$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: KnV7iy8itDdIEtF00w8EJW3D5d7SdFQ7JjS/7QSst/k= Subject key identifier: 6B:84:C5:85:00:92:A4:0C:9F:08:8D:A6:3C:92:65:45:CF:FE:94:B8 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 0117 Signing time: Mon 27 Jul 2026 08:00:27 +0000 Manifest this update: Mon 27 Jul 2026 08:00:26 +0000 Manifest next update: Mon 03 Aug 2026 08:00:26 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: DayQccV6Q79Jfy9Rzbfr4w9sdSxdFZGm5e7pxL/c/1A=) 2: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=) 3: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Jul 27 08:00:26 2026 GMT Not After : Aug 3 08:00:26 2026 GMT Subject: CN=6a67101b-8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:1f:bb:3a:03:9a:6e:f8:0f:5c:51:0a:79: cf:2b:0d:d3:c8:0f:47:09:81:91:4a:33:a1:9c:93: a2:bf:83:52:9a:f6:2e:63:ca:21:68:12:ed:15:df: 64:e8:2b:7f:4f:65:5d:e7:f2:84:fd:d2:22:09:29: cf:d0:bf:a4:f9:dc:48:85:7d:42:af:f6:1b:aa:de: b2:40:38:03:d8:36:d1:38:c6:2b:c7:f3:27:cb:f9: e8:f6:04:86:8d:7c:7a:00:96:61:e7:d8:5f:bd:ab: 3b:70:2f:a0:2b:ef:c8:9f:36:bb:32:f8:1c:4d:a0: 56:cb:a3:e5:29:d9:ea:13:70:f4:ab:ff:1c:af:9b: dc:6c:67:a6:99:7d:40:32:76:9c:67:bb:ec:22:5a: c9:f2:8b:ba:a6:3f:a6:24:d9:12:2b:3a:42:14:93: 64:b9:c1:2c:f8:bd:f4:5c:fe:fa:f9:bd:e6:c4:f7: 0a:7f:8f:8f:09:35:f4:ab:e1:68:01:40:d5:9a:56: 72:f9:4c:cc:42:59:e6:b7:d7:32:36:f8:92:48:44: 8a:68:78:3d:0d:e8:4f:16:c7:b0:3d:3e:db:8f:b2: c0:43:eb:eb:cf:40:a9:bd:98:8e:ad:7a:79:bf:47: 12:d6:8a:6c:e3:fd:16:fc:05:3b:59:c2:2e:b7:e0: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:C5:85:00:92:A4:0C:9F:08:8D:A6:3C:92:65:45:CF:FE:94:B8 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:76:39:18:9f:99:f9:72:b3:5c:4c:50:26:db:29:00:cc:7e: c1:c9:45:82:e8:c4:13:6e:f5:d1:7a:a5:6a:68:24:54:cf:34: 90:ed:0d:ab:fc:4d:5b:5f:f9:be:38:11:6a:45:0f:80:62:95: 03:a6:eb:ad:ac:2e:a8:96:c2:b3:88:9e:4c:52:5d:00:10:be: 19:b2:8b:41:44:f3:b9:e8:a7:a5:93:eb:40:ff:3e:71:a4:cc: a1:84:57:0a:3e:05:f3:9e:7c:a0:cc:ef:12:db:6a:5c:50:95: 3d:f6:c8:97:7b:d6:61:90:61:92:e9:60:78:8d:3d:90:36:a1: 66:55:67:e0:d0:b3:36:33:a8:2f:6d:ac:07:ce:29:02:06:cb: 98:02:15:56:bd:6d:8e:c6:7a:a1:91:83:66:24:0e:0b:6c:11: 1e:40:46:e1:b2:e1:59:95:42:d6:f4:27:11:c4:f7:93:99:ac: 84:aa:14:a1:e8:04:b9:b1:8e:5d:d9:1b:ff:ae:a5:f4:79:74: b4:03:3d:2d:b3:03:03:86:84:d7:8f:62:53:98:9e:e8:ff:ee: 7d:9b:c5:d9:d6:90:b1:62:c4:bd:d6:35:1f:b1:41:48:48:3e: 40:0c:ca:7f:27:9e:88:1e:76:73:57:53:d1:f4:d9:48:6e:22: 27:30:12:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwNzI3MDgwMDI2WhcNMjYwODAzMDgwMDI2WjAYMRYwFAYD VQQDEw02YTY3MTAxYi04ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty0fuzoDmm74D1xRCnnPKw3TyA9HCYGRSjOhnJOiv4NSmvYuY8ohaBLtFd9k 6Ct/T2Vd5/KE/dIiCSnP0L+k+dxIhX1Cr/Ybqt6yQDgD2DbROMYrx/Mny/no9gSG jXx6AJZh59hfvas7cC+gK+/Inza7MvgcTaBWy6PlKdnqE3D0q/8cr5vcbGemmX1A MnacZ7vsIlrJ8ou6pj+mJNkSKzpCFJNkucEs+L30XP76+b3mxPcKf4+PCTX0q+Fo AUDVmlZy+UzMQlnmt9cyNviSSESKaHg9DehPFsewPT7bj7LAQ+vrz0CpvZiOrXp5 v0cS1ops4/0W/AU7WcIut+AFNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuExYUA kqQMnwiNpjySZUXP/pS4MB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3Y5GJ+Z+XKzXExQJtspAMx+wclFgujEE2710XqlamgkVM80kO0Nq/xNW1/5 vjgRakUPgGKVA6brrawuqJbCs4ieTFJdABC+GbKLQUTzueinpZPrQP8+caTMoYRX Cj4F8558oMzvEttqXFCVPfbIl3vWYZBhkulgeI09kDahZlVn4NCzNjOoL22sB84p AgbLmAIVVr1tjsZ6oZGDZiQOC2wRHkBG4bLhWZVC1vQnEcT3k5mshKoUoegEubGO Xdkb/66l9Hl0tAM9LbMDA4aE149iU5ie6P/ufZvF2daQsWLEvdY1H7FBSEg+QAzK fyeeiB52c1dT0fTZSG4iJzASIg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:07:21 2026 by rpki-client