$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: fg5GSu3pnAzjqcPS/XNEpj4lnR/3bfvFPOyGdd9n6hk= Subject key identifier: CE:C1:C3:DE:A1:BD:0E:78:DB:0F:5C:73:03:9A:27:A4:E9:8A:C1:E3 Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0E3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0E0F Signing time: Tue 28 Jul 2026 17:57:58 +0000 Manifest this update: Tue 28 Jul 2026 17:57:58 +0000 Manifest next update: Tue 04 Aug 2026 17:57:58 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: mW2PB9X4/ns1OYt0C6jyAkIqFmHLr5X9KenO67wCrwA=) 2: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=) 3: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=) 4: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=) 5: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Jul 28 17:57:58 2026 GMT Not After : Aug 4 17:57:58 2026 GMT Subject: CN=6a68eda6-e9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:44:72:5a:5d:93:fb:3f:47:eb:96:04:41: 0d:63:a5:e6:49:9e:7f:fc:24:6e:24:20:f9:5a:22: b8:a3:c9:9e:7c:bd:b7:d2:91:88:e9:76:96:c4:e2: 3a:7f:4f:86:db:ad:25:9b:9b:02:01:6e:e5:5a:c9: 4a:c4:05:2d:83:93:a1:f0:59:ad:40:85:5f:f5:c5: 82:85:9d:9f:ad:8f:e8:5b:d5:91:64:2d:42:dd:01: bb:95:74:d7:da:7c:d5:79:7b:d7:58:01:97:18:6b: fe:52:2f:9f:3b:72:81:de:28:64:13:d1:4a:b5:89: 7c:7e:95:a7:ab:f9:08:35:42:a1:be:c1:22:2f:00: 3e:61:9e:b3:20:06:ac:0d:bd:02:8c:f1:80:e2:3d: 8e:43:a1:d0:e5:39:b4:30:de:a6:8a:7e:c0:56:1a: 02:21:c0:18:0c:78:ad:65:93:ba:89:34:ca:69:11: ea:e4:85:0e:2f:fb:06:34:0e:19:63:99:75:7b:98: 20:fc:e7:04:90:4c:f1:b0:6b:71:d7:5c:f8:4c:99: 6f:59:4d:92:7c:e8:1f:a1:a6:26:18:67:ac:c6:81: 9f:a7:4e:51:00:f9:d4:2f:24:91:0e:65:a8:c4:04: 73:6e:4e:10:f9:19:94:6a:cc:64:00:78:81:39:85: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C1:C3:DE:A1:BD:0E:78:DB:0F:5C:73:03:9A:27:A4:E9:8A:C1:E3 X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:17:0f:c1:e6:e6:a4:b2:69:29:9e:20:95:10:4b:b4:54:33: d5:0d:5b:61:45:25:a1:92:79:1d:24:b5:cf:61:21:be:ff:83: 17:c7:eb:98:db:9f:f6:95:ac:2f:ff:99:5f:31:9a:7d:39:8c: 51:bd:07:a4:c3:80:8c:dd:9a:3c:80:91:51:1c:4e:76:f0:81: 76:d9:ad:47:cc:21:3f:d3:d1:6a:5c:e8:5d:28:5b:c5:9f:3d: fd:bf:79:dc:43:77:0b:a7:76:3e:97:d3:0d:77:87:a4:ab:28: 60:df:e8:8d:0c:40:80:4a:13:98:6e:a5:61:e9:e4:f1:49:a8: fb:1e:f9:41:a9:2c:87:b0:52:da:55:ff:4c:86:0d:af:c7:5e: a8:86:ce:dd:1c:49:9c:a9:f0:28:0a:a0:59:74:4a:0f:0d:e4: f4:46:94:0e:07:22:26:0a:84:4d:cb:47:a3:58:33:aa:d9:78: 6c:b9:ba:f7:c1:98:49:5b:7c:45:be:b5:43:32:dc:c9:15:1e: f8:a1:02:4c:4a:c2:0e:f5:d7:84:cc:e4:6e:e8:a2:e2:12:a8: a2:c1:7b:3a:e3:21:ba:a1:21:db:a6:8e:72:57:33:61:47:b6: e4:4c:90:af:1d:1b:dd:9a:5c:1d:92:b8:cc:89:97:eb:be:8a: 04:7d:8d:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjYwNzI4MTc1NzU4WhcNMjYwODA0MTc1NzU4WjAYMRYwFAYD VQQDEw02YTY4ZWRhNi1lOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohVEclpdk/s/R+uWBEENY6XmSZ5//CRuJCD5WiK4o8mefL230pGI6XaWxOI6 f0+G260lm5sCAW7lWslKxAUtg5Oh8FmtQIVf9cWChZ2frY/oW9WRZC1C3QG7lXTX 2nzVeXvXWAGXGGv+Ui+fO3KB3ihkE9FKtYl8fpWnq/kINUKhvsEiLwA+YZ6zIAas Db0CjPGA4j2OQ6HQ5Tm0MN6min7AVhoCIcAYDHitZZO6iTTKaRHq5IUOL/sGNA4Z Y5l1e5gg/OcEkEzxsGtx11z4TJlvWU2SfOgfoaYmGGesxoGfp05RAPnULySRDmWo xARzbk4Q+RmUasxkAHiBOYXcgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7Bw96h vQ542w9ccwOaJ6TpisHjMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxcPwebmpLJpKZ4glRBLtFQz1Q1bYUUloZJ5HSS1z2Ehvv+DF8frmNuf9pWs L/+ZXzGafTmMUb0HpMOAjN2aPICRURxOdvCBdtmtR8whP9PRalzoXShbxZ89/b95 3EN3C6d2PpfTDXeHpKsoYN/ojQxAgEoTmG6lYenk8Umo+x75Qaksh7BS2lX/TIYN r8deqIbO3RxJnKnwKAqgWXRKDw3k9EaUDgciJgqETctHo1gzqtl4bLm698GYSVt8 Rb61QzLcyRUe+KECTErCDvXXhMzkbuii4hKoosF7OuMhuqEh26aOclczYUe25EyQ rx0b3ZpcHZK4zImX676KBH2NRg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:50:39 2026 by rpki-client