$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: zgz3omu5b8bDz7rxFQSt301AwoPe09EKvteVnvSFpHg= Subject key identifier: 85:D4:CE:A7:DD:BB:71:30:56:D6:11:3A:BF:4A:1C:5C:EE:BC:88:85 Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: CF Signing time: Fri 17 Apr 2026 06:29:21 +0000 Manifest this update: Fri 17 Apr 2026 06:29:21 +0000 Manifest next update: Fri 24 Apr 2026 06:29:21 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: 6usZ3xXNos9pxIvduPRVPalbbqhFqGmmwCfRw1MTJ28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Apr 17 06:29:21 2026 GMT Not After : Apr 24 06:29:21 2026 GMT Subject: CN=69e1d341-dda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:f0:df:ed:06:62:df:3e:96:1f:48:d1:97: 5f:08:b2:f8:88:5e:7f:39:71:d4:33:27:c9:a6:b9: 94:92:4b:77:8c:54:cc:99:39:64:fc:30:34:c7:9d: 0b:95:02:51:2f:20:a3:25:61:a3:e8:d9:57:52:04: 49:6f:9e:aa:6b:8c:6a:f3:d8:be:a2:e0:c0:d0:0e: 8b:d3:67:33:95:4f:5d:9d:51:1b:a6:de:20:34:a9: 8e:31:ac:06:c6:d4:67:98:88:0e:8c:2d:59:1e:31: 49:1c:fc:18:74:b0:de:42:21:5c:02:c9:2b:ff:b6: bd:7b:2a:95:4f:9b:71:d7:c0:37:ea:bb:5f:b4:8f: d6:41:f4:6a:12:ec:45:0c:19:97:9d:36:60:62:83: 74:e3:1c:d2:1d:30:28:9b:e1:c9:43:f1:d5:d2:df: f3:a4:b8:83:82:14:a5:33:d8:b6:32:af:4b:3e:e0: a1:88:01:4a:0a:30:ff:a4:e6:6a:1d:c2:a1:fc:93: 1c:30:b4:c5:be:e4:e2:d6:b4:a7:b9:c1:b7:09:8f: b2:e6:eb:22:21:ac:40:ef:f4:a3:3b:7b:b0:47:9a: bf:89:de:16:6d:2e:5b:bd:90:0e:b7:d4:ed:1e:55: 53:78:7f:c5:f1:f8:d9:31:f2:76:2f:ac:50:af:f8: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:CE:A7:DD:BB:71:30:56:D6:11:3A:BF:4A:1C:5C:EE:BC:88:85 X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:47:03:73:f4:e9:17:1c:b2:bd:ee:5e:f7:3f:e3:09:6e:38: 00:49:da:a6:2e:50:fc:d5:9d:8c:50:fa:33:f5:db:a4:ea:70: 53:14:5c:6c:13:94:09:d3:ff:78:32:7d:d5:e6:00:e0:fd:d7: 31:2e:ea:ea:dd:17:9b:4e:c1:a6:15:42:05:cd:39:2c:c0:8f: df:15:6f:43:86:29:3e:11:a0:53:8f:b7:74:62:15:82:fb:8f: 8d:c7:1d:40:5a:5c:02:0d:47:c9:8a:86:9a:98:55:5b:1d:e8: b8:48:b0:0a:83:9d:b3:93:10:6a:01:29:97:a4:81:c1:97:e2: 47:88:64:05:4d:11:d6:a1:53:82:09:ad:51:ac:61:b2:51:7e: ae:88:0c:6e:41:e3:7e:f5:79:30:0c:93:46:3d:6d:fa:bd:00: 60:47:13:b3:fd:95:19:48:4d:6c:59:82:6c:62:5d:57:47:35: e9:81:50:b1:54:ee:65:fb:a6:00:98:e4:2c:8c:10:2a:c1:09: 41:02:dc:0b:d0:4e:85:87:a2:7c:46:ed:94:ee:8c:f6:55:f7: 28:e0:35:3f:9a:33:0d:ab:4f:da:29:0b:7d:73:44:a9:98:bb: f2:c9:b5:44:04:4e:3d:1f:be:57:58:06:ed:da:c9:b8:69:6a: 92:0a:26:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5 QzFBQzMyMjEwHhcNMjYwNDE3MDYyOTIxWhcNMjYwNDI0MDYyOTIxWjAYMRYwFAYD VQQDEw02OWUxZDM0MS1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBbw3+0GYt8+lh9I0ZdfCLL4iF5/OXHUMyfJprmUkkt3jFTMmTlk/DA0x50L lQJRLyCjJWGj6NlXUgRJb56qa4xq89i+ouDA0A6L02czlU9dnVEbpt4gNKmOMawG xtRnmIgOjC1ZHjFJHPwYdLDeQiFcAskr/7a9eyqVT5tx18A36rtftI/WQfRqEuxF DBmXnTZgYoN04xzSHTAom+HJQ/HV0t/zpLiDghSlM9i2Mq9LPuChiAFKCjD/pOZq HcKh/JMcMLTFvuTi1rSnucG3CY+y5usiIaxA7/SjO3uwR5q/id4WbS5bvZAOt9Tt HlVTeH/F8fjZMfJ2L6xQr/hdVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXUzqfd u3EwVtYROr9KHFzuvIiFMB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn ZkE3NHVyajMzQnljR3NNaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtkcDc/TpFxyyve5e9z/jCW44AEnapi5Q/NWdjFD6M/XbpOpwUxRcbBOUCdP/ eDJ91eYA4P3XMS7q6t0Xm07BphVCBc05LMCP3xVvQ4YpPhGgU4+3dGIVgvuPjccd QFpcAg1HyYqGmphVWx3ouEiwCoOds5MQagEpl6SBwZfiR4hkBU0R1qFTggmtUaxh slF+rogMbkHjfvV5MAyTRj1t+r0AYEcTs/2VGUhNbFmCbGJdV0c16YFQsVTuZfum AJjkLIwQKsEJQQLcC9BOhYeifEbtlO6M9lX3KOA1P5ozDatP2ikLfXNEqZi78sm1 RAROPR++V1gG7drJuGlqkgomsQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:06 2026 by rpki-client