$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: 1ggz3UN0ZuLpOthqkXGS3agSdCD81gy8FeKBJdwnzHE= Subject key identifier: CE:05:77:EE:FB:B2:D9:DF:AB:73:04:E7:D7:C9:3D:16:2A:EF:24:55 Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1BA4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1B8C Signing time: Fri 04 Sep 2026 15:37:29 +0000 Manifest this update: Fri 04 Sep 2026 15:37:28 +0000 Manifest next update: Fri 11 Sep 2026 15:37:28 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: IYkpMCZt+Znsz3+IXiKubPSVAywT7JFZ0wKGnOtAU5g=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7076 (0x1ba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Sep 4 15:37:28 2026 GMT Not After : Sep 11 15:37:28 2026 GMT Subject: CN=6a9ae5b8-c724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:97:b2:59:cf:f4:ed:8e:7c:b4:19:cb:9a: ea:23:c2:ce:f2:8a:d0:da:6b:e4:6c:d5:68:62:50: 01:f6:16:f8:90:7e:4b:43:f3:96:38:79:35:7b:6c: 78:ae:5d:98:a6:0d:89:b8:8e:75:63:a5:96:a7:1d: ac:8e:05:60:4d:2f:97:17:3f:e2:af:bc:ec:9a:0d: d0:15:84:17:c9:79:c2:30:fe:8c:47:fb:c7:ec:5b: 2c:0b:09:ca:0f:f2:6f:48:c0:65:89:66:36:a4:12: 38:7f:fb:42:d4:b6:55:85:bb:01:f7:34:66:e3:7c: de:53:1a:20:73:23:75:2c:b2:7a:42:ed:08:72:21: 38:f9:93:8a:b4:01:c8:24:62:f5:19:a0:91:9a:d9: 38:f2:01:86:4f:b9:e4:84:4d:b1:d3:6f:1c:9a:84: da:ce:e0:a1:4e:a6:cb:34:50:c4:af:c0:4c:79:b8: b4:67:e7:c9:60:91:d3:5f:7a:f9:c5:8e:b1:02:dd: 0c:80:35:28:cd:68:35:ce:6d:9e:33:21:79:7b:38: 3e:9c:ec:6e:17:a4:55:d4:31:7f:d4:6f:e0:42:e4: 7e:e2:e8:d4:6b:5b:dd:83:14:6c:cb:2c:ab:70:e9: c2:f8:be:ac:8d:58:e0:e3:81:78:bb:d6:02:c4:56: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:77:EE:FB:B2:D9:DF:AB:73:04:E7:D7:C9:3D:16:2A:EF:24:55 X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:ce:d4:73:ff:0f:0e:9e:3a:e6:1f:7f:13:82:89:f9:c0: 87:09:70:b9:36:eb:52:44:82:59:6a:6c:fb:31:df:c0:c0:85: b0:54:5c:af:42:7b:23:01:89:28:8b:69:c0:b7:7c:bd:32:e7: 59:2f:8e:69:7d:d4:94:3a:f7:ce:d2:f7:98:c0:69:96:d7:fc: de:93:9e:f3:2b:fc:d1:03:d5:99:b0:17:dc:6a:f0:9f:47:a9: 2c:ae:2a:8e:2b:81:3e:7b:55:a7:f0:d7:13:f3:88:c0:f0:50: 93:a4:38:c3:34:ee:70:1c:2a:65:a2:cd:df:9f:0b:dd:26:62: ae:23:41:35:a9:39:90:3b:a2:cb:e2:c6:68:88:50:3d:2c:f3: a1:92:4a:2f:c0:cd:f3:13:ff:06:be:2a:a4:09:4a:a7:64:31: 95:b4:db:4e:29:59:7f:81:2a:cb:68:7d:45:57:41:72:e7:05: 46:73:3d:40:ea:12:4d:47:6a:0f:86:44:a4:3a:b0:d8:23:11: e5:f3:6b:a1:89:54:a5:f4:3b:f9:dc:39:27:4c:3e:ec:27:3a: 96:ae:7a:c4:88:27:7b:b9:52:16:49:25:13:6c:c2:a6:63:6a: 8a:d4:95:61:67:88:47:f6:e6:24:6e:4c:c9:a3:12:f2:65:27: 61:42:5c:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYwOTA0MTUzNzI4WhcNMjYwOTExMTUzNzI4WjAYMRYwFAYD VQQDEw02YTlhZTViOC1jNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0WXslnP9O2OfLQZy5rqI8LO8orQ2mvkbNVoYlAB9hb4kH5LQ/OWOHk1e2x4 rl2Ypg2JuI51Y6WWpx2sjgVgTS+XFz/ir7zsmg3QFYQXyXnCMP6MR/vH7FssCwnK D/JvSMBliWY2pBI4f/tC1LZVhbsB9zRm43zeUxogcyN1LLJ6Qu0IciE4+ZOKtAHI JGL1GaCRmtk48gGGT7nkhE2x028cmoTazuChTqbLNFDEr8BMebi0Z+fJYJHTX3r5 xY6xAt0MgDUozWg1zm2eMyF5ezg+nOxuF6RV1DF/1G/gQuR+4ujUa1vdgxRsyyyr cOnC+L6sjVjg44F4u9YCxFY9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4Fd+77 stnfq3ME59fJPRYq7yRVMB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOfXO1HP/Dw6eOuYffxOCifnAhwlwuTbrUkSCWWps+zHfwMCFsFRcr0J7IwGJ KItpwLd8vTLnWS+OaX3UlDr3ztL3mMBpltf83pOe8yv80QPVmbAX3Grwn0epLK4q jiuBPntVp/DXE/OIwPBQk6Q4wzTucBwqZaLN358L3SZiriNBNak5kDuiy+LGaIhQ PSzzoZJKL8DN8xP/Br4qpAlKp2QxlbTbTilZf4Eqy2h9RVdBcucFRnM9QOoSTUdq D4ZEpDqw2CMR5fNroYlUpfQ7+dw5J0w+7Cc6lq56xIgne7lSFkklE2zCpmNqitSV YWeIR/bmJG5MyaMS8mUnYUJcgw== -----END CERTIFICATE-----Generated at Sat Sep 5 02:44:33 2026 by rpki-client