$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: +PjoTE24NNyeBn9C/yau4aDTFQF/WpTrTZs6HAix9DA= Subject key identifier: 07:95:7D:BB:69:2F:02:E0:B5:D1:A3:5F:7D:01:E6:34:2E:5A:58:97 Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: FF Signing time: Thu 23 Jul 2026 07:55:49 +0000 Manifest this update: Thu 23 Jul 2026 07:55:48 +0000 Manifest next update: Thu 30 Jul 2026 07:55:48 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: A6kjYFmr6fC8y6JgmImDeKBHRQ5HVj6KV9PEkgd3bbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Jul 23 07:55:48 2026 GMT Not After : Jul 30 07:55:48 2026 GMT Subject: CN=6a61c905-5b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:6a:81:1f:8a:99:a5:3d:b2:c6:6c:1f:5c: 6e:89:7f:50:77:4a:84:9b:12:69:78:3c:a6:2b:88: 1b:32:c6:ab:1f:2c:c6:13:9c:9b:61:cd:42:e2:cc: 52:44:13:ec:5b:a6:6a:d7:c0:e1:de:6d:05:37:04: 9e:fc:40:64:63:9e:f4:31:56:95:52:08:db:29:82: 4e:70:2e:ba:a7:5a:71:41:96:b0:fe:e8:22:c0:fb: 9e:e3:c2:78:43:7e:a3:f3:29:47:83:ed:15:bc:51: 7e:56:e1:67:56:9c:34:10:9c:c8:4e:15:18:32:d8: e7:ab:d2:b7:69:fb:30:c5:5d:99:d1:c9:a5:42:93: 52:6b:00:81:c1:d4:20:96:f4:34:4f:77:54:4e:e2: 3b:21:36:17:f0:fb:99:73:63:b3:00:b5:5e:b8:60: 1b:52:54:29:c5:5c:b8:1c:14:17:e1:3b:22:d6:f7: 5e:37:37:28:b8:aa:c8:a5:d1:5c:8d:5a:62:9c:9f: 79:ad:c6:d5:27:90:25:83:bb:ee:e7:1c:8d:ff:52: e1:d0:d2:84:52:05:c3:31:17:7c:04:d2:16:b6:95: 1e:5e:4e:aa:3c:54:1c:ca:23:cf:e1:64:02:d2:4b: 87:f0:11:38:84:ba:a4:e1:c2:f6:b3:6c:58:b3:df: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:7D:BB:69:2F:02:E0:B5:D1:A3:5F:7D:01:E6:34:2E:5A:58:97 X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f2:88:04:0c:fd:85:14:3b:a9:69:db:43:6e:15:a6:29:65: 7a:b2:10:c9:37:7d:05:6a:a6:34:c5:18:f5:08:1c:0f:89:93: ab:ce:77:e9:b4:ec:1c:33:4b:b9:4b:4b:4e:71:99:de:04:21: fe:bf:b1:d4:20:06:c2:38:54:01:36:8d:0d:a3:e3:55:59:63: 43:43:ec:35:72:4e:02:81:27:e3:e1:df:a7:0d:3c:52:3d:ad: 80:4e:93:eb:2a:63:6e:0f:7b:d9:38:b8:cb:4a:73:03:ca:25: 55:4b:ce:a2:0c:6e:9c:83:23:93:33:82:30:9f:35:2a:df:1b: 57:e6:41:d7:be:6b:3f:49:d5:bc:a2:29:e4:17:44:57:bc:38: 5a:e9:cb:6d:07:8c:62:42:65:da:ef:1b:7d:f5:49:14:e7:3d: 44:e9:43:e1:68:7b:b5:59:59:d3:60:cb:63:c9:1a:29:f9:1b: 04:e5:c4:6d:83:d0:1e:cc:fd:21:b2:13:c2:3a:18:84:25:60: c7:3b:2b:e4:01:ee:13:c7:5d:3f:cf:69:37:89:9d:29:b3:c5: 70:a9:29:f9:9f:8e:1f:f6:08:fe:bb:d1:44:8b:65:da:f6:36: 4e:23:96:05:42:45:39:84:c3:62:13:08:34:98:a0:b8:fd:8d: 9f:89:6c:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5 QzFBQzMyMjEwHhcNMjYwNzIzMDc1NTQ4WhcNMjYwNzMwMDc1NTQ4WjAYMRYwFAYD VQQDEw02YTYxYzkwNS01YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpNqgR+KmaU9ssZsH1xuiX9Qd0qEmxJpeDymK4gbMsarHyzGE5ybYc1C4sxS RBPsW6Zq18Dh3m0FNwSe/EBkY570MVaVUgjbKYJOcC66p1pxQZaw/ugiwPue48J4 Q36j8ylHg+0VvFF+VuFnVpw0EJzIThUYMtjnq9K3afswxV2Z0cmlQpNSawCBwdQg lvQ0T3dUTuI7ITYX8PuZc2OzALVeuGAbUlQpxVy4HBQX4Tsi1vdeNzcouKrIpdFc jVpinJ95rcbVJ5Alg7vu5xyN/1Lh0NKEUgXDMRd8BNIWtpUeXk6qPFQcyiPP4WQC 0kuH8BE4hLqk4cL2s2xYs9+pxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeVfbtp LwLgtdGjX30B5jQuWliXMB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn ZkE3NHVyajMzQnljR3NNaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgPKIBAz9hRQ7qWnbQ24VpillerIQyTd9BWqmNMUY9QgcD4mTq8536bTsHDNL uUtLTnGZ3gQh/r+x1CAGwjhUATaNDaPjVVljQ0PsNXJOAoEn4+Hfpw08Uj2tgE6T 6ypjbg972Ti4y0pzA8olVUvOogxunIMjkzOCMJ81Kt8bV+ZB175rP0nVvKIp5BdE V7w4WunLbQeMYkJl2u8bffVJFOc9ROlD4Wh7tVlZ02DLY8kaKfkbBOXEbYPQHsz9 IbITwjoYhCVgxzsr5AHuE8ddP89pN4mdKbPFcKkp+Z+OH/YI/rvRRItl2vY2TiOW BUJFOYTDYhMINJiguP2Nn4lsAg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:01:55 2026 by rpki-client