$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: TyTg8VdjFSx+fWmN7y6eD7MmjsmaXCavFDbOSdZccdg= Subject key identifier: E7:2D:53:CB:F8:54:C3:75:5A:C7:B9:C9:8A:A7:51:80:97:06:99:5C Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 08CE Signing time: Mon 12 Oct 2026 20:38:07 +0000 Manifest this update: Mon 12 Oct 2026 20:38:06 +0000 Manifest next update: Mon 19 Oct 2026 20:38:06 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: /fvKOlu7H1+vb/HUrlWdPrLnbxPxgYao00NlJdR8NqY=) 2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: ZNyxDwULV1MeMCki7l42XiaJAP3fr52wI1B1ujKjLks=) 3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: y3+WGycVXCcxOTUDkEuLizVD4mDfYyvsBXt0rLF4sLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Oct 12 20:38:06 2026 GMT Not After : Oct 19 20:38:06 2026 GMT Subject: CN=6acd452e-ea0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:cd:2a:ae:be:03:aa:6a:c7:d5:07:a6:e8: 28:a9:c5:2e:fc:87:81:b9:5b:ba:65:e1:b7:ee:10: 86:fa:ae:3b:15:73:34:50:19:85:b5:49:a1:f2:e6: 2f:86:2e:cf:d1:6b:70:b5:7a:12:8c:2e:2a:0a:7b: 48:a7:8f:7e:ff:22:fd:b3:0c:99:f5:0e:3f:68:9c: 52:5e:c7:98:2d:7e:a3:30:40:8c:03:12:4b:00:bd: 74:19:bb:f7:1c:22:65:ef:e8:e8:9e:7d:ca:bd:10: 53:59:c3:b4:22:25:b6:d3:ea:4c:f1:47:68:50:be: f8:19:56:7e:3b:88:5e:10:6b:89:1b:55:9d:e6:5e: e3:b7:8f:17:9e:c8:49:a4:04:7b:92:e1:bf:46:18: e2:52:6c:01:a1:e5:99:fb:ce:54:78:22:a4:bd:b9: 4c:46:b8:b6:f4:da:62:a6:b9:cb:08:26:e2:e3:8a: 87:b0:4d:e2:d2:76:de:e5:64:0f:ae:7d:57:4e:87: 99:d8:f5:cf:86:7f:ee:b0:6d:49:44:d8:af:ba:74: 6b:15:ea:58:78:7e:88:9f:e2:0e:07:72:8b:f2:30: 34:ec:a7:da:65:62:9c:24:e5:d8:4b:d9:e9:db:93: 66:c1:91:d8:b1:e7:f3:2f:b3:ad:e2:9d:ff:fc:07: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2D:53:CB:F8:54:C3:75:5A:C7:B9:C9:8A:A7:51:80:97:06:99:5C X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:86:70:4c:43:46:73:ae:65:2b:7f:17:ff:7e:2c:f0:7f:5c: 5d:2e:e1:e5:b0:1f:9f:16:64:c5:f3:ef:b1:9e:28:aa:64:96: f0:8c:f6:4a:21:ee:5e:3b:96:14:fb:ac:a4:55:3d:5d:c5:e1: 20:04:6c:44:e3:a3:9e:61:69:a3:78:a3:ee:e1:b7:05:ef:67: e2:48:ff:70:eb:99:7f:64:d2:51:b7:27:0f:98:b4:97:a2:2e: c6:8e:82:9f:ff:26:28:5a:76:29:79:f7:e2:9b:d3:2d:f8:fa: 3a:65:a3:cb:0e:c6:b7:df:ae:27:a0:e7:e9:32:57:55:19:00: 5b:3c:0d:a5:bd:76:d9:ec:c7:6f:ba:a9:7e:15:b4:d2:8e:64: c1:d0:28:37:81:e7:d9:fb:b5:0c:4e:ad:76:4d:7a:09:07:c1: de:f6:3a:00:db:74:9b:0b:90:0e:59:b9:7a:1f:24:54:c0:e5: 77:a2:ed:8a:40:ee:75:7b:dd:a5:2f:b2:bc:a0:2d:8d:e0:f0: 4b:fe:c7:cc:ce:ce:f9:13:b3:71:96:6b:11:76:64:b7:84:0d: 43:70:88:bf:d3:b9:0b:68:25:54:ed:a1:ad:c6:f8:d1:62:a9: f2:ea:52:da:d5:dc:63:54:10:72:19:2a:01:f6:f3:3b:65:3a: 0d:bb:28:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjYxMDEyMjAzODA2WhcNMjYxMDE5MjAzODA2WjAYMRYwFAYD VQQDEw02YWNkNDUyZS1lYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK/NKq6+A6pqx9UHpugoqcUu/IeBuVu6ZeG37hCG+q47FXM0UBmFtUmh8uYv hi7P0WtwtXoSjC4qCntIp49+/yL9swyZ9Q4/aJxSXseYLX6jMECMAxJLAL10Gbv3 HCJl7+jonn3KvRBTWcO0IiW20+pM8UdoUL74GVZ+O4heEGuJG1Wd5l7jt48XnshJ pAR7kuG/RhjiUmwBoeWZ+85UeCKkvblMRri29NpiprnLCCbi44qHsE3i0nbe5WQP rn1XToeZ2PXPhn/usG1JRNivunRrFepYeH6In+IOB3KL8jA07KfaZWKcJOXYS9np 25NmwZHYsefzL7Ot4p3//Acc2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOctU8v4 VMN1Wse5yYqnUYCXBplcMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABYZwTENGc65lK38X/34s8H9cXS7h5bAfnxZkxfPvsZ4oqmSW8Iz2SiHuXjuW FPuspFU9XcXhIARsROOjnmFpo3ij7uG3Be9n4kj/cOuZf2TSUbcnD5i0l6Iuxo6C n/8mKFp2KXn34pvTLfj6OmWjyw7Gt9+uJ6Dn6TJXVRkAWzwNpb122ezHb7qpfhW0 0o5kwdAoN4Hn2fu1DE6tdk16CQfB3vY6ANt0mwuQDlm5eh8kVMDld6LtikDudXvd pS+yvKAtjeDwS/7HzM7O+ROzcZZrEXZkt4QNQ3CIv9O5C2glVO2hrcb40WKp8upS 2tXcY1QQchkqAfbzO2U6DbsoFQ== -----END CERTIFICATE-----Generated at Wed Oct 14 10:33:05 2026 by rpki-client