$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft File: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json) Hash identifier: 3s9bxgLm9teRzOkoiCPT8qs68F8Qeww1iCp7t9NmRvk= Subject key identifier: C0:D0:8F:FE:11:70:FE:F3:0F:4E:1C:06:F0:23:A2:FA:0A:AC:E0:D0 Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74 Certificate issuer: /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft Manifest number: 07E3 Signing time: Sat 04 Jul 2026 21:34:26 +0000 Manifest this update: Sat 04 Jul 2026 21:34:25 +0000 Manifest next update: Sat 11 Jul 2026 21:34:25 +0000 Files and hashes: 1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: ifqT593+10WyfK6VG0mcP9R2VJ2H2Y4gc3AvJtBpU64=) 2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: 7C/HtXFs/z0QMgDj00vYWk0uNQg1uQuoBZV2bap4jLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 21:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74 Validity Not Before: Jul 4 21:34:25 2026 GMT Not After : Jul 11 21:34:25 2026 GMT Subject: CN=6a497c62-2a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:18:71:b5:b4:0b:2f:ee:ee:22:19:ee:48: db:db:f0:01:72:96:09:4e:47:0a:32:80:bd:12:e9: b9:71:94:1e:3a:2b:24:b3:e6:7f:15:ce:2f:6c:01: 3e:27:a8:59:d9:25:06:9e:19:03:d3:33:4f:ff:79: b2:9d:98:81:ca:dd:74:c6:ef:e0:c9:1e:c8:fe:c5: 83:be:1f:93:50:9f:05:f2:28:3d:b7:62:be:0a:34: 5a:ae:5a:84:ea:e4:59:9f:4a:01:72:6f:6d:78:1b: 46:13:a4:f4:ed:35:e2:dc:66:a4:e3:86:e1:14:17: 29:f3:29:27:d2:48:80:78:2b:bc:67:7e:a1:b3:22: fe:96:f5:0c:83:9d:0d:45:9d:15:ed:d8:48:2c:a1: 5d:bf:9b:ea:b0:da:43:6e:6d:2b:2b:3c:76:5f:87: e7:10:1f:f3:47:72:48:47:61:a6:66:c1:19:2a:aa: 3e:24:26:69:88:b6:9a:93:d1:6e:c0:44:07:6c:3e: 37:f8:03:ad:31:52:e4:87:10:ed:99:2c:25:f7:0e: b7:45:7c:60:40:5a:7e:18:61:01:5b:58:1f:1d:5d: eb:c7:da:db:2f:4c:25:1c:83:b0:12:95:84:c8:9b: 6b:56:55:cd:90:29:53:40:f2:16:61:ee:d1:8e:1d: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:8F:FE:11:70:FE:F3:0F:4E:1C:06:F0:23:A2:FA:0A:AC:E0:D0 X509v3 Authority Key Identifier: keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:00:b7:ae:1d:f5:4f:d9:43:77:cc:ed:2e:30:49:75:1f:6c: 48:c7:6a:35:90:e4:64:3b:47:77:cb:3b:06:72:3a:4c:d0:0b: 36:98:35:f1:78:ac:bb:4c:0d:95:ed:2b:bb:d2:9b:06:5d:cb: 11:15:3b:a0:92:7f:a3:a6:a9:b6:4d:04:b8:6f:58:4a:dd:9b: 89:42:5f:bf:59:0f:0a:74:af:ae:12:5e:53:c8:98:75:38:df: 5d:8f:32:c1:e3:08:8f:af:bb:fb:05:6e:b8:fa:b5:a2:69:e4: f1:b4:0e:b9:be:48:4d:0d:ef:52:21:fb:8c:59:e1:46:ac:d3: 3c:d7:e8:fe:21:19:96:a6:36:50:a5:39:16:f6:d4:52:f3:91: 81:34:d5:e6:77:d0:32:2d:de:aa:42:d4:c0:b0:fb:58:03:9e: e8:d8:d0:73:98:ae:17:cb:b0:41:7b:cc:9b:08:0c:bc:5b:94: ea:de:d7:ba:8f:86:c0:14:96:f9:60:65:84:e1:68:7c:9d:f6: 7d:78:f1:fb:24:fb:9d:a5:9c:e8:45:c0:32:c0:a3:85:08:79: 67:0d:3f:f6:81:4d:58:7d:07:f6:c9:0d:8d:e9:04:bb:82:17: 74:5a:54:fb:6c:2b:6e:50:4c:e5:5c:b1:b8:5d:72:61:9a:7a: 5c:ed:b8:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyMzIxMTAvBgNVBAUTKDZFMTg0QkUxNDYxMkQ1QTJCNTNDNDk4NzY4NDQ1MDg1 MERCMDJDNzQwHhcNMjYwNzA0MjEzNDI1WhcNMjYwNzExMjEzNDI1WjAYMRYwFAYD VQQDEw02YTQ5N2M2Mi0yYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dgYcbW0Cy/u7iIZ7kjb2/ABcpYJTkcKMoC9Eum5cZQeOisks+Z/Fc4vbAE+ J6hZ2SUGnhkD0zNP/3mynZiByt10xu/gyR7I/sWDvh+TUJ8F8ig9t2K+CjRarlqE 6uRZn0oBcm9teBtGE6T07TXi3Gak44bhFBcp8ykn0kiAeCu8Z36hsyL+lvUMg50N RZ0V7dhILKFdv5vqsNpDbm0rKzx2X4fnEB/zR3JIR2GmZsEZKqo+JCZpiLaak9Fu wEQHbD43+AOtMVLkhxDtmSwl9w63RXxgQFp+GGEBW1gfHV3rx9rbL0wlHIOwEpWE yJtrVlXNkClTQPIWYe7Rjh1+hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDQj/4R cP7zD04cBvAjovoKrODQMB8GA1UdIwQYMBaAFG4YS+FGEtWitTxJh2hEUIUNsCx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjIzMi85NEQ0Qzc0MDNG MEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFhSzFQRW1IYUVSUWhRMndM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JoaEw0VVlTMWFLMVBFbUhhRVJRaFEyd0xIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjIzMi85NEQ0Qzc0MDNGMEQxMUVCQUYxRkNFMjJDNEY5QUUwMi9iaGhMNFVZUzFh SzFQRW1IYUVSUWhRMndMSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtAC3rh31T9lDd8ztLjBJdR9sSMdqNZDkZDtHd8s7BnI6TNALNpg18Xisu0wN le0ru9KbBl3LERU7oJJ/o6aptk0EuG9YSt2biUJfv1kPCnSvrhJeU8iYdTjfXY8y weMIj6+7+wVuuPq1omnk8bQOub5ITQ3vUiH7jFnhRqzTPNfo/iEZlqY2UKU5FvbU UvORgTTV5nfQMi3eqkLUwLD7WAOe6NjQc5iuF8uwQXvMmwgMvFuU6t7Xuo+GwBSW +WBlhOFofJ32fXjx+yT7naWc6EXAMsCjhQh5Zw0/9oFNWH0H9skNjekEu4IXdFpU +2wrblBM5VyxuF1yYZp6XO24WA== -----END CERTIFICATE-----Generated at Sun Jul 5 07:53:13 2026 by rpki-client