$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: Rvui9khvIRcox8lAIS40GuahDLjRkULrKa5nQ1DjoLw= Subject key identifier: 70:B2:53:69:9C:8D:A3:99:70:DA:91:BB:6D:36:57:A5:2B:63:7E:EB Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 029C Signing time: Thu 21 May 2026 01:41:03 +0000 Manifest this update: Thu 21 May 2026 01:41:03 +0000 Manifest next update: Thu 28 May 2026 01:41:03 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: hM/mu8omviPlMNhYeDoHlpvf+vxvNaWcrCbAUzoji3U=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: tvqlcJCmAFNM8ul/lcMi6vNrt3BBFQygy7dURzB2DO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: May 21 01:41:03 2026 GMT Not After : May 28 01:41:03 2026 GMT Subject: CN=6a0e62af-c8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:c0:b2:97:93:c3:56:f1:47:3f:43:0c:68: 9e:53:2d:9d:ab:f6:4a:d8:39:d5:5f:78:f1:2b:a6: dc:97:83:10:c1:fa:a5:dc:cf:24:8e:f1:a1:65:89: 4b:4c:25:44:a8:50:1d:b9:21:e1:a9:81:3a:00:8c: a2:9a:a5:c5:55:6e:97:00:13:15:b3:9e:b6:fc:81: 57:df:a0:08:b3:ad:79:09:85:24:12:dd:07:21:26: 33:08:6e:0c:e3:ad:d2:2d:17:3c:92:cf:02:6f:4e: ed:4d:35:a7:42:fe:c6:85:fa:e0:90:e7:b7:26:08: 33:66:39:a3:a4:6c:40:e3:39:7e:92:ec:30:6e:6c: a2:d7:6d:d2:6e:27:80:08:40:4e:67:ef:bc:21:47: 5f:be:98:3a:92:28:00:cd:46:f1:9d:c5:63:7c:19: 2a:2d:f8:b1:4a:25:64:f2:57:2e:a3:88:16:12:70: 73:ea:5e:6a:21:cd:9e:a4:f4:68:bb:f1:77:8b:89: 2c:2f:fd:85:da:d0:5c:27:dd:1a:b2:f7:b3:1a:35: 67:cc:9c:e6:d5:4a:e0:02:c4:c4:db:4d:76:9d:a6: 0d:c0:a7:15:ce:06:ed:a0:30:a1:b4:a4:10:94:ae: 34:f0:ca:57:97:41:42:73:3c:2d:24:df:17:60:a8: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B2:53:69:9C:8D:A3:99:70:DA:91:BB:6D:36:57:A5:2B:63:7E:EB X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:55:ee:c7:20:6c:49:58:3a:69:7d:79:f7:d6:f2:30:a7:e9: c4:47:25:c7:ae:7c:c8:10:45:50:52:f8:20:66:49:27:49:81: c8:c7:c2:15:95:0c:90:85:12:ff:79:64:0c:36:15:6c:78:27: ff:a1:90:66:f4:96:36:77:e7:c4:38:09:b5:98:ae:ef:3b:0b: d8:4a:1e:ba:4a:e7:a9:7c:d8:4d:a7:76:34:3f:3a:eb:3b:54: e7:57:54:5b:f1:de:10:24:ea:6c:98:e6:7f:3a:96:f2:5f:d9: 82:86:32:b8:80:e0:6e:97:6c:cc:5c:08:f7:ee:a9:66:8f:98: 05:be:d1:d0:ff:ec:7f:82:44:65:7d:a5:cd:93:10:20:3d:43: 3b:23:8d:ff:bf:e8:76:ae:3a:eb:bf:df:7e:94:3e:b8:b4:39: 62:ab:a7:d4:8f:4d:aa:b3:68:3f:5b:8f:c5:5b:0e:aa:c9:20: b4:6e:f8:08:81:37:48:26:d5:4f:88:24:e2:99:b0:48:f5:72: 2a:08:cb:f0:85:10:f3:79:5f:25:cc:b5:c8:7d:aa:e1:a6:c8: bc:21:e3:d3:fe:8d:fd:e2:11:a1:74:ed:0c:67:6a:95:90:3b: 2f:83:15:f9:45:0f:29:f8:c3:af:6e:ff:f5:43:27:00:52:1b: fa:96:38:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjYwNTIxMDE0MTAzWhcNMjYwNTI4MDE0MTAzWjAYMRYwFAYD VQQDEw02YTBlNjJhZi1jOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rzAspeTw1bxRz9DDGieUy2dq/ZK2DnVX3jxK6bcl4MQwfql3M8kjvGhZYlL TCVEqFAduSHhqYE6AIyimqXFVW6XABMVs562/IFX36AIs615CYUkEt0HISYzCG4M 463SLRc8ks8Cb07tTTWnQv7GhfrgkOe3JggzZjmjpGxA4zl+kuwwbmyi123SbieA CEBOZ++8IUdfvpg6kigAzUbxncVjfBkqLfixSiVk8lcuo4gWEnBz6l5qIc2epPRo u/F3i4ksL/2F2tBcJ90asvezGjVnzJzm1UrgAsTE2012naYNwKcVzgbtoDChtKQQ lK408MpXl0FCczwtJN8XYKj3MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCyU2mc jaOZcNqRu202V6UrY37rMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJFXuxyBsSVg6aX1599byMKfpxEclx658yBBFUFL4IGZJJ0mByMfCFZUMkIUS /3lkDDYVbHgn/6GQZvSWNnfnxDgJtZiu7zsL2EoeukrnqXzYTad2ND866ztU51dU W/HeECTqbJjmfzqW8l/ZgoYyuIDgbpdszFwI9+6pZo+YBb7R0P/sf4JEZX2lzZMQ ID1DOyON/7/odq4667/ffpQ+uLQ5Yqun1I9NqrNoP1uPxVsOqskgtG74CIE3SCbV T4gk4pmwSPVyKgjL8IUQ83lfJcy1yH2q4abIvCHj0/6N/eIRoXTtDGdqlZA7L4MV +UUPKfjDr27/9UMnAFIb+pY4uA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:48 2026 by rpki-client