$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: Wo1gdFPGtBKEfrR7ir/W3/LPvMfQQuQVBhTXhUvE9MQ= Subject key identifier: FB:B8:F0:19:22:0A:BD:F7:6B:DC:AA:EB:35:DF:8B:1A:64:34:6C:BA Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1B8C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1B74 Signing time: Mon 20 Jul 2026 15:44:13 +0000 Manifest this update: Mon 20 Jul 2026 15:44:12 +0000 Manifest next update: Mon 27 Jul 2026 15:44:12 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: TQNdFdOCXq4LLYej6n8uOiwllSNzWUUL34KkxcXDug4=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7052 (0x1b8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Jul 20 15:44:12 2026 GMT Not After : Jul 27 15:44:12 2026 GMT Subject: CN=6a5e424d-49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:84:17:f0:e7:93:80:ed:cc:e5:c9:bb:17: b3:c8:f1:e4:42:86:70:b9:06:50:71:89:7d:f9:36: 8b:40:b6:3d:f0:b7:f8:cc:bb:8b:27:d3:d6:0e:f1: 88:4d:41:2a:c1:fe:98:4a:95:0e:59:db:68:e9:48: 50:af:04:5a:27:a0:bd:e2:fb:24:08:79:45:31:9f: 2d:a0:b8:b6:99:7e:fd:ed:ac:90:2c:e3:22:6d:b2: 3c:f1:15:51:5a:fe:0d:19:37:90:fb:18:de:42:b1: e5:60:2b:65:a8:f5:71:56:9e:3c:95:12:01:2d:e6: 40:29:71:a1:c5:e5:f2:df:6a:0d:48:62:8f:b1:e1: b4:d5:82:ab:02:a9:2d:86:8c:c5:8c:33:14:da:fd: e7:3e:06:fa:76:71:51:39:c0:a0:b7:e3:f8:03:9c: b7:a4:f2:14:10:47:c4:e4:cf:01:2d:e9:8a:b8:2d: 47:2e:eb:d7:ef:fc:68:a8:3b:4d:8d:0a:0a:f3:90: 96:6e:8e:09:01:5c:41:81:05:08:4b:e8:96:74:c7: 17:ad:09:6a:ed:82:6e:c0:3e:9d:3f:7e:ed:e3:41: 84:6f:1c:9c:36:3a:ba:9a:67:6e:27:0d:7c:ab:14: b5:64:f0:28:0f:7a:0b:fe:41:ef:6d:3a:38:84:16: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:F0:19:22:0A:BD:F7:6B:DC:AA:EB:35:DF:8B:1A:64:34:6C:BA X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:14:c2:1e:f8:99:7f:36:77:41:0d:43:ee:77:11:b0:b2:86: 0e:91:67:85:70:39:5f:69:50:c6:ec:b0:08:0e:77:eb:69:55: 5f:49:ab:8f:f8:d2:58:a9:98:41:5a:bf:ae:97:a7:4b:c6:3c: f6:ca:d0:f3:21:f8:6a:ad:b8:8f:38:37:fa:99:0d:c6:ff:03: a8:b1:a4:07:82:ab:91:c9:fb:d2:e3:cb:f1:c9:d8:d4:c5:38: aa:43:43:3b:76:0a:58:c6:f9:af:96:e6:0a:8f:f1:82:f9:8b: b6:81:01:fa:f7:88:64:21:45:db:64:fe:54:73:79:d0:42:d5: d0:3e:3e:07:3e:c5:8f:31:33:7a:9d:52:ef:a5:60:65:fe:2f: af:f1:ed:36:c0:8e:aa:db:0c:69:bc:72:d1:5d:8a:28:dc:6f: 48:6d:3d:a6:a6:65:bd:c7:fc:b2:6f:63:6d:7e:67:d0:fd:7a: 65:c3:59:03:9a:07:7e:f0:ec:8f:90:d5:51:15:4e:f1:d7:7b: de:e2:14:17:e0:a1:d4:4d:d1:f2:f3:56:32:15:38:c3:8c:a7: ed:4f:61:00:75:63:2b:70:bd:2a:92:04:64:f1:79:94:20:75: 47:55:fc:b8:76:49:10:e4:23:fb:98:ce:7b:e4:15:cc:b7:b7: a3:bd:96:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYwNzIwMTU0NDEyWhcNMjYwNzI3MTU0NDEyWjAYMRYwFAYD VQQDEw02YTVlNDI0ZC00OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAok6EF/Dnk4DtzOXJuxezyPHkQoZwuQZQcYl9+TaLQLY98Lf4zLuLJ9PWDvGI TUEqwf6YSpUOWdto6UhQrwRaJ6C94vskCHlFMZ8toLi2mX797ayQLOMibbI88RVR Wv4NGTeQ+xjeQrHlYCtlqPVxVp48lRIBLeZAKXGhxeXy32oNSGKPseG01YKrAqkt hozFjDMU2v3nPgb6dnFROcCgt+P4A5y3pPIUEEfE5M8BLemKuC1HLuvX7/xoqDtN jQoK85CWbo4JAVxBgQUIS+iWdMcXrQlq7YJuwD6dP37t40GEbxycNjq6mmduJw18 qxS1ZPAoD3oL/kHvbTo4hBY98QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPu48Bki Cr33a9yq6zXfixpkNGy6MB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQBTCHviZfzZ3QQ1D7ncRsLKGDpFnhXA5X2lQxuywCA5362lVX0mrj/jSWKmY QVq/rpenS8Y89srQ8yH4aq24jzg3+pkNxv8DqLGkB4Krkcn70uPL8cnY1MU4qkND O3YKWMb5r5bmCo/xgvmLtoEB+veIZCFF22T+VHN50ELV0D4+Bz7FjzEzep1S76Vg Zf4vr/HtNsCOqtsMabxy0V2KKNxvSG09pqZlvcf8sm9jbX5n0P16ZcNZA5oHfvDs j5DVURVO8dd73uIUF+Ch1E3R8vNWMhU4w4yn7U9hAHVjK3C9KpIEZPF5lCB1R1X8 uHZJEOQj+5jOe+QVzLe3o72WzA== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:51 2026 by rpki-client