$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json) Hash identifier: fFM/rpjCxo8dg10C2st2Li/GKymBNMsWm4TACfZJczE= Subject key identifier: E9:B4:B9:F4:E5:39:58:BC:A0:A3:E0:94:3C:F8:79:1D:DE:9D:B5:4E Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft Manifest number: 7C Signing time: Mon 01 Jun 2026 08:29:04 +0000 Manifest this update: Mon 01 Jun 2026 08:29:04 +0000 Manifest next update: Mon 08 Jun 2026 08:29:04 +0000 Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: 5AXqgBrUfb5FDNlvuM/0CSAr37xD8vf25hRAkdlzskE=) 2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Validity Not Before: Jun 1 08:29:04 2026 GMT Not After : Jun 8 08:29:04 2026 GMT Subject: CN=6a1d42d0-87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:78:34:22:7c:b3:c9:f4:e6:c0:2f:3b:91: c7:2d:d5:e2:3b:f4:0a:56:bc:ad:63:5b:a9:08:8e: 3a:fb:38:34:f4:e1:12:d5:84:b7:a5:42:b6:a6:ef: 74:93:9d:fa:5b:ff:99:1b:44:92:35:94:ff:ba:28: cb:e1:d2:b9:e4:23:50:c7:d4:77:dd:19:d3:20:c5: 82:3e:d4:44:7b:fb:d6:fc:29:4c:67:ee:3c:7d:1c: 03:18:9c:4c:2a:29:5d:85:eb:02:08:ee:30:f0:34: 33:d4:38:38:a4:1f:2d:b1:6f:b6:78:56:76:dd:47: 09:1a:05:2a:69:5e:f8:4c:d9:39:e9:e5:36:39:4d: 2b:f7:63:c6:52:aa:ef:5c:7a:73:f8:95:82:06:b3: 3a:9a:e3:2f:51:c5:8a:12:7f:77:ac:de:33:a5:b9: 20:a2:6c:38:1b:ef:29:03:54:63:9e:a4:3d:38:ee: fb:96:60:fa:8e:ed:a5:57:dc:8c:80:bc:ee:bf:64: 95:c7:dd:f9:e7:be:4d:08:4c:54:9f:10:e0:3b:84: 14:b2:d3:24:a2:3f:c2:b3:62:e9:10:e7:6e:64:f2: 25:b6:c4:7f:2d:a5:f0:ff:04:f4:c3:74:21:f0:6e: 4b:0a:1d:d5:90:32:10:0d:e6:fe:75:cd:6e:39:8c: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B4:B9:F4:E5:39:58:BC:A0:A3:E0:94:3C:F8:79:1D:DE:9D:B5:4E X509v3 Authority Key Identifier: keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7f:bf:a6:9f:06:d4:29:f3:c4:a2:8d:22:80:bb:1a:b2:72: eb:29:10:ef:f5:1c:5f:68:22:9c:60:0a:85:d6:8d:18:db:81: 4f:b3:91:f9:e2:7c:89:d6:2b:15:7e:97:41:45:f3:2f:b6:61: 58:b4:a3:9e:02:f5:f9:81:58:9a:7c:23:1c:a9:cb:a7:f2:ae: 46:7f:f8:66:d0:92:bf:6c:af:71:d3:6b:0e:fe:8e:01:8c:e1: ad:9d:98:69:33:62:17:73:c5:50:fb:2c:26:8a:71:a5:6c:00: 90:5d:4c:83:04:65:72:75:02:96:b0:91:27:85:df:8e:5f:5d: 17:e2:7f:91:2b:19:b5:ff:8e:8b:45:04:4b:5d:8a:de:8a:ea: d0:d2:0b:38:01:b4:bf:ac:38:ea:31:d9:d6:6b:de:55:30:2b: 59:a1:6f:16:bc:a2:ac:f6:ee:fd:af:c8:fa:24:32:55:93:7d: b9:ba:60:54:cb:46:bf:28:a1:e9:59:63:fd:7a:e3:c7:24:de: b5:ab:a7:6a:d8:4d:6f:29:63:1c:f4:8e:07:e1:59:37:60:33: 6e:a1:47:c9:09:7a:69:4d:0d:f0:ce:b0:87:16:93:0d:70:9e: c2:6b:5e:e8:30:54:b0:41:64:8f:de:54:cb:0c:f0:cf:b8:a1: 1b:05:a8:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoMDQ1OUJCRjdDQjg0QzE3RUVENTFCNjhDRUFEOTQxOTU3 RDc4NUZBRjAeFw0yNjA2MDEwODI5MDRaFw0yNjA2MDgwODI5MDRaMBgxFjAUBgNV BAMTDTZhMWQ0MmQwLTg3YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1u3g0InyzyfTmwC87kcct1eI79ApWvK1jW6kIjjr7ODT04RLVhLelQram73ST nfpb/5kbRJI1lP+6KMvh0rnkI1DH1HfdGdMgxYI+1ER7+9b8KUxn7jx9HAMYnEwq KV2F6wII7jDwNDPUODikHy2xb7Z4VnbdRwkaBSppXvhM2Tnp5TY5TSv3Y8ZSqu9c enP4lYIGszqa4y9RxYoSf3es3jOluSCibDgb7ykDVGOepD047vuWYPqO7aVX3IyA vO6/ZJXH3fnnvk0ITFSfEOA7hBSy0ySiP8KzYukQ525k8iW2xH8tpfD/BPTDdCHw bksKHdWQMhAN5v51zW45jIlZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6bS59OU5 WLygo+CUPPh5Hd6dtU4wHwYDVR0jBBgwFoAUBFm798uEwX7tUbaM6tlBlX14X68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzU3MzAxNTlBQTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL0JGbTc5OHVFd1g3dFViYU02dGxCbFgxNFg2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQkZtNzk4dUV3WDd0VWJhTTZ0bEJsWDE0WDY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkE5LzU3MzAxNTlBQTc3NTExRjA5NERFQkYyREM0RjlBRTAyL0JGbTc5OHVFd1g3 dFViYU02dGxCbFgxNFg2OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5f7+mnwbUKfPEoo0igLsasnLrKRDv9RxfaCKcYAqF1o0Y24FPs5H54nyJ1isV fpdBRfMvtmFYtKOeAvX5gViafCMcqcun8q5Gf/hm0JK/bK9x02sO/o4BjOGtnZhp M2IXc8VQ+ywminGlbACQXUyDBGVydQKWsJEnhd+OX10X4n+RKxm1/46LRQRLXYre iurQ0gs4AbS/rDjqMdnWa95VMCtZoW8WvKKs9u79r8j6JDJVk325umBUy0a/KKHp WWP9euPHJN61q6dq2E1vKWMc9I4H4Vk3YDNuoUfJCXppTQ3wzrCHFpMNcJ7Ca17o MFSwQWSP3lTLDPDPuKEbBahB -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:10 2026 by rpki-client