$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: 31MxxEBgp0O1Qmb/pfgmCKs8T7D7JvKaQT5i/QsxNQw= Subject key identifier: A3:13:C9:6E:7D:F8:42:A1:53:8E:32:4F:5C:9B:B9:A3:38:07:C0:61 Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1B8D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1B75 Signing time: Wed 22 Jul 2026 15:44:03 +0000 Manifest this update: Wed 22 Jul 2026 15:44:03 +0000 Manifest next update: Wed 29 Jul 2026 15:44:03 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: dsvzb78J8aRn4V9lk8yzzLtINCH53WBR2NvChKRUgi4=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7053 (0x1b8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Jul 22 15:44:03 2026 GMT Not After : Jul 29 15:44:03 2026 GMT Subject: CN=6a60e543-7b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:0e:07:98:8d:d5:b7:54:04:a1:90:8d:ac: 8d:fc:71:e5:18:82:9b:4f:98:67:17:0f:98:e3:99: 15:91:aa:33:7e:1b:47:32:47:e4:dd:ce:65:d7:92: cf:48:16:67:64:ee:7c:f9:b0:eb:f6:e2:5a:f2:ed: b9:35:a7:a4:2d:f1:1e:5e:2e:10:28:43:5b:57:db: 68:d2:20:5d:83:2e:c9:17:69:84:64:b5:cd:b9:36: 98:62:fa:6d:45:9a:04:bc:83:48:18:1a:11:58:6d: 46:aa:ee:42:2e:56:50:e7:3b:d0:09:84:39:fe:ba: 9c:5f:e0:3d:db:75:06:3a:c6:a7:b2:ce:fa:43:99: 95:b7:fd:f9:bc:62:40:2b:a2:88:56:16:2d:90:15: 67:1e:34:a6:de:d6:1e:b6:15:89:35:74:92:a7:69: bf:a8:b9:d8:86:c6:34:ab:97:a9:4e:4f:30:96:a3: 46:4b:6b:c9:03:eb:1e:9c:6c:3e:a7:a8:1c:43:19: ab:15:05:c2:40:e9:bb:f3:b0:d8:12:11:b1:be:96: 39:7e:86:1b:f6:85:af:5a:91:b4:2f:94:9a:98:2b: fd:34:e7:71:8c:92:07:c7:9b:75:21:be:0d:4f:00: 7d:78:a7:ba:b8:24:10:c9:bb:3c:75:1e:8f:1d:36: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:C9:6E:7D:F8:42:A1:53:8E:32:4F:5C:9B:B9:A3:38:07:C0:61 X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ca:74:a2:f5:db:8f:f3:23:7b:3a:ba:e7:28:7e:99:dc:90: 65:2b:c3:ca:77:07:dd:c3:45:d5:0a:b2:03:34:f0:3f:21:71: 02:64:fa:22:09:06:be:e6:05:ca:81:e3:4a:41:02:b7:10:d1: c1:63:63:05:8a:d6:5f:38:5f:84:a4:6f:d0:03:60:d3:38:4c: 15:4f:e3:0a:70:1e:b5:09:3c:c0:02:bb:e2:6b:30:a6:ac:0d: d5:7b:a4:56:df:56:98:0d:84:0c:c6:94:85:8a:32:e7:0f:a8: ef:42:31:06:0e:35:da:6a:b5:e6:0a:59:3e:6d:35:2c:64:9d: 09:a4:a5:4d:cd:de:4d:b5:4b:81:5d:15:d8:94:69:6a:3e:eb: 90:9a:ee:21:b5:3b:39:de:8d:74:6c:21:53:84:e9:e5:bb:51: dd:0e:84:eb:0d:50:f7:41:ee:0e:da:54:8e:90:9f:70:e5:26: 8a:2d:4c:d6:7b:a1:7d:3b:c0:d4:00:fb:b7:d7:bb:e5:3d:d0: 56:8b:14:be:65:45:bf:39:b8:94:b7:bc:e8:f0:8a:36:fb:2d: 96:bd:f7:91:57:ff:92:b3:99:ab:85:9b:6d:e7:ea:c1:1a:47: c6:d9:66:57:c9:0d:28:35:d2:7d:a0:18:34:eb:58:dc:b6:29: ba:eb:b6:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYwNzIyMTU0NDAzWhcNMjYwNzI5MTU0NDAzWjAYMRYwFAYD VQQDEw02YTYwZTU0My03YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz34OB5iN1bdUBKGQjayN/HHlGIKbT5hnFw+Y45kVkaozfhtHMkfk3c5l15LP SBZnZO58+bDr9uJa8u25NaekLfEeXi4QKENbV9to0iBdgy7JF2mEZLXNuTaYYvpt RZoEvINIGBoRWG1Gqu5CLlZQ5zvQCYQ5/rqcX+A923UGOsanss76Q5mVt/35vGJA K6KIVhYtkBVnHjSm3tYethWJNXSSp2m/qLnYhsY0q5epTk8wlqNGS2vJA+senGw+ p6gcQxmrFQXCQOm787DYEhGxvpY5foYb9oWvWpG0L5SamCv9NOdxjJIHx5t1Ib4N TwB9eKe6uCQQybs8dR6PHTaCYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMTyW59 +EKhU44yT1ybuaM4B8BhMB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANsp0ovXbj/Mjezq65yh+mdyQZSvDyncH3cNF1QqyAzTwPyFxAmT6IgkGvuYF yoHjSkECtxDRwWNjBYrWXzhfhKRv0ANg0zhMFU/jCnAetQk8wAK74mswpqwN1Xuk Vt9WmA2EDMaUhYoy5w+o70IxBg412mq15gpZPm01LGSdCaSlTc3eTbVLgV0V2JRp aj7rkJruIbU7Od6NdGwhU4Tp5btR3Q6E6w1Q90HuDtpUjpCfcOUmii1M1nuhfTvA 1AD7t9e75T3QVosUvmVFvzm4lLe86PCKNvstlr33kVf/krOZq4WbbefqwRpHxtlm V8kNKDXSfaAYNOtY3LYpuuu2Tg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:12:45 2026 by rpki-client