$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: I5DYLVMYfTRR2lp2rYG5xqXXEwggrr0NQblzgTVz/h0= Subject key identifier: 17:C6:02:7D:5B:E6:99:75:76:92:F7:6E:95:C0:78:BE:DA:02:C9:31 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0CA2 Signing time: Tue 28 Jul 2026 18:44:56 +0000 Manifest this update: Tue 28 Jul 2026 18:44:55 +0000 Manifest next update: Tue 04 Aug 2026 18:44:55 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: hqGNnmx3/qOkxnjGn546xGXqVf2mFExXw1S3VuMGzXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Jul 28 18:44:55 2026 GMT Not After : Aug 4 18:44:55 2026 GMT Subject: CN=6a68f8a8-a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:f8:ca:d2:4d:87:8c:1c:c3:6c:77:c6:da: 0e:72:3b:37:26:44:08:aa:d2:f3:59:7b:dc:5b:89: ba:59:b9:c5:37:c2:dd:a3:b5:73:f1:c2:3a:25:d9: 8e:1b:b1:74:d3:57:30:3c:d7:a0:06:35:15:15:fe: 75:b9:01:09:25:35:b1:7a:f9:d9:6a:f5:50:08:a6: 37:ab:f6:ed:ba:08:fc:4d:e7:58:6d:99:31:6a:04: 26:21:01:c2:df:0a:1b:42:80:5a:e7:b0:9d:a1:5d: aa:56:ea:9e:ac:96:a9:e5:6a:f6:da:73:01:a0:64: 99:be:84:e8:2e:43:e7:9c:de:a9:36:42:fe:8d:87: b8:8d:d6:2b:dc:1e:c5:2a:2f:01:af:de:a4:72:69: 7e:79:5e:8e:80:67:f8:84:5a:68:91:f1:9f:92:93: 69:4d:53:ac:6e:f3:2e:a5:5a:bf:2c:11:91:35:f7: 8f:1b:8d:11:8d:3d:95:dd:6e:72:45:22:ef:06:97: f2:98:ad:79:d6:b0:53:19:7e:f7:54:15:32:17:5f: b9:ba:07:0c:aa:c3:53:75:df:91:d1:f7:a4:3b:4f: dd:09:2f:73:76:b8:52:6c:96:b5:83:f1:64:8f:b9: 7f:b6:75:da:ab:83:dd:21:2b:66:72:68:8b:34:47: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:02:7D:5B:E6:99:75:76:92:F7:6E:95:C0:78:BE:DA:02:C9:31 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4d:ac:3f:39:73:03:a4:60:89:aa:dc:8a:6f:5e:c8:d5:c5: 7f:0f:1c:dc:ef:51:0c:4f:21:58:27:fa:2c:30:88:36:bd:62: 5a:63:8f:0e:df:fe:dd:ee:9e:cf:49:01:8d:30:0c:4d:c2:78: 49:ca:8a:82:e0:b3:ce:52:32:03:37:cb:b3:b3:bf:d9:c5:06: 94:e9:66:7c:e3:ad:e3:84:87:d4:b4:f6:2d:f1:f4:50:36:c7: 25:6d:b2:95:7b:17:f4:26:f2:d8:30:11:80:a7:ff:0e:6d:48: b0:1a:07:3a:22:84:5d:70:a5:53:99:9c:54:d8:05:0b:32:e8: 50:c6:d2:63:71:05:6c:a5:73:3f:79:8b:d5:ca:1b:36:ce:cb: 1e:a6:99:f9:12:8f:cc:46:f6:0a:14:fe:e3:37:ba:7c:b1:23: d0:a0:47:82:76:4b:d1:10:95:a7:af:30:92:91:86:0c:36:dc: 0b:b4:26:8f:89:b4:fb:9f:2f:cd:ef:30:79:22:3f:3c:68:da: 2a:d6:b5:66:77:6f:fd:8b:df:4f:51:95:17:91:73:d6:fc:53: 80:ad:06:dc:89:75:b7:ad:98:5c:59:f8:01:6b:d1:bc:2b:c4: 9d:ee:af:9d:99:72:32:0d:d9:20:58:d0:f9:56:c8:9b:e8:a6: 68:bc:09:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjYwNzI4MTg0NDU1WhcNMjYwODA0MTg0NDU1WjAYMRYwFAYD VQQDEw02YTY4ZjhhOC1hMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAb4ytJNh4wcw2x3xtoOcjs3JkQIqtLzWXvcW4m6WbnFN8Ldo7Vz8cI6JdmO G7F001cwPNegBjUVFf51uQEJJTWxevnZavVQCKY3q/btugj8TedYbZkxagQmIQHC 3wobQoBa57CdoV2qVuqerJap5Wr22nMBoGSZvoToLkPnnN6pNkL+jYe4jdYr3B7F Ki8Br96kcml+eV6OgGf4hFpokfGfkpNpTVOsbvMupVq/LBGRNfePG40RjT2V3W5y RSLvBpfymK151rBTGX73VBUyF1+5ugcMqsNTdd+R0fekO0/dCS9zdrhSbJa1g/Fk j7l/tnXaq4PdIStmcmiLNEdWrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfGAn1b 5pl1dpL3bpXAeL7aAskxMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPE2sPzlzA6Rgiarcim9eyNXFfw8c3O9RDE8hWCf6LDCINr1iWmOPDt/+3e6e z0kBjTAMTcJ4ScqKguCzzlIyAzfLs7O/2cUGlOlmfOOt44SH1LT2LfH0UDbHJW2y lXsX9Cby2DARgKf/Dm1IsBoHOiKEXXClU5mcVNgFCzLoUMbSY3EFbKVzP3mL1cob Ns7LHqaZ+RKPzEb2ChT+4ze6fLEj0KBHgnZL0RCVp68wkpGGDDbcC7Qmj4m0+58v ze8weSI/PGjaKta1Zndv/YvfT1GVF5Fz1vxTgK0G3Il1t62YXFn4AWvRvCvEne6v nZlyMg3ZIFjQ+VbIm+imaLwJjw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:10:44 2026 by rpki-client