$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: pwpK+IPxp/vppnrHemeL9Vm5ZiwXkaeVWF1fidzFeXI= Subject key identifier: CB:70:BA:A5:24:77:82:05:AE:4E:0D:25:56:73:A2:62:71:52:83:8A Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0E26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0DF8 Signing time: Fri 12 Jun 2026 17:50:02 +0000 Manifest this update: Fri 12 Jun 2026 17:50:02 +0000 Manifest next update: Fri 19 Jun 2026 17:50:02 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: RVxba9qP52Bv5tisoa4l3ViRY5KhF8rCvxbFfFbtfbs=) 2: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=) 3: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=) 4: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=) 5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Jun 12 17:50:02 2026 GMT Not After : Jun 19 17:50:02 2026 GMT Subject: CN=6a2c46ca-f058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:3d:09:d1:4f:9e:aa:55:79:3e:0c:5f:b5: 21:74:3f:fe:e6:57:0c:d4:13:99:7e:43:fc:39:5f: 19:7c:be:e7:28:64:9c:9c:20:98:42:55:39:dd:a3: b5:c3:5f:b3:46:10:1a:ef:9a:ab:93:ec:59:b8:b9: 58:16:11:37:2d:c2:7b:45:b7:8f:02:4b:21:99:c8: f2:a8:3d:c0:33:3b:4f:97:83:e7:8a:bf:1b:46:e1: e3:0e:a3:24:d0:54:fd:44:a5:7b:0e:67:20:c1:4a: 2c:f0:27:50:99:08:05:a2:5f:74:5e:82:77:14:99: 49:a9:1f:3e:ac:29:27:6b:37:a8:e9:05:77:7d:ee: dd:ee:5b:20:7c:e6:66:27:42:5e:e0:88:a6:85:2b: 8a:ae:1f:5d:fb:57:f9:ca:9a:a4:de:2d:09:5a:8f: d1:da:d5:b2:b4:28:37:21:01:70:e8:3e:c4:b9:0f: de:cb:a8:a8:d8:8c:a8:2a:45:17:bf:c1:8b:a1:1c: 55:31:2f:96:6f:e0:17:7e:f3:84:7f:5e:31:a3:75: bc:a3:f5:7f:7b:69:3f:37:81:da:4c:95:3c:48:9d: 38:73:55:9a:7c:b8:81:f1:4b:df:2f:24:8d:2c:2a: 84:41:6b:b5:42:58:21:ee:91:c3:c1:29:68:b1:30: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:70:BA:A5:24:77:82:05:AE:4E:0D:25:56:73:A2:62:71:52:83:8A X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:37:cd:66:ed:7c:70:76:c7:b7:68:ca:22:88:56:d8:f4:09: 30:01:64:8b:39:87:8d:99:47:8e:d9:85:9c:76:73:b7:14:8c: 96:46:16:23:a4:37:49:41:d7:16:ad:d3:7d:79:d8:1b:4c:54: 4f:a0:f3:21:c0:12:07:01:e2:e0:76:a9:6c:01:32:a0:52:f9: 8c:8b:62:69:b3:d0:46:c6:d5:83:1b:05:ca:1b:44:13:63:7c: 1e:72:42:a8:d7:a6:d3:d2:da:b0:b9:ed:d6:a9:d8:24:33:83: 2c:a6:bb:1b:34:c3:dc:13:c1:9f:e6:3f:c3:83:ce:43:df:d1: 0c:f8:67:55:98:85:fa:c8:25:34:b5:e2:20:81:e9:d5:76:e1: 5e:a9:46:a1:9e:d7:e5:0b:67:17:53:9e:4f:88:19:d5:b4:88: e0:3a:0e:f0:d0:27:f5:06:86:50:52:4c:83:26:52:e4:34:0f: 40:a3:8d:5f:e8:2e:89:8d:ab:d2:9f:8b:06:a7:8d:c8:5d:43: 66:77:da:d0:dd:25:fb:b0:03:28:6c:d8:28:d8:0e:73:f6:4f: 94:d2:eb:e4:85:59:41:92:fe:2d:c1:ee:37:33:5b:42:84:c1: 45:47:44:81:19:d5:01:0d:20:88:63:98:48:d6:bf:69:c8:58: c6:47:69:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjYwNjEyMTc1MDAyWhcNMjYwNjE5MTc1MDAyWjAYMRYwFAYD VQQDEw02YTJjNDZjYS1mMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApC09CdFPnqpVeT4MX7UhdD/+5lcM1BOZfkP8OV8ZfL7nKGScnCCYQlU53aO1 w1+zRhAa75qrk+xZuLlYFhE3LcJ7RbePAkshmcjyqD3AMztPl4Pnir8bRuHjDqMk 0FT9RKV7DmcgwUos8CdQmQgFol90XoJ3FJlJqR8+rCknazeo6QV3fe7d7lsgfOZm J0Je4IimhSuKrh9d+1f5ypqk3i0JWo/R2tWytCg3IQFw6D7EuQ/ey6io2IyoKkUX v8GLoRxVMS+Wb+AXfvOEf14xo3W8o/V/e2k/N4HaTJU8SJ04c1WafLiB8UvfLySN LCqEQWu1Qlgh7pHDwSlosTD6QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtwuqUk d4IFrk4NJVZzomJxUoOKMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMzfNZu18cHbHt2jKIohW2PQJMAFkizmHjZlHjtmFnHZztxSMlkYWI6Q3SUHX Fq3TfXnYG0xUT6DzIcASBwHi4HapbAEyoFL5jItiabPQRsbVgxsFyhtEE2N8HnJC qNem09LasLnt1qnYJDODLKa7GzTD3BPBn+Y/w4POQ9/RDPhnVZiF+sglNLXiIIHp 1XbhXqlGoZ7X5QtnF1OeT4gZ1bSI4DoO8NAn9QaGUFJMgyZS5DQPQKONX+guiY2r 0p+LBqeNyF1DZnfa0N0l+7ADKGzYKNgOc/ZPlNLr5IVZQZL+LcHuNzNbQoTBRUdE gRnVAQ0giGOYSNa/achYxkdpRw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:07:51 2026 by rpki-client