHT1dCYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUc6TR8Ny6O/6CmRGaHVlxCFz/qbEP6QOyxpQG4r3gWfQVfwU5qguvw5Wuab4 S9QMlAYTl3PoR+9k6RjtpN5xWzohf/yAgHe7Zz29BeBpHj+T7hLCEavApf4MrzPU CW7gZg4M5cIP9IqGg96BRUw/6HfVg0cponSmA2M6MlgBNHFFpoAyMkodjYiDM5Xu 7hY1rFfNgSGEAyGCgFsyd4tfViFQ4SEiz1+D0vEnHcU86+gevChxIXpdrRp48cdN QGXkbW5bYGlk6lRINuNSpJpTI54ydZUq8+DIJCxmEKyknQveafDWIaLSE67XOQkt NlDE2ddSeH9Q4PP2nawKWJBx5w== -----END CERTIFICATE-----Generated at Tue Sep 22 05:55:26 2026 by rpki-client