$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: qex+D2ZzXFnR6BC+N7uJmNqWThubQQE4urOtgbdGSaM= Subject key identifier: 5C:D9:23:FA:45:D3:3D:D1:14:4C:F1:FE:FB:55:21:6E:1B:96:DC:FA Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 028D Signing time: Tue 27 Oct 2026 02:02:54 +0000 Manifest this update: Tue 27 Oct 2026 02:02:53 +0000 Manifest next update: Tue 03 Nov 2026 02:02:53 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: qZCJ0BiQIUH7h1ajMNIJYVXoudNcfvjP79ZL5bOdFAc=) 2: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=) 3: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Oct 27 02:02:53 2026 GMT Not After : Nov 3 02:02:53 2026 GMT Subject: CN=6ae0064e-4ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:1f:7d:93:50:d8:06:c8:e3:e2:09:56:bd: 3e:50:b6:9c:b1:94:f1:ee:70:a3:51:cd:3f:0f:28: 4c:89:84:12:02:16:a8:80:d4:f9:59:a9:e6:65:9e: e9:f3:89:64:9e:c7:a0:1e:d9:0f:65:f2:5d:30:e9: 36:73:92:b3:f3:92:60:89:88:c0:b4:cb:e8:4e:19: 7d:03:15:f3:e7:7d:ea:1c:10:6c:ed:1b:90:d5:86: b8:dd:af:18:07:3d:12:16:0a:1b:a0:52:bf:e0:41: fb:b1:a2:86:13:c4:7e:90:e7:8c:67:ab:ef:32:0c: 6d:05:d0:c5:16:46:3a:2f:a5:89:cc:44:65:01:5e: 8c:ab:22:b8:68:41:d9:b0:97:16:e4:28:e0:89:6d: 06:96:4c:23:db:3f:8d:1c:f2:d7:11:d5:23:0e:a8: fb:85:73:ee:a3:ba:aa:b8:73:d5:f0:45:6e:50:de: 7d:1a:5c:8f:88:5e:53:cc:fa:c9:9f:4e:23:5a:6b: 1e:60:c9:bf:de:58:0c:c3:e8:aa:35:b9:63:7a:13: 38:e9:3b:68:31:d6:95:f3:30:db:f1:8c:cb:3b:a8: 3f:8a:35:49:33:fa:80:50:b6:16:71:d3:76:eb:7f: 91:ca:2b:22:06:9a:eb:ef:3a:0e:82:52:01:cd:32: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:23:FA:45:D3:3D:D1:14:4C:F1:FE:FB:55:21:6E:1B:96:DC:FA X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e6:36:2a:e5:e6:c4:79:46:b2:a0:5b:f1:a6:3f:5f:7b:72: a5:4d:bc:26:ae:84:27:a3:1e:98:0d:78:86:54:24:94:eb:cb: de:88:55:a2:7a:cc:c8:c6:4d:6c:e8:ae:89:97:30:ce:0c:7e: a8:11:3f:e8:18:03:8e:f7:b0:41:2c:ae:32:6d:35:a8:60:2b: 54:52:bc:9c:14:25:ca:2b:5c:3e:5b:2b:50:53:42:4f:c5:e5: 4f:d2:da:55:93:5e:d6:07:b2:43:03:a4:cd:c4:81:70:d8:4c: 6e:58:04:1d:6b:bd:98:15:6f:ef:f4:e1:f9:74:f3:bc:92:1e: 1b:31:67:6f:b5:01:35:31:9a:4a:8e:0c:cf:b5:87:34:13:1a: 47:da:53:fd:d6:e9:58:a8:36:fd:3c:3f:3b:89:5b:3e:5d:91: 87:96:75:92:b8:fe:12:b5:30:7e:29:74:54:85:13:25:50:ab: ce:c1:76:42:9a:88:53:37:6a:ec:2a:98:a4:37:5d:4a:ef:25: d0:02:fb:9a:31:e4:2d:58:6d:36:b0:dd:1f:70:81:d5:66:71: 99:e8:38:8c:7a:12:41:fe:a1:b6:ee:1a:43:c1:e4:2d:4e:e5: fa:84:c3:cd:5e:fd:00:51:fb:89:a8:80:76:1e:5e:13:ff:e2: 8f:8d:fe:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjYxMDI3MDIwMjUzWhcNMjYxMTAzMDIwMjUzWjAYMRYwFAYD VQQDEw02YWUwMDY0ZS00ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y4ffZNQ2AbI4+IJVr0+ULacsZTx7nCjUc0/DyhMiYQSAhaogNT5WanmZZ7p 84lknsegHtkPZfJdMOk2c5Kz85JgiYjAtMvoThl9AxXz533qHBBs7RuQ1Ya43a8Y Bz0SFgoboFK/4EH7saKGE8R+kOeMZ6vvMgxtBdDFFkY6L6WJzERlAV6MqyK4aEHZ sJcW5CjgiW0Glkwj2z+NHPLXEdUjDqj7hXPuo7qquHPV8EVuUN59GlyPiF5TzPrJ n04jWmseYMm/3lgMw+iqNbljehM46TtoMdaV8zDb8YzLO6g/ijVJM/qAULYWcdN2 63+RyisiBprr7zoOglIBzTJ6IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzZI/pF 0z3RFEzx/vtVIW4bltz6MB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+Y2KuXmxHlGsqBb8aY/X3typU28Jq6EJ6MemA14hlQklOvL3ohVonrMyMZN bOiuiZcwzgx+qBE/6BgDjvewQSyuMm01qGArVFK8nBQlyitcPlsrUFNCT8XlT9La VZNe1geyQwOkzcSBcNhMblgEHWu9mBVv7/Th+XTzvJIeGzFnb7UBNTGaSo4Mz7WH NBMaR9pT/dbpWKg2/Tw/O4lbPl2Rh5Z1krj+ErUwfil0VIUTJVCrzsF2QpqIUzdq 7CqYpDddSu8l0AL7mjHkLVhtNrDdH3CB1WZxmeg4jHoSQf6htu4aQ8HkLU7l+oTD zV79AFH7iaiAdh5eE//ij43+MA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:12:56 2026 by rpki-client