$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json) Hash identifier: Y9qxtnlxCeswXJUBXgYvfAFp2o28nWvz2e/Z/DKNa6o= Subject key identifier: 0A:89:DE:F5:7F:07:D9:9C:98:22:42:85:FD:FC:1B:E9:3E:9E:A9:60 Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft Manifest number: 0222 Signing time: Thu 23 Jul 2026 04:02:28 +0000 Manifest this update: Thu 23 Jul 2026 04:02:28 +0000 Manifest next update: Thu 30 Jul 2026 04:02:28 +0000 Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: Qsr25qlhOS3QLlFaDHls6BDbqicLw1qj3+MNhozUvNM=) 2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Validity Not Before: Jul 23 04:02:28 2026 GMT Not After : Jul 30 04:02:28 2026 GMT Subject: CN=6a619254-1358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:60:fb:30:e4:f2:e3:fe:5c:5f:8d:a9:f7: 96:79:0a:8a:ca:4a:d0:c1:a9:fe:95:6a:d3:01:ef: 73:18:19:87:ff:91:89:02:81:71:ff:c2:37:39:f4: 9b:ed:cc:70:e8:b4:ce:e5:66:ed:e1:b9:ef:35:cd: 82:8f:b5:9f:b7:31:21:4b:77:02:76:d3:d7:17:e3: 82:fb:e9:89:03:38:09:27:58:db:aa:49:f5:a4:d8: 26:8a:40:51:7d:60:31:37:96:2c:05:f5:6f:db:73: 11:23:22:c5:3c:ff:94:12:cd:17:3b:f3:c9:28:92: 76:57:9f:17:81:d5:ab:c4:57:3c:8d:cc:3c:99:45: b0:94:cd:c3:0f:3b:7a:a6:92:14:2d:5f:be:db:be: a0:80:73:70:5e:fd:76:30:6a:9f:f3:82:f7:70:8b: 19:99:9c:41:b6:0f:bd:a3:e0:6d:ca:89:1f:0f:ab: 4a:36:1a:c0:20:33:e7:6c:ed:56:04:16:03:fd:8d: 70:59:5f:5e:2d:d3:e2:5a:71:77:28:b5:c4:ee:0c: 56:4f:eb:89:41:1a:24:fc:9e:5d:67:0d:0b:96:17: 62:b5:b2:52:3a:d6:da:3c:3a:c1:4c:ba:3b:5c:f9: 32:70:cc:ac:24:ec:52:2b:b5:54:78:20:03:f0:16: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:DE:F5:7F:07:D9:9C:98:22:42:85:FD:FC:1B:E9:3E:9E:A9:60 X509v3 Authority Key Identifier: keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:be:dd:8d:fe:df:cf:31:47:b1:5d:30:a5:92:5d:42:82:0f: 96:bd:c8:6f:03:d2:89:9c:ad:5e:64:a1:96:8e:91:e0:63:4f: f7:74:5f:53:89:ed:58:2d:07:80:92:47:5c:b5:db:c2:1f:c3: 70:30:16:e5:ac:3b:c4:71:05:8c:cb:94:ba:fe:e7:4a:73:20: b4:58:63:fc:48:c0:c5:24:3a:4c:55:9c:03:e3:10:e5:8d:5f: d0:e1:e4:c0:82:2e:f2:1f:32:65:dd:86:08:a9:a4:30:7b:0a: f7:50:05:7f:5e:d5:8a:cd:b2:6d:03:e0:c1:9b:28:d1:d7:f8: 23:0a:a2:a7:91:67:ec:ed:be:b0:07:1f:34:e0:34:c5:84:bf: 2a:3e:2e:b0:c6:c8:1f:36:ef:69:8f:fc:64:55:c1:73:b0:42: 98:c0:c5:51:16:01:e7:88:95:74:49:f4:92:3c:8d:72:50:61: d2:0f:d0:c2:8d:b2:97:58:ce:f2:73:ae:12:99:7d:76:92:df: e9:07:57:9a:8c:64:bf:e6:73:f5:49:f4:b0:bf:f6:af:ba:55: 46:dc:f7:96:e3:21:93:ad:f5:c9:10:7e:77:3f:a3:fd:14:59: 33:18:a6:d6:80:f7:9b:cc:df:61:8a:95:6a:b1:78:1b:3d:07: b3:94:8e:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzN0YxMTAvBgNVBAUTKDA0QTlCODkxOUIyMjBGNUYzRUFCRDBGNEREODVFMkY1 QkRCQzU1MDAwHhcNMjYwNzIzMDQwMjI4WhcNMjYwNzMwMDQwMjI4WjAYMRYwFAYD VQQDEw02YTYxOTI1NC0xMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1Zg+zDk8uP+XF+NqfeWeQqKykrQwan+lWrTAe9zGBmH/5GJAoFx/8I3OfSb 7cxw6LTO5Wbt4bnvNc2Cj7WftzEhS3cCdtPXF+OC++mJAzgJJ1jbqkn1pNgmikBR fWAxN5YsBfVv23MRIyLFPP+UEs0XO/PJKJJ2V58XgdWrxFc8jcw8mUWwlM3DDzt6 ppIULV++276ggHNwXv12MGqf84L3cIsZmZxBtg+9o+BtyokfD6tKNhrAIDPnbO1W BBYD/Y1wWV9eLdPiWnF3KLXE7gxWT+uJQRok/J5dZw0LlhditbJSOtbaPDrBTLo7 XPkycMysJOxSK7VUeCAD8BbeCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqJ3vV/ B9mcmCJChf38G+k+nqlgMB8GA1UdIwQYMBaAFASpuJGbIg9fPqvQ9N2F4vW9vFUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODM3Ri82NDU5MEMxMjQ2 RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQxOC1xOUQwM1lYaTliMjhW UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODM3Ri82NDU5MEMxMjQ2RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQx OC1xOUQwM1lYaTliMjhWUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG77djf7fzzFHsV0wpZJdQoIPlr3IbwPSiZytXmShlo6R4GNP93RfU4ntWC0H gJJHXLXbwh/DcDAW5aw7xHEFjMuUuv7nSnMgtFhj/EjAxSQ6TFWcA+MQ5Y1f0OHk wIIu8h8yZd2GCKmkMHsK91AFf17Vis2ybQPgwZso0df4Iwqip5Fn7O2+sAcfNOA0 xYS/Kj4usMbIHzbvaY/8ZFXBc7BCmMDFURYB54iVdEn0kjyNclBh0g/Qwo2yl1jO 8nOuEpl9dpLf6QdXmoxkv+Zz9Un0sL/2r7pVRtz3luMhk631yRB+dz+j/RRZMxim 1oD3m8zfYYqVarF4Gz0Hs5SOIg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:24:12 2026 by rpki-client