$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json) Hash identifier: XSfX0lNjwAT+tBO+xgsyN51xGaWKXPEqTgX6jZ5CDIU= Subject key identifier: 7B:A8:52:D8:D0:EA:A6:29:15:10:D7:1C:5E:3A:AD:B3:71:A1:B4:04 Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 26F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft Manifest number: 26D9 Signing time: Thu 16 Jul 2026 15:43:08 +0000 Manifest this update: Thu 16 Jul 2026 15:43:07 +0000 Manifest next update: Thu 23 Jul 2026 15:43:07 +0000 Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: baVWB2q2Jzxn4pRbyg42zOfzROnJ8MtBwq1Qk1ap63k=) 2: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (hash: stk74SV6j9y9+8KC9a1Q22LQGIi2kHQ11+JPCtMpbPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9973 (0x26f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Jul 16 15:43:07 2026 GMT Not After : Jul 23 15:43:07 2026 GMT Subject: CN=6a58fc0c-b1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:d9:e1:83:07:06:48:df:95:a1:20:ad:11: 69:dc:b6:c7:11:1c:12:69:68:8f:e9:e9:5d:b4:8e: d4:8e:e2:79:a1:88:35:48:67:c7:c4:df:14:eb:d9: e7:64:bb:e0:d1:c7:6f:bf:63:3e:24:c2:84:6e:3c: 31:08:be:2e:41:e4:b2:d6:ae:91:12:16:e8:30:49: 81:0a:90:61:56:af:8c:12:af:0e:df:92:c0:7a:34: 01:41:c8:06:a4:2a:7b:77:ce:d0:71:b4:bc:59:2b: 34:f9:ed:3a:fa:2f:7a:f8:af:ce:e0:01:76:ff:23: 4f:8f:2c:15:e0:25:12:fa:11:f6:6d:ae:05:d6:89: 3b:92:f8:37:1a:4e:ea:5c:f4:6c:cd:fd:b3:e9:cf: ac:2d:fc:e1:a4:7c:e2:3e:64:87:c6:d3:5b:94:53: 8e:fb:1a:0e:35:f8:72:41:85:7a:6f:0e:84:8b:da: e8:c2:f7:ca:7c:a6:f9:23:43:7c:66:75:18:ac:19: 7b:3e:19:7a:d9:97:7e:97:3b:19:db:ca:5e:18:b0: b9:a6:06:be:36:42:8f:e2:95:7c:dc:0e:3c:0f:e0: fa:6c:5e:d2:9f:51:11:bb:cc:c4:b0:ea:39:5a:10: 49:e8:de:af:c8:9a:c9:7a:08:80:7c:cf:01:84:d9: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A8:52:D8:D0:EA:A6:29:15:10:D7:1C:5E:3A:AD:B3:71:A1:B4:04 X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7c:d2:e9:03:2b:1a:2b:e1:91:9f:dd:16:39:72:4f:87:72: 3a:7c:38:be:73:00:48:44:08:93:b3:03:7c:c5:71:bd:9e:49: 02:92:43:27:cc:82:3b:66:2f:d6:be:97:1e:10:88:12:bc:6c: 53:a8:74:62:28:cd:02:be:1f:8c:31:29:34:92:12:c0:bd:00: d7:67:f3:a2:d1:bd:55:41:85:c3:ac:22:2c:2d:22:1d:b4:f8: 8b:c9:93:51:3a:98:3b:d0:82:16:5e:f8:2a:a3:e4:7a:5e:39: ef:75:4a:cc:11:70:07:b5:2d:2c:90:db:62:ad:44:17:c1:67: 96:c4:05:e1:14:ab:23:ac:27:2c:db:a5:9c:cd:60:d4:90:05: b9:df:34:49:17:4c:65:8e:3d:b0:4a:d8:c1:0f:a2:bb:2c:16: f5:c9:63:e5:f9:b3:8d:72:1c:38:6c:1f:39:53:0c:10:30:50: 9e:69:37:64:a3:0f:08:a6:b2:68:a5:e8:e1:a7:8c:f9:29:b9: 51:e0:9e:5a:87:f7:aa:ab:b9:fa:52:13:a1:97:e2:12:5f:9d: 73:4e:33:05:a8:e3:bc:be:55:89:20:61:92:d4:69:c7:52:26: 1f:44:50:73:c8:a7:c2:d8:37:e2:fd:46:4e:89:89:d5:41:2e: e6:40:92:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjYwNzE2MTU0MzA3WhcNMjYwNzIzMTU0MzA3WjAYMRYwFAYD VQQDEw02YTU4ZmMwYy1iMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s7Z4YMHBkjflaEgrRFp3LbHERwSaWiP6eldtI7UjuJ5oYg1SGfHxN8U69nn ZLvg0cdvv2M+JMKEbjwxCL4uQeSy1q6REhboMEmBCpBhVq+MEq8O35LAejQBQcgG pCp7d87QcbS8WSs0+e06+i96+K/O4AF2/yNPjywV4CUS+hH2ba4F1ok7kvg3Gk7q XPRszf2z6c+sLfzhpHziPmSHxtNblFOO+xoONfhyQYV6bw6Ei9rowvfKfKb5I0N8 ZnUYrBl7Phl62Zd+lzsZ28peGLC5pga+NkKP4pV83A48D+D6bF7Sn1ERu8zEsOo5 WhBJ6N6vyJrJegiAfM8BhNlpjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuoUtjQ 6qYpFRDXHF46rbNxobQEMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDBFNi82NjA3NDJDOEZEMjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lf YnpETlZkUXpoTkVtaEllMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHzS6QMrGivhkZ/dFjlyT4dyOnw4vnMASEQIk7MDfMVxvZ5JApJDJ8yCO2Yv 1r6XHhCIErxsU6h0YijNAr4fjDEpNJISwL0A12fzotG9VUGFw6wiLC0iHbT4i8mT UTqYO9CCFl74KqPkel4573VKzBFwB7UtLJDbYq1EF8FnlsQF4RSrI6wnLNulnM1g 1JAFud80SRdMZY49sErYwQ+iuywW9clj5fmzjXIcOGwfOVMMEDBQnmk3ZKMPCKay aKXo4aeM+Sm5UeCeWof3qqu5+lIToZfiEl+dc04zBajjvL5ViSBhktRpx1ImH0RQ c8inwtg34v1GTomJ1UEu5kCSDA== -----END CERTIFICATE-----Generated at Sat Jul 18 09:26:36 2026 by rpki-client