$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft File: bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json) Hash identifier: AMSafkor1R6L/EAkfuW9696LJmghgkjM3NGcDOMSa7o= Subject key identifier: DE:4B:3F:E4:B5:64:31:F7:C2:4A:E0:70:4E:36:14:CA:15:2B:19:3F Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 Certificate issuer: /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft Manifest number: 5C Signing time: Mon 27 Jul 2026 10:27:15 +0000 Manifest this update: Mon 27 Jul 2026 10:27:15 +0000 Manifest next update: Mon 03 Aug 2026 10:27:15 +0000 Files and hashes: 1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: I5RzL3dqsI0fKNnAH54YtaXTjrgg9ojUGPjXTRSVHuU=) 2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1 Validity Not Before: Jul 27 10:27:15 2026 GMT Not After : Aug 3 10:27:15 2026 GMT Subject: CN=6a673283-a69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:1c:74:6a:9e:e0:4b:23:15:a3:6e:9f:a3: b1:70:c1:1d:fe:8f:6d:f6:eb:6f:c0:c8:07:ab:1d: d8:fd:42:63:73:dc:a2:2c:3a:bb:33:49:66:2f:09: 95:58:45:8c:40:0f:64:80:fe:6f:a4:eb:e9:c7:fb: d3:78:24:13:7a:f4:cd:5a:ec:cd:e8:fd:fe:a3:23: 44:05:a0:c4:58:fc:f1:2b:8c:21:fb:46:1f:c8:a3: f9:53:80:4a:4d:42:ec:54:05:94:8e:6d:bf:83:b8: 94:60:66:33:92:12:0b:08:61:38:6b:a4:bc:bb:0e: 66:d8:3b:41:df:07:7a:02:a6:7a:cc:97:5c:29:30: d0:f0:cc:6d:fc:c9:81:27:0c:d1:32:a3:5c:ba:06: 62:5f:47:83:91:94:cf:6e:e4:90:1f:49:a7:8b:95: 6a:b8:3c:c5:f8:b6:38:5a:cb:17:7a:7a:3c:e6:a9: 5b:07:c0:9d:1a:c0:be:79:d4:71:c2:10:f8:5f:3a: 88:64:e3:ea:52:0d:fd:41:83:e4:40:99:10:02:5c: a3:da:d1:59:9d:4c:a5:30:01:37:80:06:7e:cf:8e: f8:03:0b:e6:fc:64:02:09:9d:c7:5f:e0:e1:40:a3: 76:04:9c:24:41:78:a8:5d:63:63:9a:7c:95:c2:3e: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4B:3F:E4:B5:64:31:F7:C2:4A:E0:70:4E:36:14:CA:15:2B:19:3F X509v3 Authority Key Identifier: keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2a:19:35:cd:6d:ea:67:dc:0c:64:bc:f6:da:70:47:33:b5: 3c:c2:72:49:34:72:4b:1d:ab:0e:f8:bd:e4:b3:dd:32:c4:67: 2f:87:52:57:58:72:ab:4a:a6:f3:08:fc:51:7c:d1:02:5d:ea: c9:39:c5:22:55:cf:bc:82:ff:b2:f3:b8:b3:53:24:d4:0b:de: f9:a6:1e:d4:78:a4:42:33:e8:a2:02:64:07:81:d0:cb:cf:74: 5c:5a:9e:c5:ec:59:88:aa:a6:5d:0e:b3:4b:fe:0e:3c:5b:87: 08:f6:e4:3a:fa:d0:15:d2:ff:2b:75:c2:e0:85:0d:e0:16:3e: 38:e9:51:ce:d6:68:60:68:a8:f1:fc:4d:44:2c:ac:02:0e:b2: 39:5b:36:47:18:8a:52:5a:cf:41:15:90:de:e0:4f:74:fa:a4: 14:76:9e:a5:8f:90:e7:20:73:0e:cc:72:e3:1c:2a:c8:f8:6d: 09:e1:90:13:cb:95:cf:59:63:68:25:6c:79:36:2e:c3:f3:49: a9:1f:30:0e:6d:90:34:fb:f6:46:c5:65:cc:78:69:8f:55:05: e1:20:fc:9f:ce:ca:7e:35:61:1c:57:3f:76:32:96:d1:87:de: ba:26:ce:f8:d5:83:c5:4d:8a:40:63:b2:42:47:c7:11:52:a4: 64:12:00:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMwODExMC8GA1UEBRMoNkUxNDMyNEM3RkVCOUJDODk5MkQ0QTFDM0U0NTlFODZB M0YxOEVFMTAeFw0yNjA3MjcxMDI3MTVaFw0yNjA4MDMxMDI3MTVaMBgxFjAUBgNV BAMTDTZhNjczMjgzLWE2OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCXxx0ap7gSyMVo26fo7FwwR3+j23262/AyAerHdj9QmNz3KIsOrszSWYvCZVY RYxAD2SA/m+k6+nH+9N4JBN69M1a7M3o/f6jI0QFoMRY/PErjCH7Rh/Io/lTgEpN QuxUBZSObb+DuJRgZjOSEgsIYThrpLy7DmbYO0HfB3oCpnrMl1wpMNDwzG38yYEn DNEyo1y6BmJfR4ORlM9u5JAfSaeLlWq4PMX4tjhayxd6ejzmqVsHwJ0awL551HHC EPhfOohk4+pSDf1Bg+RAmRACXKPa0VmdTKUwATeABn7PjvgDC+b8ZAIJncdf4OFA o3YEnCRBeKhdY2OafJXCPjrZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3ks/5LVk MffCSuBwTjYUyhUrGT8wHwYDVR0jBBgwFoAUbhQyTH/rm8iZLUocPkWehqPxjuEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzA4L0YzRTY1N0ZDMDAx NTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThpWkxVb2NQa1dlaHFQeGp1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmhReVRIX3JtOGlaTFVvY1BrV2VocVB4anVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QzA4L0YzRTY1N0ZDMDAxNTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThp WkxVb2NQa1dlaHFQeGp1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANKhk1zW3qZ9wMZLz22nBHM7U8wnJJNHJLHasO+L3ks90yxGcvh1JXWHKrSqbz CPxRfNECXerJOcUiVc+8gv+y87izUyTUC975ph7UeKRCM+iiAmQHgdDLz3RcWp7F 7FmIqqZdDrNL/g48W4cI9uQ6+tAV0v8rdcLghQ3gFj446VHO1mhgaKjx/E1ELKwC DrI5WzZHGIpSWs9BFZDe4E90+qQUdp6lj5DnIHMOzHLjHCrI+G0J4ZATy5XPWWNo JWx5Ni7D80mpHzAObZA0+/ZGxWXMeGmPVQXhIPyfzsp+NWEcVz92MpbRh966Js74 1YPFTYpAY7JCR8cRUqRkEgBS -----END CERTIFICATE-----Generated at Wed Jul 29 03:48:57 2026 by rpki-client