$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: 25BBinwvvM+3UHnOGxgjDcD7fzrsf4+YTDrNlITzbKY= Subject key identifier: 55:57:73:D2:34:CD:33:F8:85:E9:6F:B0:49:4C:B4:54:3E:B3:6A:9D Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 087E Signing time: Tue 12 May 2026 20:44:03 +0000 Manifest this update: Tue 12 May 2026 20:44:03 +0000 Manifest next update: Tue 19 May 2026 20:44:03 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: aNS1K1VJCgYq6qFjQdu9+N/1jPtKlcXeBKUzYEpum6U=) 2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=) 3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: May 12 20:44:03 2026 GMT Not After : May 19 20:44:03 2026 GMT Subject: CN=6a039113-30c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:a3:d8:6e:0d:a2:d4:07:84:41:3c:ef:31: 70:17:4a:57:23:cc:fd:60:c2:ed:f7:59:74:8d:54: 89:fb:bf:cf:8c:0a:10:b9:da:de:27:05:f5:15:e3: 98:bb:b2:a2:4e:a8:70:f1:b6:26:b6:f3:65:92:1a: 2c:07:1a:27:95:85:85:dc:7a:18:4e:4b:39:f0:d3: f1:92:49:9d:dd:29:99:28:08:ed:36:15:46:fd:60: a8:20:ea:b1:ca:30:a5:4b:eb:bf:2d:d9:df:96:bf: e6:ae:38:84:61:57:56:0f:d8:89:eb:d8:c2:3d:eb: 4c:9e:76:59:bf:f0:ee:2c:b1:13:e3:ce:72:98:e0: b2:98:e3:1b:80:11:e2:21:48:90:c7:b1:98:16:3b: b2:63:d8:20:c8:66:ce:0c:5a:9a:1e:95:09:75:9c: 1c:60:69:1b:a6:84:20:a3:80:40:8c:0c:6f:df:c6: ec:54:b5:8e:0a:7b:d1:e8:8d:cd:19:6f:f1:50:3a: ec:ac:8d:d3:ec:c4:8c:0f:7d:2a:df:c4:58:03:9b: e8:ce:81:bf:93:bf:7b:b3:40:c7:7d:15:de:06:42: 9b:0a:9e:13:de:86:4b:b2:4b:94:94:f5:4b:9b:7b: 9e:f1:19:08:9f:73:aa:80:fc:bf:4f:f9:4e:da:8e: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:73:D2:34:CD:33:F8:85:E9:6F:B0:49:4C:B4:54:3E:B3:6A:9D X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:bf:64:e3:07:29:db:7b:5e:5b:7e:bc:9d:5d:b1:7e:7c: 52:e7:ed:21:00:1e:21:37:bf:e7:2f:9d:74:a1:66:fd:08:1c: 82:13:93:5e:26:0d:0c:ae:0e:37:52:2d:38:40:e2:32:9e:b2: f2:d4:24:4f:61:44:c1:07:26:97:fc:f5:50:b6:1c:fd:b0:f0: d9:77:e8:e3:5f:f1:3a:c1:37:6f:7e:85:02:1a:17:a2:a9:a8: 7b:f3:7c:8f:34:fd:4a:10:5f:65:a6:6a:7c:3e:54:e5:d5:0f: 82:28:81:07:8e:24:cb:7f:d9:50:e2:c1:41:f7:97:cb:b0:31: 8b:a4:d3:65:62:8c:26:df:81:18:5a:8b:f6:f2:f4:bd:a1:e9: 63:95:ff:5c:de:68:61:51:47:c7:e4:ea:e5:4e:46:99:4d:f2: cd:ac:9f:0f:a9:01:0e:95:07:68:da:28:7c:3f:21:61:0e:96: 96:e1:9d:d6:00:6f:fa:bf:e0:03:9e:ee:6a:0d:66:1f:1a:42: 3a:17:36:8e:54:27:a1:1e:4e:b1:e1:00:dc:b0:36:0d:51:ad: 13:5c:75:73:31:74:c6:22:c1:59:55:93:2f:cb:ca:06:6b:27: 68:35:24:42:16:93:50:4b:3b:3f:76:9b:37:55:d5:7c:3a:ad: 1b:6d:9f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjYwNTEyMjA0NDAzWhcNMjYwNTE5MjA0NDAzWjAYMRYwFAYD VQQDEw02YTAzOTExMy0zMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2Kj2G4NotQHhEE87zFwF0pXI8z9YMLt91l0jVSJ+7/PjAoQudreJwX1FeOY u7KiTqhw8bYmtvNlkhosBxonlYWF3HoYTks58NPxkkmd3SmZKAjtNhVG/WCoIOqx yjClS+u/Ldnflr/mrjiEYVdWD9iJ69jCPetMnnZZv/DuLLET485ymOCymOMbgBHi IUiQx7GYFjuyY9ggyGbODFqaHpUJdZwcYGkbpoQgo4BAjAxv38bsVLWOCnvR6I3N GW/xUDrsrI3T7MSMD30q38RYA5vozoG/k797s0DHfRXeBkKbCp4T3oZLskuUlPVL m3ue8RkIn3OqgPy/T/lO2o7YrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVXc9I0 zTP4helvsElMtFQ+s2qdMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8+/ZOMHKdt7Xlt+vJ1dsX58UuftIQAeITe/5y+ddKFm/QgcghOTXiYNDK4O N1ItOEDiMp6y8tQkT2FEwQcml/z1ULYc/bDw2Xfo41/xOsE3b36FAhoXoqmoe/N8 jzT9ShBfZaZqfD5U5dUPgiiBB44ky3/ZUOLBQfeXy7Axi6TTZWKMJt+BGFqL9vL0 vaHpY5X/XN5oYVFHx+Tq5U5GmU3yzayfD6kBDpUHaNoofD8hYQ6WluGd1gBv+r/g A57uag1mHxpCOhc2jlQnoR5OseEA3LA2DVGtE1x1czF0xiLBWVWTL8vKBmsnaDUk QhaTUEs7P3abN1XVfDqtG22fnQ== -----END CERTIFICATE-----Generated at Wed May 13 15:49:38 2026 by rpki-client