$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: iRtXFwmp4QxZfRHulXGgsOJhu2cU3ApHI67YkjIueD4= Subject key identifier: 45:66:68:C4:EB:A9:D5:80:56:76:F9:5C:95:0A:07:66:24:98:91:6B Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 0114 Signing time: Tue 21 Jul 2026 07:36:36 +0000 Manifest this update: Tue 21 Jul 2026 07:36:36 +0000 Manifest next update: Tue 28 Jul 2026 07:36:36 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: Re1YZiFODwUhIQPjuksDGUQimKy8BbhBeA/+birqiXs=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Jul 21 07:36:36 2026 GMT Not After : Jul 28 07:36:36 2026 GMT Subject: CN=6a5f2184-8694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:3f:ec:b9:cb:11:24:e4:4b:e3:dd:4c:27: f6:ab:5a:de:0c:b6:b6:e9:ab:4e:34:bb:86:7c:e1: 6d:01:23:c5:cd:86:4b:81:a2:c8:bc:f3:57:cc:d5: cd:ba:4e:fd:0a:26:7b:af:3b:b1:20:10:85:7a:d4: 99:9c:1a:9f:23:53:4e:d8:54:28:88:f7:01:3f:11: 09:c3:97:fb:2a:c9:b9:db:27:b6:1f:43:28:e3:21: 63:8f:59:91:7f:c9:c3:d6:af:87:0d:1c:32:2f:b0: bb:c9:f0:5c:82:bf:7e:d8:6a:9d:4a:9f:b9:58:16: f8:4c:a2:da:b7:60:29:1c:e2:60:56:65:b6:29:d4: bc:cf:d8:81:32:d8:94:57:dd:d9:65:2d:d4:20:a8: 2e:bf:b2:37:78:9e:e3:b0:24:8f:b5:58:99:4c:6c: f5:99:35:fb:2b:04:ea:82:11:9b:73:35:dc:64:9b: 72:de:c9:13:a6:88:ce:90:78:8e:e1:4b:88:9b:12: cf:68:1e:98:1b:12:19:75:f4:cb:43:ae:87:72:b3: 7a:49:52:a0:2b:3b:3a:f0:ef:1c:9f:0b:19:2f:c4: 49:23:af:d5:db:e5:61:15:1d:75:4c:45:f3:b9:32: ed:62:af:1d:a0:e6:0e:74:46:b3:e5:32:f5:7e:50: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:66:68:C4:EB:A9:D5:80:56:76:F9:5C:95:0A:07:66:24:98:91:6B X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:b0:14:4a:02:0e:59:63:a1:97:1e:70:fa:60:91:a2:a4:f1: 01:8e:fa:08:ce:97:68:38:45:fe:8c:03:69:28:7b:95:8c:e2: 42:7d:63:24:27:7b:6b:5b:d4:68:df:03:ff:c0:46:e5:8f:a5: a0:35:8c:ff:4b:d5:d7:db:72:3b:7a:ca:95:70:93:46:54:a7: 89:f9:58:a4:d5:a2:11:dd:3a:66:c8:72:14:66:02:b5:5c:bd: 62:53:17:63:b6:29:09:fe:bc:e1:56:14:f7:65:35:2c:8e:13: 8e:76:fc:86:7e:74:f0:73:d8:4b:d0:9f:3a:c5:4f:6d:68:88: b9:29:08:46:0b:c9:4d:ec:ac:11:20:89:73:86:85:a7:00:4a: 16:68:42:1f:cc:42:08:72:d4:48:71:8d:8b:76:37:7f:02:21: 2a:e4:55:f6:81:69:f1:bc:86:aa:3e:05:df:7c:92:be:7d:9a: 2c:d4:e8:6b:51:3a:7f:8b:cd:b5:5b:a1:5f:66:72:0b:e3:e5: 2c:ce:6e:3f:ee:9b:89:4a:5c:e9:1f:44:a0:34:9e:43:4d:bc: 5e:6d:4a:13:20:aa:f7:37:23:2d:db:7d:47:20:15:0d:f6:ec: 3a:cc:56:b7:d2:e2:ef:90:07:04:48:aa:45:60:46:20:fa:48: ff:62:4f:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjYwNzIxMDczNjM2WhcNMjYwNzI4MDczNjM2WjAYMRYwFAYD VQQDEw02YTVmMjE4NC04Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bY/7LnLESTkS+PdTCf2q1reDLa26atONLuGfOFtASPFzYZLgaLIvPNXzNXN uk79CiZ7rzuxIBCFetSZnBqfI1NO2FQoiPcBPxEJw5f7Ksm52ye2H0Mo4yFjj1mR f8nD1q+HDRwyL7C7yfBcgr9+2GqdSp+5WBb4TKLat2ApHOJgVmW2KdS8z9iBMtiU V93ZZS3UIKguv7I3eJ7jsCSPtViZTGz1mTX7KwTqghGbczXcZJty3skTpojOkHiO 4UuImxLPaB6YGxIZdfTLQ66HcrN6SVKgKzs68O8cnwsZL8RJI6/V2+VhFR11TEXz uTLtYq8doOYOdEaz5TL1flDMGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVmaMTr qdWAVnb5XJUKB2YkmJFrMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu7AUSgIOWWOhlx5w+mCRoqTxAY76CM6XaDhF/owDaSh7lYziQn1jJCd7a1vU aN8D/8BG5Y+loDWM/0vV19tyO3rKlXCTRlSniflYpNWiEd06ZshyFGYCtVy9YlMX Y7YpCf684VYU92U1LI4Tjnb8hn508HPYS9CfOsVPbWiIuSkIRgvJTeysESCJc4aF pwBKFmhCH8xCCHLUSHGNi3Y3fwIhKuRV9oFp8byGqj4F33ySvn2aLNToa1E6f4vN tVuhX2ZyC+PlLM5uP+6biUpc6R9EoDSeQ028Xm1KEyCq9zcjLdt9RyAVDfbsOsxW t9Li75AHBEiqRWBGIPpI/2JPFw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:52:51 2026 by rpki-client