$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: mBzI8FNNY5azmDeitCeBX5VFHRIWaDBzxtiyEOk6O5w= Subject key identifier: 66:A0:84:B4:AC:6E:60:86:A4:F0:82:08:54:E6:DA:97:3F:37:BC:9C Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1B75 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1B5D Signing time: Thu 04 Jun 2026 15:39:56 +0000 Manifest this update: Thu 04 Jun 2026 15:39:56 +0000 Manifest next update: Thu 11 Jun 2026 15:39:56 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: eFVIAgjg8PoyfhqCHlG4P7HPiG2UuYZNZqjzzUTUqAs=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7029 (0x1b75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Jun 4 15:39:56 2026 GMT Not After : Jun 11 15:39:56 2026 GMT Subject: CN=6a219c4c-d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:b2:cd:87:75:b7:02:64:6d:0e:56:80:5d: f3:88:98:c1:3b:92:f6:3a:fc:7a:97:b2:e4:5d:8e: ac:0d:6b:9d:ef:61:1e:17:7e:78:a1:46:fc:94:82: 15:e0:1f:2e:31:9a:9e:04:60:60:82:3d:99:94:7d: 51:09:99:7d:e0:3f:27:51:42:6f:5b:11:36:41:5e: 4b:fc:96:b8:42:b1:de:19:73:f9:3f:67:4e:1b:cc: 31:09:4b:c9:14:2a:1e:88:66:c9:a1:47:cd:ab:2c: 42:44:ef:9a:ed:bf:a1:45:14:cb:62:41:ef:2f:c2: ff:90:9e:9d:e5:4e:2d:c7:4e:56:05:b3:63:c7:32: ba:22:b1:82:13:31:e6:1e:a1:36:d3:09:f4:e5:af: 58:7e:1c:5d:04:1e:da:2b:27:a9:78:d0:10:54:b7: 49:54:52:4f:1b:24:21:ed:56:3b:ef:1e:e1:20:a4: dd:5d:e6:29:6f:52:30:a7:a4:4f:7b:1e:5d:15:06: 4d:8d:8a:ea:25:5d:ba:35:3b:bf:40:7f:e0:82:16: ba:68:57:53:a0:b3:3e:9f:ef:03:bb:20:c1:d9:d7: 00:fb:80:21:7b:38:f6:99:a5:b0:e3:1f:8a:65:e4: b5:2a:93:a4:a4:c1:1b:a6:1d:20:e6:dd:f5:6c:f1: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:84:B4:AC:6E:60:86:A4:F0:82:08:54:E6:DA:97:3F:37:BC:9C X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e4:4c:f7:09:5a:48:2a:9e:0b:e8:6d:e0:43:60:9d:44:d2: d5:f1:85:fe:1f:c5:1a:ee:45:ce:56:fe:c3:91:f7:69:93:a8: 3a:44:86:2c:a3:e0:73:93:19:3f:5b:a5:f7:a6:54:2c:f6:73: 41:b6:4c:39:8c:e1:5c:48:ec:eb:a7:be:a9:85:9a:9c:47:4f: d2:d3:04:98:61:ac:3e:8c:63:35:29:ba:40:c3:8b:51:9e:c1: 9a:66:a5:d2:8e:50:45:cc:ee:0e:e2:64:4f:9e:1e:d3:b3:b7: d7:d2:c5:d0:ed:f4:8d:90:e8:53:5c:e1:88:38:8b:68:fa:14: c6:2e:b7:8d:f7:05:bc:34:7b:f4:56:01:2f:9e:54:7c:5c:ee: 3b:fa:02:32:8a:1b:e7:3b:69:da:3f:33:8b:be:63:f6:68:97: 8b:27:6a:29:09:38:66:7f:1f:49:95:59:27:a7:ef:20:dc:3f: a0:26:e4:c5:9e:bd:91:7e:23:15:13:92:46:4e:6b:61:d6:5c: 27:64:d8:e4:2d:54:3a:9e:76:02:63:0a:7b:dc:9f:47:7f:40: dd:ea:b0:31:93:de:e0:4c:8d:77:81:94:72:ba:62:8c:18:86: 54:0c:3e:91:f5:ce:c8:31:d6:87:cc:88:57:4f:07:7e:a6:c5: b9:89:ab:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYwNjA0MTUzOTU2WhcNMjYwNjExMTUzOTU2WjAYMRYwFAYD VQQDEw02YTIxOWM0Yy1kNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzuyzYd1twJkbQ5WgF3ziJjBO5L2Ovx6l7LkXY6sDWud72EeF354oUb8lIIV 4B8uMZqeBGBggj2ZlH1RCZl94D8nUUJvWxE2QV5L/Ja4QrHeGXP5P2dOG8wxCUvJ FCoeiGbJoUfNqyxCRO+a7b+hRRTLYkHvL8L/kJ6d5U4tx05WBbNjxzK6IrGCEzHm HqE20wn05a9YfhxdBB7aKyepeNAQVLdJVFJPGyQh7VY77x7hIKTdXeYpb1Iwp6RP ex5dFQZNjYrqJV26NTu/QH/ggha6aFdToLM+n+8DuyDB2dcA+4Ahezj2maWw4x+K ZeS1KpOkpMEbph0g5t31bPGirQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaghLSs bmCGpPCCCFTm2pc/N7ycMB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeRM9wlaSCqeC+ht4ENgnUTS1fGF/h/FGu5Fzlb+w5H3aZOoOkSGLKPgc5MZ P1ul96ZULPZzQbZMOYzhXEjs66e+qYWanEdP0tMEmGGsPoxjNSm6QMOLUZ7Bmmal 0o5QRczuDuJkT54e07O319LF0O30jZDoU1zhiDiLaPoUxi63jfcFvDR79FYBL55U fFzuO/oCMoob5ztp2j8zi75j9miXiydqKQk4Zn8fSZVZJ6fvINw/oCbkxZ69kX4j FROSRk5rYdZcJ2TY5C1UOp52AmMKe9yfR39A3eqwMZPe4EyNd4GUcrpijBiGVAw+ kfXOyDHWh8yIV08HfqbFuYmrLA== -----END CERTIFICATE-----Generated at Sat Jun 6 10:57:35 2026 by rpki-client