$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: dgmFersNOB72Gh6pHjiHCA1bXkK7jHjxlLwJ2yFHLFQ= Subject key identifier: D2:30:A1:3E:0E:EB:9A:1D:14:26:2A:FA:FB:BD:A3:5B:79:41:18:29 Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1BB4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1B9C Signing time: Tue 06 Oct 2026 15:39:59 +0000 Manifest this update: Tue 06 Oct 2026 15:39:58 +0000 Manifest next update: Tue 13 Oct 2026 15:39:58 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: rf8Gbk90eFKx2ez8XPC0TpXGKP/oF/iE6f6BK5AhJw8=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7092 (0x1bb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Oct 6 15:39:58 2026 GMT Not After : Oct 13 15:39:58 2026 GMT Subject: CN=6ac5164f-b0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:d5:d6:bf:36:0f:21:47:c4:24:8a:f4:05: eb:b6:b4:2b:86:20:9f:e6:f6:f6:84:9c:95:12:b2: 05:75:f2:fc:6c:d1:3f:29:1b:2c:99:ed:25:c8:5d: c0:28:f5:cf:99:64:88:ba:70:80:4f:bc:9f:d3:78: 30:ea:2f:38:9c:05:fa:bf:6e:65:53:43:af:68:15: 56:16:8f:a4:a6:22:c0:28:37:22:f0:36:c6:6e:22: e3:1b:1f:a4:80:d0:2f:54:89:6c:a8:19:65:44:65: b4:26:01:48:29:40:a6:f2:cc:08:97:8d:0e:b4:bc: bc:a7:b6:04:6a:b4:81:43:1f:6f:fe:eb:ec:b7:df: e8:07:3a:d6:eb:f5:95:ae:79:76:d9:f4:bf:d7:6b: 4f:fa:9e:0d:80:44:3f:21:ac:05:09:1e:e7:74:ce: f3:5f:be:c0:09:60:8c:ee:f7:ea:93:83:ac:5d:19: 88:a1:d7:24:8f:dd:86:e9:6b:46:ba:7b:97:59:30: 1c:c2:6f:cc:a5:c5:5f:37:be:97:70:dd:ec:8b:55: a4:37:ba:de:b8:6a:28:75:1a:56:9e:43:6b:42:d0: a9:d4:1c:31:c8:b4:83:ee:ec:7c:83:bd:ab:3e:ac: 09:57:0b:f5:ed:43:cb:f8:b3:ae:56:34:1a:30:5f: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:A1:3E:0E:EB:9A:1D:14:26:2A:FA:FB:BD:A3:5B:79:41:18:29 X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:94:25:8b:7b:1c:d0:a5:b6:a0:c5:e3:68:c2:c3:cd:dc:5f: 34:d7:5b:95:69:a6:4e:df:12:1e:92:df:be:bd:cf:61:c9:45: 5a:73:09:3a:f4:62:1e:ba:16:60:63:3c:a3:7f:4b:4e:6b:01: 00:0f:73:df:c3:c7:1e:83:ad:bf:dc:21:eb:a9:5a:5c:02:a8: 7c:c8:88:9b:2b:0f:58:ed:dc:c4:de:03:22:c7:18:d0:12:df: 9f:07:02:dd:03:a3:c0:e0:df:a3:e7:61:f1:b8:01:fa:e8:8f: c8:7a:ba:86:99:4f:49:b9:b4:d4:e6:fb:01:13:28:44:60:7a: 23:89:b9:57:27:60:f8:26:dd:af:d4:23:fe:f1:13:f7:51:56: 8e:ea:19:46:3f:df:23:38:9c:52:b8:b4:f7:89:16:a8:bf:db: 48:62:c6:ed:13:55:f3:b5:75:a8:3f:ff:2e:ed:77:85:db:62: 54:8d:eb:99:a7:6e:e6:d9:19:c3:c4:96:5b:5c:81:98:77:95: ea:33:89:be:ab:18:ee:3c:4c:51:b8:c0:9e:7f:b7:54:2f:4e: 2e:61:46:fd:74:38:11:c9:32:8e:26:f5:30:b2:27:12:a8:27: 37:00:ac:77:b2:5c:f7:5c:56:4d:9c:fc:a6:30:6e:60:49:4f: 74:f2:95:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYxMDA2MTUzOTU4WhcNMjYxMDEzMTUzOTU4WjAYMRYwFAYD VQQDEw02YWM1MTY0Zi1iMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBrV1r82DyFHxCSK9AXrtrQrhiCf5vb2hJyVErIFdfL8bNE/KRssme0lyF3A KPXPmWSIunCAT7yf03gw6i84nAX6v25lU0OvaBVWFo+kpiLAKDci8DbGbiLjGx+k gNAvVIlsqBllRGW0JgFIKUCm8swIl40OtLy8p7YEarSBQx9v/uvst9/oBzrW6/WV rnl22fS/12tP+p4NgEQ/IawFCR7ndM7zX77ACWCM7vfqk4OsXRmIodckj92G6WtG unuXWTAcwm/MpcVfN76XcN3si1WkN7reuGoodRpWnkNrQtCp1BwxyLSD7ux8g72r PqwJVwv17UPL+LOuVjQaMF/pPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIwoT4O 65odFCYq+vu9o1t5QRgpMB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZQli3sc0KW2oMXjaMLDzdxfNNdblWmmTt8SHpLfvr3PYclFWnMJOvRiHroW YGM8o39LTmsBAA9z38PHHoOtv9wh66laXAKofMiImysPWO3cxN4DIscY0BLfnwcC 3QOjwODfo+dh8bgB+uiPyHq6hplPSbm01Ob7ARMoRGB6I4m5Vydg+Cbdr9Qj/vET 91FWjuoZRj/fIzicUri094kWqL/bSGLG7RNV87V1qD//Lu13hdtiVI3rmadu5tkZ w8SWW1yBmHeV6jOJvqsY7jxMUbjAnn+3VC9OLmFG/XQ4Eckyjib1MLInEqgnNwCs d7Jc91xWTZz8pjBuYElPdPKV1A== -----END CERTIFICATE-----Generated at Wed Oct 7 23:39:56 2026 by rpki-client