$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json) Hash identifier: efC4IHZqR9Ak7qqHF9IjB+aDVEtsYZTG7Kly9KvDFPo= Subject key identifier: 66:88:C1:25:7A:EB:B1:2D:45:90:1F:06:83:1A:12:B9:49:E2:29:85 Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft Manifest number: 97 Signing time: Tue 23 Jun 2026 07:38:19 +0000 Manifest this update: Tue 23 Jun 2026 07:38:19 +0000 Manifest next update: Tue 30 Jun 2026 07:38:19 +0000 Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: YG+xL9hTI3z8u3TiN3pKErVhhIidQ0zqVkqp+qx3ef0=) 2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 07:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Jun 23 07:38:19 2026 GMT Not After : Jun 30 07:38:19 2026 GMT Subject: CN=6a3a37eb-7235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:fc:4e:35:ea:c6:c2:a3:7d:f2:1b:54:56: 9f:c5:44:64:53:a2:b1:ec:4f:ae:d1:1d:53:71:70: aa:8b:51:de:ba:38:4e:25:c3:17:68:e0:b6:16:16: 02:aa:33:d6:b7:7c:0a:85:45:ae:7c:ba:e9:55:ac: fe:e0:6b:a8:64:a0:ff:9b:71:e0:d2:5c:f7:6e:3f: 06:df:a8:f0:13:8a:84:24:12:a8:9f:92:80:96:b0: 02:5d:f0:06:a3:12:69:2a:fd:2b:87:50:96:a3:bc: b1:51:74:e1:79:87:f9:2b:f2:a6:01:36:ba:7a:07: 04:8e:2f:42:86:bd:3c:5c:0b:e1:75:f6:ea:c2:af: 34:61:e4:30:fd:33:40:73:47:a5:56:86:32:29:f1: 21:8b:bf:39:b5:26:e6:36:df:24:f6:53:1a:88:08: 7b:d7:2e:ac:6a:15:fb:f3:79:84:b4:a0:86:c8:fb: a5:ad:21:e1:43:d1:a8:1c:4b:14:29:7b:a1:ea:22: 59:91:41:65:13:80:d8:a5:5c:18:43:de:d3:a9:85: bd:98:00:0f:ba:a8:cf:92:6f:97:59:5f:1b:0d:21: ad:9c:56:9b:74:32:2e:12:68:df:c2:8a:72:67:b0: 08:e7:24:8c:ca:f7:f8:e4:44:26:71:90:b3:48:a0: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:C1:25:7A:EB:B1:2D:45:90:1F:06:83:1A:12:B9:49:E2:29:85 X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f8:3e:b4:24:7f:db:d3:48:e4:1b:13:bb:94:13:9f:5c:0d: ac:89:1e:63:b2:3e:82:0b:67:21:96:af:10:6f:57:bd:7f:53: 31:50:50:a4:e7:95:57:2b:2d:bc:98:f2:4c:19:bf:8a:97:1e: e2:33:42:43:4b:ed:d9:cf:bf:d0:44:2b:62:85:6a:25:bc:55: a5:dc:2f:6d:75:b5:e2:16:5c:09:7b:27:a8:b8:4b:b2:3b:dd: 10:8d:39:5e:a9:9d:6c:b1:e6:15:a0:72:54:ba:b5:61:f9:03: 52:2d:6a:f2:8a:f2:2a:93:58:0e:1a:22:b4:17:00:0b:bb:8c: 88:53:ac:dc:ae:34:28:47:ca:df:8d:b4:67:6e:ea:e4:d5:b2: 87:f0:17:55:95:59:87:9c:3d:a7:02:af:e3:1d:9f:2d:3a:2b: 20:4d:04:37:db:f4:4c:6e:8e:c8:48:d2:7f:60:be:43:b7:6d: dd:56:22:1e:ac:47:f3:35:c5:61:e7:8a:39:a0:b8:69:b2:17: 2c:c8:73:7d:7a:fc:da:89:57:bf:28:42:ba:ca:09:7e:06:32: 06:b5:8d:d0:3a:77:6a:65:be:ad:bb:04:39:f0:57:86:fe:99: a8:ee:2d:d6:d8:b6:72:ed:60:92:17:64:3d:8c:f9:d5:c8:21: 4d:8d:86:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCQzExMTAvBgNVBAUTKDA0QThGMjhGNTI3RTE4OTE2N0FDQzkwMzBDQkVEQUQ4 QTlDNDE3QjkwHhcNMjYwNjIzMDczODE5WhcNMjYwNjMwMDczODE5WjAYMRYwFAYD VQQDEw02YTNhMzdlYi03MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLf8TjXqxsKjffIbVFafxURkU6Kx7E+u0R1TcXCqi1HeujhOJcMXaOC2FhYC qjPWt3wKhUWufLrpVaz+4GuoZKD/m3Hg0lz3bj8G36jwE4qEJBKon5KAlrACXfAG oxJpKv0rh1CWo7yxUXTheYf5K/KmATa6egcEji9Chr08XAvhdfbqwq80YeQw/TNA c0elVoYyKfEhi785tSbmNt8k9lMaiAh71y6sahX783mEtKCGyPulrSHhQ9GoHEsU KXuh6iJZkUFlE4DYpVwYQ97TqYW9mAAPuqjPkm+XWV8bDSGtnFabdDIuEmjfwopy Z7AI5ySMyvf45EQmcZCzSKBtdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaIwSV6 67EtRZAfBoMaErlJ4imFMB8GA1UdIwQYMBaAFASo8o9SfhiRZ6zJAwy+2tipxBe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEJDMS9EQUM2MDM4ODhD NzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdKRm5yTWtEREw3YTJLbkVG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdK Rm5yTWtEREw3YTJLbkVGN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWvg+tCR/29NI5BsTu5QTn1wNrIkeY7I+ggtnIZavEG9XvX9TMVBQpOeVVyst vJjyTBm/ipce4jNCQ0vt2c+/0EQrYoVqJbxVpdwvbXW14hZcCXsnqLhLsjvdEI05 XqmdbLHmFaByVLq1YfkDUi1q8oryKpNYDhoitBcAC7uMiFOs3K40KEfK3420Z27q 5NWyh/AXVZVZh5w9pwKv4x2fLTorIE0EN9v0TG6OyEjSf2C+Q7dt3VYiHqxH8zXF YeeKOaC4abIXLMhzfXr82olXvyhCusoJfgYyBrWN0Dp3amW+rbsEOfBXhv6ZqO4t 1ti2cu1gkhdkPYz51cghTY2G+g== -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:26 2026 by rpki-client