$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: nbnmshA0i4oVWIRBJOJKg1H0pk/xKuiVcZ+GaNNHOYA= Subject key identifier: 56:FC:2E:25:FA:C2:97:2B:4D:D4:B2:A9:91:C6:D1:C5:BD:24:8D:5A Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: 0101 Signing time: Mon 27 Jul 2026 08:14:17 +0000 Manifest this update: Mon 27 Jul 2026 08:14:16 +0000 Manifest next update: Mon 03 Aug 2026 08:14:16 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: JJJvuaftiMngLBADCRMKGT4NpeIDyDdfVjZxUE0Bs8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Jul 27 08:14:16 2026 GMT Not After : Aug 3 08:14:16 2026 GMT Subject: CN=6a671359-53f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:31:63:82:23:77:54:ef:90:a8:f4:fc:11: cb:ef:e0:8e:17:38:c8:e0:99:1c:64:9d:6a:61:4b: cc:1a:5d:0b:23:5b:bf:1e:04:f4:5d:fa:17:24:af: 09:87:2f:ed:a9:fc:49:f2:bd:f3:25:48:e9:35:a8: 16:49:7d:44:d1:2b:06:4c:45:5c:21:de:63:c2:41: 7b:7d:66:39:09:f0:42:a8:28:f6:9e:5f:79:f6:dd: 9e:e4:b0:7d:b6:e8:44:04:02:d6:c7:77:15:bf:ed: bd:91:f4:49:ef:8b:5c:43:14:82:7c:3f:46:21:aa: 32:8f:d7:ac:07:90:23:19:f4:dd:b0:cc:41:72:55: 06:24:f7:8b:ad:c6:3c:af:cb:56:e3:f9:8b:83:03: ef:90:09:fa:fc:df:ec:7d:87:eb:39:48:e0:85:3d: 93:43:c6:2c:58:50:86:22:a7:97:1c:0f:c1:75:87: 51:8a:c2:6b:71:06:86:49:2c:57:1e:70:c3:78:04: 05:24:d3:e6:fd:38:44:f2:62:63:da:34:fb:5e:6c: 75:9f:93:83:69:ca:37:41:b7:d3:1c:1e:19:4c:1b: fb:66:24:86:02:7e:37:99:42:33:81:70:4b:e3:73: 16:96:e5:d8:91:23:a1:74:4e:92:46:1f:11:ef:e4: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FC:2E:25:FA:C2:97:2B:4D:D4:B2:A9:91:C6:D1:C5:BD:24:8D:5A X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:0d:66:05:98:f3:b9:b5:90:83:17:b1:f0:8f:10:52:a8: a1:87:55:c8:a1:24:4b:8e:ef:65:71:43:91:3c:53:82:f0:b6: 16:60:de:ae:59:04:39:6f:cd:4c:a4:a1:38:34:e4:93:00:60: 22:52:5c:39:eb:42:aa:8e:4a:89:0c:cb:71:c7:11:b0:dc:fa: 34:28:4f:b3:61:ab:38:16:93:48:9a:45:de:8b:a2:51:85:11: 2b:76:08:4e:e6:1b:ff:3c:72:da:b1:c1:31:1b:97:a5:90:be: 2e:89:f4:32:f4:e8:f7:6d:73:3c:2a:a8:e1:83:cd:cc:46:0f: 75:ba:07:cb:4d:51:86:ac:8a:58:da:9e:42:e0:00:ca:2b:47: 16:56:a6:27:09:7b:ce:ff:26:b3:95:45:24:d0:0c:78:33:4a: 1e:db:88:9a:58:20:f2:fb:f0:2e:5b:08:1c:fc:0f:a3:ed:91: 50:93:33:ac:6d:ea:af:33:9f:de:60:ca:59:3d:81:1a:1d:17: da:f6:1f:3f:47:b5:db:25:44:55:2b:4f:95:d6:12:3e:e8:15: de:15:52:75:db:48:e8:82:ad:43:ea:3c:43:ac:e6:44:55:28: 5b:a0:58:c9:ab:99:bf:9e:d1:0a:69:b2:87:bd:8f:d5:a2:d6: 97:42:1a:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5 QzFBQzMyMjEwHhcNMjYwNzI3MDgxNDE2WhcNMjYwODAzMDgxNDE2WjAYMRYwFAYD VQQDEw02YTY3MTM1OS01M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA0xY4Ijd1TvkKj0/BHL7+COFzjI4JkcZJ1qYUvMGl0LI1u/HgT0XfoXJK8J hy/tqfxJ8r3zJUjpNagWSX1E0SsGTEVcId5jwkF7fWY5CfBCqCj2nl959t2e5LB9 tuhEBALWx3cVv+29kfRJ74tcQxSCfD9GIaoyj9esB5AjGfTdsMxBclUGJPeLrcY8 r8tW4/mLgwPvkAn6/N/sfYfrOUjghT2TQ8YsWFCGIqeXHA/BdYdRisJrcQaGSSxX HnDDeAQFJNPm/ThE8mJj2jT7Xmx1n5ODaco3QbfTHB4ZTBv7ZiSGAn43mUIzgXBL 43MWluXYkSOhdE6SRh8R7+RidQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb8LiX6 wpcrTdSyqZHG0cW9JI1aMB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn ZkE3NHVyajMzQnljR3NNaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuuANZgWY87m1kIMXsfCPEFKooYdVyKEkS47vZXFDkTxTgvC2FmDerlkEOW/N TKShODTkkwBgIlJcOetCqo5KiQzLcccRsNz6NChPs2GrOBaTSJpF3ouiUYURK3YI TuYb/zxy2rHBMRuXpZC+Lon0MvTo921zPCqo4YPNzEYPdboHy01RhqyKWNqeQuAA yitHFlamJwl7zv8ms5VFJNAMeDNKHtuImlgg8vvwLlsIHPwPo+2RUJMzrG3qrzOf 3mDKWT2BGh0X2vYfP0e12yVEVStPldYSPugV3hVSddtI6IKtQ+o8Q6zmRFUoW6BY yauZv57RCmmyh72P1aLWl0Iaxg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:14 2026 by rpki-client