$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft File: bmfAks6I_8_-rcHcpibbZyygdeU.mft (raw, json) Hash identifier: OggPJyDKmA7lofuDSkgWX4nkzq68z+SDGZZ/OaUeEUI= Subject key identifier: EF:1D:EC:5B:14:D8:9F:57:D7:C2:EF:C1:A8:6C:BE:1A:B3:F1:2C:AB Authority key identifier: 6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 Certificate issuer: /CN=A91E1EC0/serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft Manifest number: 11 Signing time: Thu 23 Jul 2026 11:09:01 +0000 Manifest this update: Thu 23 Jul 2026 11:09:00 +0000 Manifest next update: Thu 30 Jul 2026 11:09:00 +0000 Files and hashes: 1: bmfAks6I_8_-rcHcpibbZyygdeU.crl (hash: lsdWFnlsQKUN1DpJApOorBBJ7pHPqYm2uZlafGaNdVo=) 2: 333E8C3E6DE511F19EDFEF3F5BA30FBC.roa (hash: Ue3cv5Sg9mqnsZPT5Yk4nejtqsmOyqU5EUN+qBTBPzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC0, serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Validity Not Before: Jul 23 11:09:00 2026 GMT Not After : Jul 30 11:09:00 2026 GMT Subject: CN=6a61f64d-339d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d2:62:0a:5d:77:eb:65:57:5c:31:71:c1:8f: 69:ab:aa:ae:14:17:9a:98:9b:05:39:c9:e0:33:5d: 25:4b:f4:84:f2:50:02:3d:44:62:d2:42:26:eb:07: 5b:51:51:0c:ee:71:91:61:d6:16:48:3f:b7:fc:a3: 38:38:f8:90:f9:89:84:4c:32:8a:c5:72:ae:9f:82: a3:09:af:8d:6b:af:f2:6b:9f:b2:6b:d5:cb:70:8d: b9:b1:bc:28:84:68:c9:a7:a2:d3:58:f8:50:4b:d4: af:8e:d0:65:03:25:96:0f:ec:9c:da:cc:7f:94:b5: 18:42:cd:c7:43:ca:8d:8f:0c:7b:9a:fa:52:40:09: 1e:e2:c4:f1:2a:ec:0d:f1:ff:96:f0:ad:be:1a:80: 8b:24:2d:24:e4:51:14:d4:a1:f1:f6:25:b3:a6:36: 1a:98:bf:31:f3:8c:99:32:60:fc:91:5a:d1:e4:29: ec:68:7f:82:da:6a:df:7d:ef:05:4f:4c:01:21:5d: 49:38:95:54:ac:ef:76:ff:be:98:7e:dc:7e:7b:f4: 98:b8:10:ac:ca:e5:e0:96:d8:4d:fb:93:d8:8a:4f: 52:26:03:ff:0a:77:a0:a6:df:b6:b2:a8:d6:4b:f9: a0:dd:93:ad:75:0a:2a:d4:c5:79:5a:e3:b7:54:ad: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:EC:5B:14:D8:9F:57:D7:C2:EF:C1:A8:6C:BE:1A:B3:F1:2C:AB X509v3 Authority Key Identifier: keyid:6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:93:17:f3:f8:da:db:dd:87:f7:c8:17:93:89:21:bd:ad: f0:f2:1e:76:45:82:5d:a5:04:9c:a1:f9:ef:c4:51:a0:1e:ed: 69:96:10:93:e2:c4:a5:40:5e:be:b6:a9:f8:e3:b6:ed:16:45: 65:b8:44:97:b2:9c:14:82:0c:51:22:ec:bc:51:e6:1a:55:d4: eb:0c:58:d5:fc:05:6f:34:26:b5:c8:7b:44:fc:91:5e:e3:fe: 0e:cd:90:b4:49:35:1e:09:f7:dc:ff:a0:53:14:f4:f4:26:b6: ab:f3:0f:10:63:16:60:bf:e5:58:1c:19:88:df:67:00:7a:ba: ed:e6:6f:bf:b6:3e:9a:e3:c8:ac:d2:b3:11:e1:9f:d6:87:81: 10:94:c3:6a:89:fb:fa:a0:5f:39:2f:92:c4:22:e8:80:14:0a: 02:45:d8:25:72:0c:6e:82:c5:40:c5:7a:6f:16:ea:dd:75:8b: b5:f4:25:a8:6f:6c:8f:b3:23:d9:74:f8:71:f3:7b:ce:21:1e: 7a:70:4a:8f:c4:c8:89:9b:6c:75:78:65:1d:25:25:c1:a4:ca: d9:b2:51:ff:b1:79:1b:08:f9:76:4a:c5:1f:e4:be:02:74:a1: ae:e0:60:cb:8a:6d:b9:16:ed:a0:f3:ae:68:bf:03:2c:ae:01: 26:ee:bc:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDMDExMC8GA1UEBRMoNkU2N0MwOTJDRTg4RkZDRkZFQURDMURDQTYyNkRCNjcy Q0EwNzVFNTAeFw0yNjA3MjMxMTA5MDBaFw0yNjA3MzAxMTA5MDBaMBgxFjAUBgNV BAMTDTZhNjFmNjRkLTMzOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm0mIKXXfrZVdcMXHBj2mrqq4UF5qYmwU5yeAzXSVL9ITyUAI9RGLSQibrB1tR UQzucZFh1hZIP7f8ozg4+JD5iYRMMorFcq6fgqMJr41rr/Jrn7Jr1ctwjbmxvCiE aMmnotNY+FBL1K+O0GUDJZYP7JzazH+UtRhCzcdDyo2PDHua+lJACR7ixPEq7A3x /5bwrb4agIskLSTkURTUofH2JbOmNhqYvzHzjJkyYPyRWtHkKexof4Laat997wVP TAEhXUk4lVSs73b/vph+3H579Ji4EKzK5eCW2E37k9iKT1ImA/8Kd6Cm37ayqNZL +aDdk611CirUxXla47dUrUFDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7x3sWxTY n1fXwu/BqGy+GrPxLKswHwYDVR0jBBgwFoAUbmfAks6I/8/+rcHcpibbZyygdeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0U5MDJDREM0NkRF NDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhfLXJjSGNwaWJiWnl5Z2Rl VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYm1mQWtzNklfOF8tcmNIY3BpYmJaeXlnZGVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RUMwL0U5MDJDREM0NkRFNDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhf LXJjSGNwaWJiWnl5Z2RlVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADaJMX8/ja292H98gXk4khva3w8h52RYJdpQScofnvxFGgHu1plhCT4sSlQF6+ tqn447btFkVluESXspwUggxRIuy8UeYaVdTrDFjV/AVvNCa1yHtE/JFe4/4OzZC0 STUeCffc/6BTFPT0Jrar8w8QYxZgv+VYHBmI32cAerrt5m+/tj6a48is0rMR4Z/W h4EQlMNqifv6oF85L5LEIuiAFAoCRdglcgxugsVAxXpvFurddYu19CWob2yPsyPZ dPhx83vOIR56cEqPxMiJm2x1eGUdJSXBpMrZslH/sXkbCPl2SsUf5L4CdKGu4GDL im25Fu2g865ovwMsrgEm7rxi -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:25 2026 by rpki-client