$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft (raw, json) Hash identifier: B9qNijImzlT/Cf5GjeTvwzcMHpO0Wsw9LMfrGUrSHhk= Subject key identifier: 0E:8E:63:1D:A5:DF:9E:1B:58:B7:6F:12:F0:D8:E1:89:25:BF:43:43 Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft Manifest number: 7A Signing time: Mon 27 Jul 2026 10:05:44 +0000 Manifest this update: Mon 27 Jul 2026 10:05:43 +0000 Manifest next update: Mon 03 Aug 2026 10:05:43 +0000 Files and hashes: 1: BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl (hash: pbfXiQbQSdxmDsXbihzHds9rkgH2WrXtMfQemSe/e64=) 2: 8FEAA0421D1A11F19DA5ED77103D8C67.roa (hash: dEk3degjNLUiA3kpAMrU5suBNlrDXd9oTzhhHbGgPc0=) 3: 8EE78F481D1A11F19DA5ED77103D8C67.roa (hash: FtCatlAW9Re17rwqCuc7Yn9ywx696GppCQCdjrmZAlM=) 4: 9C1B70121D1A11F1A275F377103D8C67.roa (hash: y0kiR2bauMVDFaqNZbNEH9+p4Ybcw1shQXfdJNNrqvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Validity Not Before: Jul 27 10:05:43 2026 GMT Not After : Aug 3 10:05:43 2026 GMT Subject: CN=6a672d78-2770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:0d:5f:97:a7:e7:ae:19:a7:d2:06:d6:4a: 5c:36:9c:ae:23:06:31:1d:7f:f9:58:a2:fc:55:47: 0c:19:ba:37:66:2c:3a:85:40:67:b9:6f:56:de:de: e6:d5:2a:14:bd:88:10:30:f9:ba:d3:e8:61:c4:7e: 49:81:4f:25:09:fb:1a:ea:59:f7:a4:5e:ce:ef:1d: f3:c3:b5:26:29:29:7f:8e:81:05:d5:1a:e7:8c:3d: 3a:da:40:f4:1d:3f:a3:57:fe:b1:27:74:d6:05:20: fb:b0:be:6d:fe:b1:45:b6:4d:96:63:ed:b4:e6:16: 72:78:67:f6:93:26:e5:4e:a4:d7:5d:f8:cc:8c:4b: 53:fd:c7:cd:69:a3:60:2c:c8:31:90:4c:85:2f:9f: b1:05:ad:ac:8a:16:01:70:3f:c2:67:42:12:26:10: 82:aa:e5:d0:3d:aa:4e:61:4c:1e:96:ec:ec:f0:36: b1:f6:31:89:00:96:3e:57:a3:e2:4e:46:37:30:45: 74:1b:c5:33:52:3f:8f:83:ae:e9:f1:cc:ed:dc:ef: 0d:b6:ee:d4:c9:f7:10:74:88:3b:73:2c:0a:a3:b2: d0:5e:88:db:28:3d:6f:ab:2e:f4:d6:96:bb:bd:78: 22:f8:78:a9:cc:7a:81:ca:6d:74:33:08:9e:03:19: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:63:1D:A5:DF:9E:1B:58:B7:6F:12:F0:D8:E1:89:25:BF:43:43 X509v3 Authority Key Identifier: keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:41:cc:c0:79:bf:e4:42:3d:1c:11:ed:39:63:5d:f1:94:44: d2:2b:58:f3:d8:56:34:c0:23:5f:13:d2:c3:01:83:37:90:4c: 14:e6:df:e4:ea:28:72:9d:eb:3a:1b:eb:15:af:ac:79:45:aa: 95:35:20:14:93:5d:75:74:c9:03:52:a9:c0:18:65:0f:7b:ad: d3:1f:79:03:3f:b8:39:5e:19:9d:b3:6d:f0:29:0c:2c:90:a1: 82:ec:b7:40:35:f9:b3:33:53:bd:9c:96:21:aa:bf:8e:93:01: 51:1c:bf:0f:97:74:b1:a5:6f:71:f8:6c:33:ab:7a:f7:cb:e1: 13:94:73:6d:33:1f:07:9c:c9:93:14:25:a8:13:6f:14:14:c2: 2b:99:96:c6:af:32:3a:5e:9f:5f:fd:97:8c:df:02:ea:b1:c0: ed:a5:60:eb:14:23:62:7a:5e:31:bd:53:b0:77:32:5b:9f:c3: 08:d4:86:87:89:7e:cc:7c:3c:85:82:0f:5a:23:5b:7a:87:9b: b7:5d:24:12:d1:f8:87:d3:12:64:8e:ed:d6:80:b1:2c:43:dc: 10:c9:fe:66:1b:9b:cc:b6:6b:d9:94:b6:f8:65:7a:ad:d3:6b: b5:92:72:95:70:69:21:27:c4:17:ec:f8:b4:b1:02:80:ba:88: 7d:6b:c5:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDNjExMTAvBgNVBAUTKDA0NzQ5MzdFNzlBOUQ2NzMzNTNFQUJEODJDNEI4NDI0 QjZDNjgzMEQwHhcNMjYwNzI3MTAwNTQzWhcNMjYwODAzMTAwNTQzWjAYMRYwFAYD VQQDEw02YTY3MmQ3OC0yNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps4NX5en564Zp9IG1kpcNpyuIwYxHX/5WKL8VUcMGbo3Ziw6hUBnuW9W3t7m 1SoUvYgQMPm60+hhxH5JgU8lCfsa6ln3pF7O7x3zw7UmKSl/joEF1RrnjD062kD0 HT+jV/6xJ3TWBSD7sL5t/rFFtk2WY+205hZyeGf2kyblTqTXXfjMjEtT/cfNaaNg LMgxkEyFL5+xBa2sihYBcD/CZ0ISJhCCquXQPapOYUweluzs8Dax9jGJAJY+V6Pi TkY3MEV0G8UzUj+Pg67p8czt3O8Ntu7UyfcQdIg7cywKo7LQXojbKD1vqy701pa7 vXgi+HipzHqBym10MwieAxl1OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6OYx2l 354bWLdvEvDY4Yklv0NDMB8GA1UdIwQYMBaAFAR0k355qdZzNT6r2CxLhCS2xoMN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0M2MS8zMzFEMTQxOERB M0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFuTTFQcXZZTEV1RUpMYkdn dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5tcDFu TTFQcXZZTEV1RUpMYkdndzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaEHMwHm/5EI9HBHtOWNd8ZRE0itY89hWNMAjXxPSwwGDN5BMFObf5Ooocp3r OhvrFa+seUWqlTUgFJNddXTJA1KpwBhlD3ut0x95Az+4OV4ZnbNt8CkMLJChguy3 QDX5szNTvZyWIaq/jpMBURy/D5d0saVvcfhsM6t698vhE5RzbTMfB5zJkxQlqBNv FBTCK5mWxq8yOl6fX/2XjN8C6rHA7aVg6xQjYnpeMb1TsHcyW5/DCNSGh4l+zHw8 hYIPWiNbeoebt10kEtH4h9MSZI7t1oCxLEPcEMn+ZhubzLZr2ZS2+GV6rdNrtZJy lXBpISfEF+z4tLECgLqIfWvFlA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:09 2026 by rpki-client