$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: /OTbD3NwyspNORSXX2JuGN986DJbZ4wjhN9iNfXRAgA= Subject key identifier: 2D:12:CE:98:72:41:65:71:BB:43:41:41:F0:65:77:1D:30:FE:F9:64 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: F1 Signing time: Mon 11 May 2026 06:31:51 +0000 Manifest this update: Mon 11 May 2026 06:31:50 +0000 Manifest next update: Mon 18 May 2026 06:31:50 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: BeppjNpCEfi7rGTK0Y1YsBN7Kh1aM5nVsQYIgOsHv1o=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: May 11 06:31:50 2026 GMT Not After : May 18 06:31:50 2026 GMT Subject: CN=6a0177d6-40b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:7b:c3:03:45:14:07:6e:60:3b:bc:59:34: ec:03:5e:20:99:07:5d:19:2c:3f:16:e9:b4:62:78: 9a:b1:4b:fe:d1:e7:17:a4:56:14:41:8b:1b:32:ca: 78:44:6d:21:0d:4e:6d:ab:ce:a8:18:26:c7:b5:9a: 8e:d4:43:e4:32:23:23:f3:c4:0a:0f:6d:b5:c9:47: d8:70:1b:ba:16:9a:34:37:05:3b:f9:df:44:73:af: b1:99:64:38:1c:91:a5:73:0c:86:d6:ba:ca:e2:8c: 24:99:38:23:43:aa:6d:a5:33:24:85:8a:75:50:9b: c9:b9:88:cf:a7:50:b1:57:9f:b2:c3:c7:77:b5:6b: ec:e8:33:78:6f:f4:61:69:8c:57:3f:5d:85:56:90: ab:28:7d:80:17:29:27:a4:8d:6e:ac:93:3f:c1:47: ab:48:90:de:73:d1:ff:9c:49:03:5c:f9:9f:08:38: 27:96:58:e1:75:f4:04:bb:6f:cd:0c:df:cb:f9:74: e9:e1:c0:72:a4:fc:66:a0:6b:07:b6:ec:67:32:d0: 52:d0:f1:f5:f8:71:d5:6e:ad:61:5e:a0:25:fa:a8: fa:cd:4e:f3:8d:dd:75:53:e5:53:b8:56:ae:c8:bb: 3e:4d:49:1e:ea:50:c7:83:dc:95:c1:96:e3:5d:66: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:CE:98:72:41:65:71:BB:43:41:41:F0:65:77:1D:30:FE:F9:64 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:57:e2:a8:2c:7b:f1:da:9b:4f:d6:e2:3f:e1:08:7c:5e:e0: 8e:69:cb:01:18:4d:42:e0:21:12:01:c0:ef:43:91:42:eb:bc: f0:68:e9:eb:06:06:5d:77:2e:41:f3:aa:fc:0b:13:75:b6:47: 1f:58:8e:9a:29:c1:69:be:be:39:9a:50:78:d5:ef:0b:cb:f2: a1:c7:05:1b:25:33:c7:13:46:a5:35:93:91:93:51:15:fa:32: a6:33:39:10:25:90:72:92:45:e1:02:c3:44:fa:c4:79:1c:ae: f6:15:0d:86:af:7d:ce:b3:6f:0c:c2:60:53:4a:86:92:ab:c6: 01:22:c7:0c:8d:e9:09:6e:bb:fb:1e:86:ca:4c:68:1a:a6:97: 6d:6b:f1:c0:d5:82:68:85:d5:f2:e8:84:68:db:15:e9:60:1b: 97:41:65:9c:cd:35:b7:b7:96:d4:ba:5d:c7:b6:ca:66:86:e5: f1:d0:b6:dd:36:4e:92:c4:62:f4:cb:35:f0:99:42:83:9f:9f: d3:29:26:1c:78:9c:dd:2c:bc:b8:a9:e7:4b:ec:d3:25:e8:0e: ec:9e:a6:ad:1a:ca:6e:77:78:34:47:96:44:fc:bd:2d:c0:49: d8:78:b1:99:6c:41:d9:5f:3d:f4:dd:bf:7a:51:54:7c:10:43: 85:99:bc:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwNTExMDYzMTUwWhcNMjYwNTE4MDYzMTUwWjAYMRYwFAYD VQQDEw02YTAxNzdkNi00MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmd7wwNFFAduYDu8WTTsA14gmQddGSw/Fum0YniasUv+0ecXpFYUQYsbMsp4 RG0hDU5tq86oGCbHtZqO1EPkMiMj88QKD221yUfYcBu6Fpo0NwU7+d9Ec6+xmWQ4 HJGlcwyG1rrK4owkmTgjQ6ptpTMkhYp1UJvJuYjPp1CxV5+yw8d3tWvs6DN4b/Rh aYxXP12FVpCrKH2AFyknpI1urJM/wUerSJDec9H/nEkDXPmfCDgnlljhdfQEu2/N DN/L+XTp4cBypPxmoGsHtuxnMtBS0PH1+HHVbq1hXqAl+qj6zU7zjd11U+VTuFau yLs+TUke6lDHg9yVwZbjXWZrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0Szphy QWVxu0NBQfBldx0w/vlkMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVfiqCx78dqbT9biP+EIfF7gjmnLARhNQuAhEgHA70ORQuu88Gjp6wYGXXcu QfOq/AsTdbZHH1iOminBab6+OZpQeNXvC8vyoccFGyUzxxNGpTWTkZNRFfoypjM5 ECWQcpJF4QLDRPrEeRyu9hUNhq99zrNvDMJgU0qGkqvGASLHDI3pCW67+x6Gykxo GqaXbWvxwNWCaIXV8uiEaNsV6WAbl0FlnM01t7eW1Lpdx7bKZobl8dC23TZOksRi 9Ms18JlCg5+f0ykmHHic3Sy8uKnnS+zTJegO7J6mrRrKbnd4NEeWRPy9LcBJ2Hix mWxB2V899N2/elFUfBBDhZm8UA== -----END CERTIFICATE-----Generated at Wed May 13 06:17:51 2026 by rpki-client