$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json) Hash identifier: RMMmn3FK4jkKGAxA+f0hVSbCFNo2xvu3usNwemQMwlo= Subject key identifier: 62:04:F0:E0:C9:B5:F1:EF:01:7C:98:D0:E5:B2:16:D9:E7:83:26:3C Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft Manifest number: 0124 Signing time: Sat 03 Oct 2026 06:28:51 +0000 Manifest this update: Sat 03 Oct 2026 06:28:50 +0000 Manifest next update: Sat 10 Oct 2026 06:28:50 +0000 Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: Zb0B8JdqOBvsy5OA/NH85wM0zsdFZ1Ko5hJ7snrtkNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221 Validity Not Before: Oct 3 06:28:50 2026 GMT Not After : Oct 10 06:28:50 2026 GMT Subject: CN=6ac0a0a2-cf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:e2:a7:46:8f:04:93:bc:4a:85:2a:d5:c5: 42:03:05:48:68:59:f8:fa:c1:98:cd:c2:04:f3:14: 48:b8:24:5b:e8:2f:12:53:45:01:c1:ef:1a:fa:c7: b3:a3:b1:56:b2:3b:04:cf:79:08:b1:01:05:4d:c2: 3d:c4:30:60:4c:40:e4:4d:65:6c:53:01:6a:cb:37: 90:ad:cb:28:c0:19:57:ad:2e:2b:9c:4e:b1:30:bf: b4:dd:b0:11:15:59:82:59:2a:8d:39:d4:d6:ff:45: 40:41:2c:2a:0d:0f:ef:86:ac:ac:07:ef:2b:4b:54: af:7d:93:8b:b2:50:62:08:a4:ea:a5:3b:bc:c5:8d: 69:55:00:60:de:ba:50:97:84:fe:ab:23:19:bb:41: 24:68:08:36:b6:8f:ad:ef:4f:44:a3:2f:c7:7e:a5: 4d:3a:ab:1f:2c:ee:c4:47:ad:a5:9d:60:e6:27:bf: bb:6f:aa:ce:3f:05:52:36:33:9e:33:7a:23:6d:ac: bf:1f:a2:03:f9:ac:8b:c5:87:e4:df:05:c7:0a:55: 12:b2:70:61:b7:54:da:8f:1c:fb:38:fb:70:06:e2: fa:15:5f:4b:66:12:8e:ce:1e:e1:c8:4f:71:25:94: f2:f4:29:31:77:5c:8d:7c:d8:fe:aa:2d:a6:ad:93: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:04:F0:E0:C9:B5:F1:EF:01:7C:98:D0:E5:B2:16:D9:E7:83:26:3C X509v3 Authority Key Identifier: keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6c:ab:29:4e:ff:f2:8d:2e:24:1f:d5:41:a5:a5:44:98:01: e8:de:80:bc:8a:b9:c3:36:62:32:74:1c:c5:9c:da:0d:54:d4: 11:8b:da:9d:9e:dd:f3:67:48:0a:a7:8d:c1:e8:18:ab:67:12: c9:50:8d:32:a2:46:86:28:61:0e:41:a4:37:d0:29:8e:bd:1c: 1a:38:21:82:e7:4f:50:f3:13:5d:73:d8:01:3c:90:9b:56:c3: b8:af:f8:a6:05:12:8f:51:41:ca:4a:68:0a:02:bf:57:92:b6: 8d:58:c5:81:3b:5c:6f:71:10:c0:0f:ca:ea:dd:91:fd:dd:94: dc:5a:d7:e9:3b:4c:8f:20:0e:42:03:d2:24:e0:17:06:8e:7f: 60:19:57:41:c9:07:05:16:dd:95:53:d3:e3:ed:68:f1:74:87: 37:01:36:c6:6c:fe:bb:30:00:14:75:47:2e:0c:8c:37:05:5e: 2b:b3:af:3e:42:bc:9a:d1:1d:b2:bf:95:d2:11:ef:86:ac:dc: 25:b5:df:b2:64:84:74:88:20:32:1c:63:6f:dc:a7:20:3f:6e: ec:20:ed:ea:88:26:04:6f:b2:e9:4d:86:7d:fa:40:b9:81:32: d1:ca:45:c3:11:44:93:2d:8f:4a:cf:d3:c3:eb:e4:4e:46:0c: 32:54:8b:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDA0QTMzOEZBN0IxMjZFMDdDMEVGOEJBQjhGN0RDMUM5 QzFBQzMyMjEwHhcNMjYxMDAzMDYyODUwWhcNMjYxMDEwMDYyODUwWjAYMRYwFAYD VQQDEw02YWMwYTBhMi1jZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk7ip0aPBJO8SoUq1cVCAwVIaFn4+sGYzcIE8xRIuCRb6C8SU0UBwe8a+sez o7FWsjsEz3kIsQEFTcI9xDBgTEDkTWVsUwFqyzeQrcsowBlXrS4rnE6xML+03bAR FVmCWSqNOdTW/0VAQSwqDQ/vhqysB+8rS1SvfZOLslBiCKTqpTu8xY1pVQBg3rpQ l4T+qyMZu0EkaAg2to+t709Eoy/HfqVNOqsfLO7ER62lnWDmJ7+7b6rOPwVSNjOe M3ojbay/H6ID+ayLxYfk3wXHClUSsnBht1Tajxz7OPtwBuL6FV9LZhKOzh7hyE9x JZTy9Ckxd1yNfNj+qi2mrZPjOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIE8ODJ tfHvAXyY0OWyFtnngyY8MB8GA1UdIwQYMBaAFASjOPp7Em4HwO+Lq499wcnBrDIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9GNEQ1QTY3RTAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2JnZkE3NHVyajMzQnljR3NN aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLTTQtbnNTYmdmQTc0dXJqMzNCeWNHc01pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9GNEQ1QTY3RTAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9CS000LW5zU2Jn ZkE3NHVyajMzQnljR3NNaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWyrKU7/8o0uJB/VQaWlRJgB6N6AvIq5wzZiMnQcxZzaDVTUEYvanZ7d82dI CqeNwegYq2cSyVCNMqJGhihhDkGkN9Apjr0cGjghgudPUPMTXXPYATyQm1bDuK/4 pgUSj1FBykpoCgK/V5K2jVjFgTtcb3EQwA/K6t2R/d2U3FrX6TtMjyAOQgPSJOAX Bo5/YBlXQckHBRbdlVPT4+1o8XSHNwE2xmz+uzAAFHVHLgyMNwVeK7OvPkK8mtEd sr+V0hHvhqzcJbXfsmSEdIggMhxjb9ynID9u7CDt6ogmBG+y6U2GffpAuYEy0cpF wxFEky2PSs/Tw+vkTkYMMlSLIA== -----END CERTIFICATE-----Generated at Mon Oct 5 06:36:54 2026 by rpki-client