$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: LrFSMgJbSlbxDUr9QSa0q0xZoCG0C4T4gSy+4JYevj4= Subject key identifier: 52:F7:83:8C:9A:2F:E5:51:5B:E9:BA:2B:F8:81:B6:45:67:74:23:D6 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 08C9 Signing time: Fri 02 Oct 2026 20:46:48 +0000 Manifest this update: Fri 02 Oct 2026 20:46:47 +0000 Manifest next update: Fri 09 Oct 2026 20:46:47 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: TYsmSRNn52um02iZdKMcvmNmmlQ5JZfADB05Vbjq4r4=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: y3+WGycVXCcxOTUDkEuLizVD4mDfYyvsBXt0rLF4sLc=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: ZNyxDwULV1MeMCki7l42XiaJAP3fr52wI1B1ujKjLks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Oct 2 20:46:47 2026 GMT Not After : Oct 9 20:46:47 2026 GMT Subject: CN=6ac01838-fd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:19:ac:b5:b9:b6:a8:63:cf:69:fe:fd:29: c8:8f:59:6c:88:61:90:88:5a:ee:9e:40:7b:3f:92: 96:38:0c:d8:bb:42:dc:67:f9:b7:f3:45:95:17:29: f4:ef:f8:d2:14:e1:9d:b1:94:05:13:0f:73:34:bb: fb:42:43:f2:92:f2:2e:ed:a6:9b:67:89:17:2b:8f: e4:5e:3b:fa:ee:2c:4c:d4:1d:f2:71:92:e0:2f:15: e8:ef:88:54:c3:37:73:10:10:fb:1f:d4:aa:19:e4: 17:4c:f1:c5:04:af:e7:1c:ad:c6:16:f0:3d:2e:fa: f3:a6:d6:d5:71:58:89:e3:93:28:3b:ad:fd:a9:82: ff:68:9b:50:1f:09:0a:30:a2:2e:e3:89:87:dd:f9: c7:90:c1:36:44:60:dc:fd:16:70:96:c3:e4:f4:80: 9f:44:6e:a2:6b:42:5c:a0:a5:0e:4e:e8:8b:46:c5: 3c:c6:1c:76:05:37:df:09:36:7f:41:4c:3f:59:71: 9e:60:da:72:df:b7:27:d8:54:2a:11:6f:5e:cf:e1: bc:13:51:3c:fa:44:0b:22:b0:15:81:32:d1:1c:67: 1b:d7:73:c5:eb:94:c9:43:bf:c4:31:f9:0d:6c:92: af:f9:89:53:f4:bc:5f:bf:fb:6a:08:32:28:21:d2: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:83:8C:9A:2F:E5:51:5B:E9:BA:2B:F8:81:B6:45:67:74:23:D6 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:f0:98:4b:82:e4:7a:f5:b8:bc:ac:9a:ac:9c:fb:2c:28: a7:e0:74:ab:fa:7d:d1:0f:a7:43:4f:30:a0:ad:71:ea:cb:6f: 9d:61:b0:b2:ae:12:45:bb:d4:0d:67:b3:df:0c:1c:2a:43:68: 69:9e:af:a9:c0:40:ba:04:d1:5e:bf:f0:a9:ef:41:37:86:61: 0b:a4:36:99:3d:cd:c0:ce:c7:f3:61:eb:b8:76:68:fb:60:23: 39:04:a1:ae:34:7f:5e:3b:9e:88:83:ed:92:99:d1:ae:87:f1: f1:27:d1:12:af:a9:5d:df:da:2d:b5:47:43:43:80:d8:3d:27: cf:b9:9a:1c:1b:60:72:4f:9a:8b:bf:f9:43:aa:a1:11:a2:9c: c8:34:c4:52:c4:bf:fb:4a:b6:48:99:a5:15:e8:a6:c0:30:b5: 14:73:4f:08:e2:a7:b3:94:47:80:d4:b4:ea:a0:f9:73:5c:c3: 1d:e0:86:4f:c2:e7:01:5a:73:04:56:cc:5a:66:fa:82:4b:1e: da:45:34:61:97:2c:9e:bc:01:aa:a5:5e:9b:9b:09:0a:f1:63: f8:7a:94:a2:cf:62:79:98:c3:72:19:47:9f:b3:1e:4d:6a:9b: 0d:c6:75:fb:0c:b0:0f:b9:91:b6:bb:a3:e9:1d:9c:11:52:5a: 36:a1:08:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjYxMDAyMjA0NjQ3WhcNMjYxMDA5MjA0NjQ3WjAYMRYwFAYD VQQDEw02YWMwMTgzOC1mZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj2kZrLW5tqhjz2n+/SnIj1lsiGGQiFrunkB7P5KWOAzYu0LcZ/m380WVFyn0 7/jSFOGdsZQFEw9zNLv7QkPykvIu7aabZ4kXK4/kXjv67ixM1B3ycZLgLxXo74hU wzdzEBD7H9SqGeQXTPHFBK/nHK3GFvA9LvrzptbVcViJ45MoO639qYL/aJtQHwkK MKIu44mH3fnHkME2RGDc/RZwlsPk9ICfRG6ia0JcoKUOTuiLRsU8xhx2BTffCTZ/ QUw/WXGeYNpy37cn2FQqEW9ez+G8E1E8+kQLIrAVgTLRHGcb13PF65TJQ7/EMfkN bJKv+YlT9Lxfv/tqCDIoIdLfCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL3g4ya L+VRW+m6K/iBtkVndCPWMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgOPwmEuC5Hr1uLysmqyc+ywop+B0q/p90Q+nQ08woK1x6stvnWGwsq4SRbvU DWez3wwcKkNoaZ6vqcBAugTRXr/wqe9BN4ZhC6Q2mT3NwM7H82HruHZo+2AjOQSh rjR/XjueiIPtkpnRrofx8SfREq+pXd/aLbVHQ0OA2D0nz7maHBtgck+ai7/5Q6qh EaKcyDTEUsS/+0q2SJmlFeimwDC1FHNPCOKns5RHgNS06qD5c1zDHeCGT8LnAVpz BFbMWmb6gkse2kU0YZcsnrwBqqVem5sJCvFj+HqUos9ieZjDchlHn7MeTWqbDcZ1 +wywD7mRtruj6R2cEVJaNqEI9A== -----END CERTIFICATE-----Generated at Sat Oct 3 20:29:00 2026 by rpki-client