$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: H6rBbKTyDMW1C9tTjggKABEGQy4K8tPBANiRgvnnqhg= Subject key identifier: 22:D3:EB:40:94:BF:51:3F:1E:C2:92:85:DC:D0:7E:39:0D:90:09:C5 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 021F Signing time: Fri 27 Mar 2026 02:23:02 +0000 Manifest this update: Fri 27 Mar 2026 02:23:01 +0000 Manifest next update: Fri 03 Apr 2026 02:23:01 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: zgiOKeFiz555HJ6pIFLGqB9lsmkVQIlKS11ydgvw+eU=) 2: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: DeXgdTifh854jBkbMFeU78ocUGYguPv8MU0j47e7vmI=) 3: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: F5h2lYPVnQxcT3yrCUQ5TjAIUlWSj1anxEmDYlLIbCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Mar 27 02:23:01 2026 GMT Not After : Apr 3 02:23:01 2026 GMT Subject: CN=69c5ea06-d7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:db:84:bd:c6:e5:b4:70:c8:64:f2:c8:fb: 45:e7:44:d9:90:8f:c8:6a:b0:d0:cb:2b:61:5c:c8: b6:21:fd:27:2c:d5:9e:4f:9b:96:c4:e8:7e:27:56: 49:d0:3f:41:45:5d:3a:48:66:44:79:0d:19:89:d7: ee:d9:cb:46:0a:fa:cf:9c:62:49:7d:c8:17:63:be: 53:79:33:07:23:d3:0c:2f:c0:61:04:30:c9:ec:1a: 1a:1b:6a:6e:de:5d:13:2e:8c:70:bd:c3:14:9b:07: bb:4f:fc:16:a9:3a:2f:a1:e3:51:eb:8c:8d:cb:da: c5:b2:c9:4b:ab:07:00:5d:fe:fd:bf:22:e2:f5:ab: bb:cf:93:8c:1c:3c:48:44:bd:36:53:c8:a9:8b:6d: b0:65:46:05:69:f7:bb:c8:23:4e:08:aa:6e:cb:78: cf:64:34:2c:5c:55:b2:93:96:a8:7a:8c:14:d6:3c: a4:7c:57:3b:6d:10:5b:19:08:91:f0:c9:f5:c7:b7: cd:7f:6b:34:eb:58:f6:ff:5b:9c:40:3c:50:b2:a2: 65:a1:56:fb:4e:a8:8d:6a:8b:e6:cc:89:45:a9:0b: 6c:71:11:da:84:21:1e:89:ba:0f:65:c6:57:16:9f: 4f:b3:e6:cc:c8:3d:5a:1e:bc:cf:57:eb:bc:64:0b: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:EB:40:94:BF:51:3F:1E:C2:92:85:DC:D0:7E:39:0D:90:09:C5 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2f:23:82:fa:1d:b1:81:af:cd:2c:ae:3f:4c:5e:f5:2d:3d: ad:1f:0a:5d:54:3f:0d:a4:b2:42:9a:7b:34:f2:39:b1:d4:5a: 7e:53:cb:b2:6f:a3:4c:b8:3f:92:57:73:d3:47:81:0d:fd:2d: 58:8b:43:af:6a:f8:10:47:ce:0e:09:69:cd:5b:c9:a8:e2:11: a3:f7:ec:dc:f0:01:53:fb:8e:7f:ef:2d:1c:68:6f:6f:4d:da: 7b:d1:84:e0:ec:4d:68:93:f6:2b:8f:fa:18:f2:6b:88:84:2d: 3a:cc:0a:3d:93:0f:af:48:80:ad:ce:fd:84:05:f6:98:54:d7: 52:f8:38:d0:88:df:7a:69:e3:12:3d:d5:85:15:f6:4a:fb:00: 9b:6d:4f:86:59:eb:e4:a6:ba:a7:1d:0c:90:ea:1a:bb:4f:b5: b0:47:cb:c2:95:ae:c9:d6:90:75:d0:a5:4c:54:08:d1:a3:7f: 9e:74:4f:ce:54:14:c8:86:38:7e:31:44:6a:b8:47:43:63:34: cc:d7:26:a5:78:d4:39:07:33:24:43:af:43:f0:a0:d7:c4:12: 1d:57:79:a2:f6:d8:09:6f:5c:0a:dd:21:55:31:d4:c5:cc:fd: e9:0e:65:84:65:0d:3e:09:ac:c1:d4:c0:5b:51:a4:60:8a:8f: a3:38:95:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjYwMzI3MDIyMzAxWhcNMjYwNDAzMDIyMzAxWjAYMRYwFAYD VQQDEw02OWM1ZWEwNi1kN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi/bhL3G5bRwyGTyyPtF50TZkI/IarDQyythXMi2If0nLNWeT5uWxOh+J1ZJ 0D9BRV06SGZEeQ0Zidfu2ctGCvrPnGJJfcgXY75TeTMHI9MML8BhBDDJ7BoaG2pu 3l0TLoxwvcMUmwe7T/wWqTovoeNR64yNy9rFsslLqwcAXf79vyLi9au7z5OMHDxI RL02U8ipi22wZUYFafe7yCNOCKpuy3jPZDQsXFWyk5aoeowU1jykfFc7bRBbGQiR 8Mn1x7fNf2s061j2/1ucQDxQsqJloVb7TqiNaovmzIlFqQtscRHahCEeiboPZcZX Fp9Ps+bMyD1aHrzPV+u8ZAu0VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLT60CU v1E/HsKShdzQfjkNkAnFMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAji8jgvodsYGvzSyuP0xe9S09rR8KXVQ/DaSyQpp7NPI5sdRaflPLsm+jTLg/ kldz00eBDf0tWItDr2r4EEfODglpzVvJqOIRo/fs3PABU/uOf+8tHGhvb03ae9GE 4OxNaJP2K4/6GPJriIQtOswKPZMPr0iArc79hAX2mFTXUvg40IjfemnjEj3VhRX2 SvsAm21Phlnr5Ka6px0MkOoau0+1sEfLwpWuydaQddClTFQI0aN/nnRPzlQUyIY4 fjFEarhHQ2M0zNcmpXjUOQczJEOvQ/Cg18QSHVd5ovbYCW9cCt0hVTHUxcz96Q5l hGUNPgmswdTAW1GkYIqPoziVbw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:39 2026 by rpki-client