$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: 8kDG8oyt7vVKzFD0wM9MHWfb7A7qO/kjRYb0a8ldq+4= Subject key identifier: 30:29:2E:A5:BB:7E:B7:38:35:B4:95:9F:14:AB:58:57:4B:D4:44:17 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0C8B Signing time: Fri 12 Jun 2026 18:36:11 +0000 Manifest this update: Fri 12 Jun 2026 18:36:11 +0000 Manifest next update: Fri 19 Jun 2026 18:36:11 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: +vyAFrnl1s5FABTfVdCgJQBo/SxIGN9hFFSHwzvWoFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Jun 12 18:36:11 2026 GMT Not After : Jun 19 18:36:11 2026 GMT Subject: CN=6a2c519b-2e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:e1:88:cb:bb:e4:24:97:98:27:3c:4d:fc: 80:6e:2e:7a:78:c1:d5:c3:cc:1f:a9:10:09:5a:e8: 1f:00:77:ed:19:88:9b:36:0c:e6:98:d1:15:f8:66: c0:d8:13:93:18:be:5c:d8:eb:28:f2:93:8c:98:bf: 77:75:3a:2c:36:d5:03:1d:e9:75:77:88:4c:1a:86: f2:85:ea:9f:5f:a8:e0:ff:56:92:0b:72:ec:f5:3a: a1:42:02:96:a8:53:42:dc:1c:c5:bf:97:ff:5b:1a: c1:59:ed:1a:f1:bf:da:35:1e:27:00:e8:ed:3a:fb: 83:04:b0:8b:18:3d:b2:a2:4d:1b:08:9d:a6:f3:ab: 74:28:88:90:28:13:23:85:ca:8f:da:ad:af:44:d7: 91:64:e3:3e:2e:b9:93:da:07:9b:f6:8a:d7:a5:3c: 1b:c8:68:d9:af:a0:f7:45:e2:56:5c:ff:69:1b:96: 35:af:19:1e:83:49:cb:0b:9a:cf:05:50:a0:6d:7b: 40:52:ff:03:dc:7b:e3:aa:3e:ae:cc:8b:1c:a8:58: 7a:b2:f3:99:89:2f:83:05:87:e6:98:63:03:02:7d: 5e:72:ec:e4:c8:dc:37:52:44:44:20:1f:41:ec:72: ae:62:2f:47:fa:01:c1:89:88:d1:54:a5:f4:49:a4: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:29:2E:A5:BB:7E:B7:38:35:B4:95:9F:14:AB:58:57:4B:D4:44:17 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:18:c2:7a:99:ed:a9:b0:9a:91:7e:dc:c6:f0:76:e4:e3:98: fb:08:c2:cd:4b:e3:41:c5:6c:1a:7f:41:3d:51:e3:43:d5:18: 9f:e8:19:60:bd:8b:95:0f:90:d2:95:5f:70:5c:44:e5:2b:ac: df:ab:67:bc:83:c8:29:9e:98:81:01:fd:a0:95:67:e6:da:fb: 99:cc:b3:c0:b8:f8:e4:a6:28:30:22:e1:a7:f0:b4:ba:d7:40: 0a:c9:b1:f7:8d:da:88:9f:33:39:7c:62:de:32:8e:98:94:9b: 50:a7:db:86:50:4f:5a:3c:ce:e0:7a:11:e2:c5:a6:c6:80:b6: 6c:9e:f1:43:40:b7:bd:e8:79:ea:f8:c1:62:96:5e:75:6f:3f: b3:13:ff:fa:ac:24:07:94:96:1b:e6:bc:dc:79:6d:a0:45:8a: ef:77:46:67:48:3e:8b:ab:44:99:38:41:f1:71:47:1c:a2:85: b4:ee:ef:1a:b7:77:a3:22:e3:91:78:79:19:8d:ea:90:8f:c8: 6f:98:c4:12:c6:29:97:1b:ae:49:eb:43:a1:3c:66:50:09:17: d0:25:02:a8:6c:fc:51:ff:aa:f9:09:56:7b:ad:84:df:22:e3: 43:41:d6:62:50:9f:c1:e8:f2:4d:7a:b0:6a:e3:62:61:f4:3c: f7:eb:0c:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjYwNjEyMTgzNjExWhcNMjYwNjE5MTgzNjExWjAYMRYwFAYD VQQDEw02YTJjNTE5Yi0yZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGbhiMu75CSXmCc8TfyAbi56eMHVw8wfqRAJWugfAHftGYibNgzmmNEV+GbA 2BOTGL5c2Oso8pOMmL93dTosNtUDHel1d4hMGobyheqfX6jg/1aSC3Ls9TqhQgKW qFNC3BzFv5f/WxrBWe0a8b/aNR4nAOjtOvuDBLCLGD2yok0bCJ2m86t0KIiQKBMj hcqP2q2vRNeRZOM+LrmT2geb9orXpTwbyGjZr6D3ReJWXP9pG5Y1rxkeg0nLC5rP BVCgbXtAUv8D3Hvjqj6uzIscqFh6svOZiS+DBYfmmGMDAn1ecuzkyNw3UkREIB9B 7HKuYi9H+gHBiYjRVKX0SaTYvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDApLqW7 frc4NbSVnxSrWFdL1EQXMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAphjCepntqbCakX7cxvB25OOY+wjCzUvjQcVsGn9BPVHjQ9UYn+gZYL2LlQ+Q 0pVfcFxE5Sus36tnvIPIKZ6YgQH9oJVn5tr7mcyzwLj45KYoMCLhp/C0utdACsmx 943aiJ8zOXxi3jKOmJSbUKfbhlBPWjzO4HoR4sWmxoC2bJ7xQ0C3veh56vjBYpZe dW8/sxP/+qwkB5SWG+a83HltoEWK73dGZ0g+i6tEmThB8XFHHKKFtO7vGrd3oyLj kXh5GY3qkI/Ib5jEEsYplxuuSetDoTxmUAkX0CUCqGz8Uf+q+QlWe62E3yLjQ0HW YlCfwejyTXqwauNiYfQ89+sM1w== -----END CERTIFICATE-----Generated at Sat Jun 13 13:57:17 2026 by rpki-client