$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json) Hash identifier: 5GQhOh3euR1ALgAYqm4cHmGaLt6GNUU7c5AwiVaXzco= Subject key identifier: BA:00:A2:C2:64:A3:41:3D:A6:84:4F:A3:53:53:D8:3C:38:1E:FF:68 Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Certificate serial: 1800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft Manifest number: 17E2 Signing time: Tue 12 May 2026 16:33:53 +0000 Manifest this update: Tue 12 May 2026 16:33:52 +0000 Manifest next update: Tue 19 May 2026 16:33:52 +0000 Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: zHmUNkMHW4XmWPULpOvEBbOPZ0spnJ75CcYRdAnKgLw=) 2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: uxg1Vz02k9PJduPGV4AMR2b2pATyu+ms5B8uFxBNAz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6144 (0x1800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Validity Not Before: May 12 16:33:52 2026 GMT Not After : May 19 16:33:52 2026 GMT Subject: CN=6a035671-d3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:96:9d:d1:e6:3f:61:7e:40:62:63:32:1e: 5a:dd:f6:9d:d0:a8:b2:e0:1a:64:b1:2d:e6:ce:6d: e6:5f:1a:86:31:4e:b2:0e:b2:65:73:f6:b3:4b:89: 78:a6:1f:34:e7:eb:b1:0b:07:a5:67:1b:4d:fc:f8: 1b:74:06:75:ad:47:14:01:96:ff:80:d0:bb:e2:f0: 12:55:bf:e6:30:cf:ac:6b:8b:c0:7e:6d:9c:cb:9e: 62:6b:d9:e8:62:63:a0:b1:82:84:9b:33:2a:c9:3c: 4f:cb:f5:83:95:af:25:70:30:76:a1:41:9b:0f:2a: a4:35:e6:e8:c1:1c:df:03:3c:63:4c:ee:55:c8:10: f1:fb:13:f6:05:6b:4c:bb:b7:09:c7:1f:52:9a:5d: 36:f9:ef:6f:c1:8b:18:49:b5:7b:32:2b:eb:ed:88: 65:a0:12:ba:cb:db:c0:ae:d6:a1:08:cd:33:5f:8d: 70:f5:93:59:21:f5:e9:ca:e2:d1:55:56:21:d1:45: c7:14:23:66:3a:5c:8d:5c:f8:4f:d2:7c:b0:d5:05: 91:42:5b:1f:8a:11:71:ae:d6:bb:13:1f:1d:f5:53: e4:8a:1e:46:ff:41:b7:98:42:8c:ed:fc:d1:13:4b: ef:ed:95:fe:93:8e:46:83:36:34:2b:34:7f:38:76: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:00:A2:C2:64:A3:41:3D:A6:84:4F:A3:53:53:D8:3C:38:1E:FF:68 X509v3 Authority Key Identifier: keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:36:cd:95:51:04:8f:b2:e7:59:77:17:91:6a:9f:9b:7e: f7:79:2c:dd:2b:4a:f8:6c:e8:b3:ce:53:32:37:b5:ab:e8:de: 42:f8:a0:7a:75:0e:e5:c2:f2:e8:51:b9:f8:f9:a2:b3:77:89: c3:16:30:a1:8b:73:2d:ce:1e:39:9c:57:51:fc:e4:ca:3a:5b: b6:10:9b:1c:33:de:38:bb:d9:63:6d:bc:ba:bc:2e:51:04:17: 53:83:a0:8b:61:f4:85:35:0c:f2:9c:48:b2:b3:f6:7b:36:ca: c0:8b:59:07:4d:02:0d:2d:a4:f6:53:76:96:35:64:fb:d4:f6: bd:a7:08:d6:b9:6e:c6:22:6d:e3:8f:99:42:62:ef:b5:72:e4: 4e:c5:57:45:c7:65:7a:03:17:2b:9f:6b:35:50:37:c5:bf:a9: 22:54:65:77:63:4e:ac:89:0f:2a:9c:d3:e8:04:a4:71:7e:41: d5:f9:4a:27:50:b8:de:5e:1b:85:67:78:f2:b0:e0:19:5f:72: 8a:ea:1d:b9:0c:76:b5:a8:d5:6f:f2:70:20:6c:8c:d5:0f:cb: 1b:79:cc:ba:ff:6c:76:a4:79:48:a1:f4:34:03:4b:03:ae:c9: 56:8f:79:fa:98:7c:cc:a9:d7:61:8a:64:4f:21:18:b7:7c:36: b2:86:90:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBFM0UwNUEyOTZC QjA5QzVEM0QwHhcNMjYwNTEyMTYzMzUyWhcNMjYwNTE5MTYzMzUyWjAYMRYwFAYD VQQDEw02YTAzNTY3MS1kM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYaWndHmP2F+QGJjMh5a3fad0Kiy4BpksS3mzm3mXxqGMU6yDrJlc/azS4l4 ph805+uxCwelZxtN/PgbdAZ1rUcUAZb/gNC74vASVb/mMM+sa4vAfm2cy55ia9no YmOgsYKEmzMqyTxPy/WDla8lcDB2oUGbDyqkNebowRzfAzxjTO5VyBDx+xP2BWtM u7cJxx9Sml02+e9vwYsYSbV7Mivr7YhloBK6y9vArtahCM0zX41w9ZNZIfXpyuLR VVYh0UXHFCNmOlyNXPhP0nyw1QWRQlsfihFxrta7Ex8d9VPkih5G/0G3mEKM7fzR E0vv7ZX+k45GgzY0KzR/OHaEGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoAosJk o0E9poRPo1NT2Dw4Hv9oMB8GA1UdIwQYMBaAFASDL75wx7iFnKGg4+BaKWuwnF09 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhFQy82MUQ0RjQ4QUUz RTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJV2NvYURqNEZvcGE3Q2NY VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJTXZ2bkRIdUlXY29hRGo0Rm9wYTdDY1hUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhFQy82MUQ0RjQ4QUUzRTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJ V2NvYURqNEZvcGE3Q2NYVDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3E2zZVRBI+y51l3F5Fqn5t+93ks3StK+Gzos85TMje1q+jeQvigenUO5cLy 6FG5+Pmis3eJwxYwoYtzLc4eOZxXUfzkyjpbthCbHDPeOLvZY228urwuUQQXU4Og i2H0hTUM8pxIsrP2ezbKwItZB00CDS2k9lN2ljVk+9T2vacI1rluxiJt44+ZQmLv tXLkTsVXRcdlegMXK59rNVA3xb+pIlRld2NOrIkPKpzT6ASkcX5B1flKJ1C43l4b hWd48rDgGV9yiuoduQx2tajVb/JwIGyM1Q/LG3nMuv9sdqR5SKH0NANLA67JVo95 +ph8zKnXYYpkTyEYt3w2soaQGQ== -----END CERTIFICATE-----Generated at Wed May 13 01:46:21 2026 by rpki-client