$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: BFIL8vqW6JV/49SHDad/OyABZmV6tTpp5S73imtaedE= Subject key identifier: 23:08:D5:7C:47:21:C1:ED:BD:8A:E1:18:E5:58:30:6B:02:80:BE:F3 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 0237 Signing time: Wed 13 May 2026 02:43:04 +0000 Manifest this update: Wed 13 May 2026 02:43:04 +0000 Manifest next update: Wed 20 May 2026 02:43:04 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: qmCS6WC1JnWH3O/lhOEOKn+rmsQQnUbwA1huwuETDSU=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: F5h2lYPVnQxcT3yrCUQ5TjAIUlWSj1anxEmDYlLIbCo=) 3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: DeXgdTifh854jBkbMFeU78ocUGYguPv8MU0j47e7vmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: May 13 02:43:04 2026 GMT Not After : May 20 02:43:04 2026 GMT Subject: CN=6a03e538-967b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:7c:a9:c9:b0:21:90:82:56:3c:82:7e:0b: f6:54:e2:14:55:81:b3:a1:36:53:f7:61:b6:32:d5: 99:2f:ba:17:d0:80:4c:b5:dc:f0:e3:fe:ef:fd:5a: 79:2c:f9:32:f0:dd:89:b5:aa:37:50:24:86:a8:b0: 2d:8c:08:4d:40:98:32:1b:1f:9f:f5:74:da:14:ed: 61:b7:5b:6d:c9:87:03:30:6b:0d:77:fe:70:45:29: 75:1a:21:5e:60:d2:f2:6e:66:1a:77:8c:af:98:e4: 10:91:2b:f5:da:c7:13:70:37:5d:f2:c5:b0:7c:5a: a4:21:53:e4:7c:dc:6b:bb:df:21:7d:07:7e:81:6e: de:c7:69:17:b5:a4:01:25:0a:83:86:51:66:14:7d: eb:ab:ef:58:14:61:98:07:a4:7c:74:4e:df:14:0e: f9:40:0c:ef:c1:91:ad:eb:05:67:4b:43:a1:ed:8c: d3:be:ab:97:ce:b1:50:66:d8:64:c1:2b:98:55:2d: 9e:32:ac:f5:aa:00:63:b2:45:8c:94:92:26:ea:79: 2b:9a:e3:d9:cc:df:52:68:e5:95:d9:9c:93:b2:7c: f8:b8:67:ba:98:a7:d8:d7:c3:4e:f6:b1:ef:7b:32: 45:31:8c:76:0c:ae:67:fd:17:4f:ec:27:ad:73:7e: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:D5:7C:47:21:C1:ED:BD:8A:E1:18:E5:58:30:6B:02:80:BE:F3 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9a:b3:49:3b:37:8e:ea:2a:16:42:a2:88:24:77:75:63:b9: 12:db:95:d1:f4:9d:25:7d:5d:9c:e9:3b:04:29:2e:d4:f5:6c: 2e:d1:00:e2:35:d8:2e:a0:6f:6a:94:e7:fa:21:f0:f1:35:59: d6:55:57:be:9a:6a:b9:2c:80:78:3e:df:40:55:87:a0:2b:5a: f7:37:d1:2b:6f:e6:00:fa:bd:21:b4:a2:f6:c9:dc:1a:6c:fa: e8:08:4b:e4:c4:79:03:ef:f8:d1:61:84:0b:f1:24:d1:52:f1: 2f:85:45:fd:e0:41:cf:4c:85:48:b4:bf:8d:88:9b:0a:2f:ef: ef:fe:d9:ea:31:dc:d2:0e:b1:ce:00:85:e6:71:7e:81:69:c3: e7:9e:7b:3b:5a:f4:2c:ca:6d:60:70:02:7f:53:af:21:ac:f0: 95:d5:62:5a:d9:4f:35:9f:37:24:91:c7:dd:38:d9:55:5d:0c: bf:54:78:74:a0:b0:af:19:63:e3:c4:7b:34:11:68:54:92:71: 08:a3:9a:5e:4c:35:60:1b:87:4a:f0:bd:6c:f5:7e:78:55:01: bb:ab:58:3d:6a:8b:f6:e9:34:e7:cb:95:3d:31:15:c0:85:7e: e2:ac:b0:4a:b2:74:e9:e7:60:1a:65:c0:d6:a6:4b:f8:76:af: c7:c2:99:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjYwNTEzMDI0MzA0WhcNMjYwNTIwMDI0MzA0WjAYMRYwFAYD VQQDEw02YTAzZTUzOC05NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1l8qcmwIZCCVjyCfgv2VOIUVYGzoTZT92G2MtWZL7oX0IBMtdzw4/7v/Vp5 LPky8N2Jtao3UCSGqLAtjAhNQJgyGx+f9XTaFO1ht1ttyYcDMGsNd/5wRSl1GiFe YNLybmYad4yvmOQQkSv12scTcDdd8sWwfFqkIVPkfNxru98hfQd+gW7ex2kXtaQB JQqDhlFmFH3rq+9YFGGYB6R8dE7fFA75QAzvwZGt6wVnS0Oh7YzTvquXzrFQZthk wSuYVS2eMqz1qgBjskWMlJIm6nkrmuPZzN9SaOWV2ZyTsnz4uGe6mKfY18NO9rHv ezJFMYx2DK5n/RdP7Cetc37hYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMI1XxH IcHtvYrhGOVYMGsCgL7zMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQZqzSTs3juoqFkKiiCR3dWO5EtuV0fSdJX1dnOk7BCku1PVsLtEA4jXYLqBv apTn+iHw8TVZ1lVXvppquSyAeD7fQFWHoCta9zfRK2/mAPq9IbSi9sncGmz66AhL 5MR5A+/40WGEC/Ek0VLxL4VF/eBBz0yFSLS/jYibCi/v7/7Z6jHc0g6xzgCF5nF+ gWnD5557O1r0LMptYHACf1OvIazwldViWtlPNZ83JJHH3TjZVV0Mv1R4dKCwrxlj 48R7NBFoVJJxCKOaXkw1YBuHSvC9bPV+eFUBu6tYPWqL9uk058uVPTEVwIV+4qyw SrJ06edgGmXA1qZL+Havx8KZZA== -----END CERTIFICATE-----Generated at Wed May 13 09:56:36 2026 by rpki-client