$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.mft File: bim7C57cVmcImIDqnGHc3kBa8JM.mft (raw, json) Hash identifier: hK57KB1w19EgtW6PCvetfi7fPkJ9WAr9BnXnEVS92aU= Subject key identifier: FF:04:75:8C:0B:04:C7:32:FD:72:2E:69:1D:BD:27:9B:4E:52:F9:08 Authority key identifier: 6E:29:BB:0B:9E:DC:56:67:08:98:80:EA:9C:61:DC:DE:40:5A:F0:93 Certificate issuer: /CN=A91FA8AB/serialNumber=6E29BB0B9EDC5667089880EA9C61DCDE405AF093 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bim7C57cVmcImIDqnGHc3kBa8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.mft Manifest number: 0A Signing time: Thu 05 Nov 2026 10:10:48 +0000 Manifest this update: Thu 05 Nov 2026 10:10:47 +0000 Manifest next update: Thu 12 Nov 2026 10:10:47 +0000 Files and hashes: 1: bim7C57cVmcImIDqnGHc3kBa8JM.crl (hash: UZktwImhiSZOyo/XTlqE1CEx74RmltqlvJJtFuyLLHs=) 2: 230CFA90CCE911F1B274BC67F665CEF9.roa (hash: DjeNZ2Z1LaKMRTM+3upno/VxfXAU/MmTDvh9rMzLsYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.crl rsync://rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bim7C57cVmcImIDqnGHc3kBa8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8AB, serialNumber=6E29BB0B9EDC5667089880EA9C61DCDE405AF093 Validity Not Before: Nov 5 10:10:47 2026 GMT Not After : Nov 12 10:10:47 2026 GMT Subject: CN=6aec5627-f159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:b3:21:b7:6d:d8:da:9d:f4:ed:82:66:32: 42:79:f1:5d:e5:26:62:62:83:ad:cf:28:35:9b:ea: 74:5d:a7:d5:4e:44:ce:e6:e6:f1:9f:6e:80:e3:f4: a1:07:9e:a0:6e:0a:04:97:c4:b5:a2:55:6d:8e:01: 8e:2b:58:96:27:2b:7b:71:b4:f6:fc:e7:36:d3:a2: 2c:be:57:95:91:90:e4:64:5e:92:48:c5:e3:7d:1b: cf:55:c1:30:7b:d2:b0:a9:c9:96:42:c0:7b:f6:9e: 35:0e:52:e4:24:f4:5c:69:23:84:cd:81:e7:5e:31: 6d:0d:93:78:73:21:8b:79:d5:58:66:30:86:75:1e: 11:0b:a1:03:ba:13:5d:8f:12:27:ea:e7:78:ef:8e: 75:2a:ff:e6:8d:49:f0:8a:52:17:10:31:3b:51:d9: 45:5f:a8:d5:a4:74:a9:10:48:bc:55:14:e2:bb:38: 2d:37:27:dd:06:2e:b8:6e:11:08:e7:cd:7b:35:7a: 80:a5:39:40:80:e8:92:e1:c5:86:59:27:93:7f:73: 24:78:15:ad:be:37:ac:31:6f:be:40:a6:02:3f:59: 20:77:3a:03:c3:43:87:05:a3:f3:ff:cd:d0:e7:9e: 3a:28:05:60:4d:70:b7:87:f3:dc:20:c7:2a:42:be: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:04:75:8C:0B:04:C7:32:FD:72:2E:69:1D:BD:27:9B:4E:52:F9:08 X509v3 Authority Key Identifier: keyid:6E:29:BB:0B:9E:DC:56:67:08:98:80:EA:9C:61:DC:DE:40:5A:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bim7C57cVmcImIDqnGHc3kBa8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8AB/A78FFA48CCE811F19F756448F665CEF9/bim7C57cVmcImIDqnGHc3kBa8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:b9:36:a8:aa:83:d2:a7:19:89:84:5b:7e:49:f9:b4:ef: d2:e3:ae:8c:5d:de:1d:60:22:48:6f:78:62:89:40:b9:e5:b9: 2d:16:43:ec:2a:fe:92:f2:0a:b0:c5:ed:ea:bc:47:71:70:7d: d4:bd:ad:dc:35:e3:8b:2d:75:e4:bb:da:ef:35:8a:00:4a:f4: 8e:60:39:67:9c:e5:c0:35:e1:12:a8:4e:17:7b:98:6e:3b:d0: bd:de:69:85:ea:a5:5b:37:9c:25:93:5b:a7:a8:ea:b6:a0:a2: 27:d4:83:58:1b:c4:f2:80:57:53:98:2c:05:47:f7:93:8f:d1: 47:21:67:2e:10:2f:bb:c5:a3:28:06:f2:b8:99:90:64:db:0b: 56:95:26:ae:8a:9a:1d:cb:d3:69:61:74:f8:12:c9:a3:4a:e7: d6:04:c0:ae:db:df:b5:03:2a:17:4a:19:c7:92:f2:c9:59:79: 14:61:2c:27:ca:b0:94:4c:f6:ad:92:e6:32:db:c7:de:eb:11: aa:10:35:1c:bb:85:99:5c:98:f9:92:3b:7a:73:b3:78:57:c7: 09:35:c8:fb:15:a0:3c:7f:22:ec:1e:de:18:11:22:d6:0c:06: 83:fa:e3:a0:d9:18:0f:5a:b0:f1:85:1d:02:f0:f9:f5:93:df: 2d:9d:73:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QThBQjExMC8GA1UEBRMoNkUyOUJCMEI5RURDNTY2NzA4OTg4MEVBOUM2MURDREU0 MDVBRjA5MzAeFw0yNjExMDUxMDEwNDdaFw0yNjExMTIxMDEwNDdaMBgxFjAUBgNV BAMTDTZhZWM1NjI3LWYxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiZrMht23Y2p307YJmMkJ58V3lJmJig63PKDWb6nRdp9VORM7m5vGfboDj9KEH nqBuCgSXxLWiVW2OAY4rWJYnK3txtPb85zbToiy+V5WRkORkXpJIxeN9G89VwTB7 0rCpyZZCwHv2njUOUuQk9FxpI4TNgedeMW0Nk3hzIYt51VhmMIZ1HhELoQO6E12P Eifq53jvjnUq/+aNSfCKUhcQMTtR2UVfqNWkdKkQSLxVFOK7OC03J90GLrhuEQjn zXs1eoClOUCA6JLhxYZZJ5N/cyR4Fa2+N6wxb75ApgI/WSB3OgPDQ4cFo/P/zdDn njooBWBNcLeH89wgxypCvlvjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/wR1jAsE xzL9ci5pHb0nm05S+QgwHwYDVR0jBBgwFoAUbim7C57cVmcImIDqnGHc3kBa8JMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBOEFCL0E3OEZGQTQ4Q0NF ODExRjE5Rjc1NjQ0OEY2NjVDRUY5L2JpbTdDNTdjVm1jSW1JRHFuR0hjM2tCYThK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmltN0M1N2NWbWNJbUlEcW5HSGMza0JhOEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB OEFCL0E3OEZGQTQ4Q0NFODExRjE5Rjc1NjQ0OEY2NjVDRUY5L2JpbTdDNTdjVm1j SW1JRHFuR0hjM2tCYThKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGrrk2qKqD0qcZiYRbfkn5tO/S466MXd4dYCJIb3hiiUC55bktFkPsKv6S8gqw xe3qvEdxcH3Uva3cNeOLLXXku9rvNYoASvSOYDlnnOXANeESqE4Xe5huO9C93mmF 6qVbN5wlk1unqOq2oKIn1INYG8TygFdTmCwFR/eTj9FHIWcuEC+7xaMoBvK4mZBk 2wtWlSauipody9NpYXT4EsmjSufWBMCu29+1AyoXShnHkvLJWXkUYSwnyrCUTPat kuYy28fe6xGqEDUcu4WZXJj5kjt6c7N4V8cJNcj7FaA8fyLsHt4YESLWDAaD+uOg 2RgPWrDxhR0C8Pn1k98tnXOx -----END CERTIFICATE-----Generated at Thu Nov 5 14:25:46 2026 by rpki-client