$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: dx0R9R1XzFpzQN2EEuEvZg3b4e1vf18nP/UtztSMi2Y= Subject key identifier: D4:4B:A7:7A:8A:68:C7:4C:19:45:2C:B2:3F:7A:8E:B0:8C:83:96:EA Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 024A Signing time: Wed 17 Jun 2026 02:35:30 +0000 Manifest this update: Wed 17 Jun 2026 02:35:30 +0000 Manifest next update: Wed 24 Jun 2026 02:35:30 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: njyQwlg+EE4xDBINmmN2SfFV3A4ig2JB1s5oC0C9RiE=) 2: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=) 3: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Jun 17 02:35:30 2026 GMT Not After : Jun 24 02:35:30 2026 GMT Subject: CN=6a3207f2-cd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:77:05:06:92:b6:f3:ab:24:91:4d:28:39: d4:eb:36:d4:cf:0a:ed:51:dd:09:9f:22:0e:cf:48: 16:72:92:3c:3e:3c:23:09:bc:b2:cb:86:6d:18:50: 67:df:8b:19:e9:90:ce:89:7e:e6:ee:30:e5:10:58: 4c:d0:85:9e:58:ba:4a:19:fc:8a:2d:90:03:25:fd: fd:60:82:1d:83:8e:e5:8f:0d:76:b6:20:6c:51:86: b2:27:db:23:19:ba:53:9a:0c:60:24:36:5f:ac:a4: 60:18:ae:45:f4:31:31:b6:72:2f:c6:95:a5:e2:ac: a0:30:52:21:7b:77:73:59:6c:53:1c:2e:f0:00:c3: c1:de:a1:be:e1:cf:b9:69:99:98:96:ec:a5:b8:59: 21:01:88:a9:1e:f3:18:ce:6e:5f:70:e2:db:bf:d6: 05:9f:c2:d6:b9:31:fb:f0:ef:2d:5b:1b:e0:c2:18: 99:17:99:c7:1c:74:97:4a:fd:78:13:33:3b:64:9c: 52:85:4f:1c:90:4c:6c:c2:1b:25:4b:00:56:6f:32: bb:9f:72:1b:92:a6:f5:55:bd:24:54:57:de:bd:d8: c9:f3:ea:af:a9:10:38:5b:cf:67:f4:1d:0a:6a:8b: 2f:69:2e:71:3a:8a:02:92:ea:86:a6:21:6d:89:56: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:A7:7A:8A:68:C7:4C:19:45:2C:B2:3F:7A:8E:B0:8C:83:96:EA X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ec:25:9c:68:87:58:05:f2:de:f8:91:ff:97:73:57:d6:55: 59:60:79:3e:d4:1b:6d:15:e5:90:f6:4a:f7:51:67:f9:34:65: 31:02:81:c2:ea:c4:a0:db:d1:8f:67:db:ff:af:5f:77:a9:2f: 36:87:bf:60:32:47:0f:b3:bb:50:a0:6c:47:16:74:61:b2:d4: eb:40:4e:c4:3a:e0:72:1d:83:74:ef:55:d9:20:ac:05:dd:23: 34:76:11:d9:10:f5:7a:99:45:91:df:1b:17:a8:44:d0:9c:ac: a7:a2:d9:8e:6c:4a:63:d8:5f:e5:91:fb:5d:6c:f3:23:be:7a: 61:3a:7a:c5:fe:0f:3e:51:a5:41:85:0c:99:60:10:58:b7:87: 5e:3c:79:b0:ba:f8:f6:04:a5:45:e8:27:61:c2:d7:84:e5:37: 54:ab:6e:c9:a3:7e:1f:8b:ce:1d:34:62:9d:12:f2:d0:cc:3f: b1:d4:f9:f7:f1:26:53:ab:56:f6:cb:03:d7:88:45:1b:75:c9: 93:26:21:54:ee:47:6d:15:5c:db:4a:0d:83:14:11:f6:ab:ca: 93:7e:48:1b:e0:4c:ad:7c:6a:b5:82:23:a2:b9:8f:68:44:64: 5d:a0:8e:88:32:97:77:69:3a:17:b2:fb:3e:1c:27:b6:f4:80: cf:89:70:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjYwNjE3MDIzNTMwWhcNMjYwNjI0MDIzNTMwWjAYMRYwFAYD VQQDEw02YTMyMDdmMi1jZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT53BQaStvOrJJFNKDnU6zbUzwrtUd0JnyIOz0gWcpI8PjwjCbyyy4ZtGFBn 34sZ6ZDOiX7m7jDlEFhM0IWeWLpKGfyKLZADJf39YIIdg47ljw12tiBsUYayJ9sj GbpTmgxgJDZfrKRgGK5F9DExtnIvxpWl4qygMFIhe3dzWWxTHC7wAMPB3qG+4c+5 aZmYluyluFkhAYipHvMYzm5fcOLbv9YFn8LWuTH78O8tWxvgwhiZF5nHHHSXSv14 EzM7ZJxShU8ckExswhslSwBWbzK7n3Ibkqb1Vb0kVFfevdjJ8+qvqRA4W89n9B0K aosvaS5xOooCkuqGpiFtiVbBNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRLp3qK aMdMGUUssj96jrCMg5bqMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApOwlnGiHWAXy3viR/5dzV9ZVWWB5PtQbbRXlkPZK91Fn+TRlMQKBwurEoNvR j2fb/69fd6kvNoe/YDJHD7O7UKBsRxZ0YbLU60BOxDrgch2DdO9V2SCsBd0jNHYR 2RD1eplFkd8bF6hE0Jysp6LZjmxKY9hf5ZH7XWzzI756YTp6xf4PPlGlQYUMmWAQ WLeHXjx5sLr49gSlRegnYcLXhOU3VKtuyaN+H4vOHTRinRLy0Mw/sdT59/EmU6tW 9ssD14hFG3XJkyYhVO5HbRVc20oNgxQR9qvKk35IG+BMrXxqtYIjormPaERkXaCO iDKXd2k6F7L7PhwntvSAz4lwQA== -----END CERTIFICATE-----Generated at Wed Jun 17 13:42:42 2026 by rpki-client