$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json) Hash identifier: OvGLIqaeiEEdZwZSvOOyEjGZsniV2VRBH/UPyN0koeA= Subject key identifier: 60:52:CA:E6:06:56:5E:10:DA:1B:22:E9:BC:16:22:F4:D5:40:B5:B9 Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Certificate serial: 1BBD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft Manifest number: 1BA5 Signing time: Sat 24 Oct 2026 15:37:31 +0000 Manifest this update: Sat 24 Oct 2026 15:37:30 +0000 Manifest next update: Sat 31 Oct 2026 15:37:30 +0000 Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: Fj92ZR0jZDS2Og8iWefEncrjcXJAOAt266PIVnKE8Wg=) 2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7101 (0x1bbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2 Validity Not Before: Oct 24 15:37:30 2026 GMT Not After : Oct 31 15:37:30 2026 GMT Subject: CN=6adcd0ba-4fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:99:46:4e:ff:e9:46:43:96:72:81:ec:1d: 21:92:c0:06:47:64:03:5c:f4:9b:e2:43:2a:e0:4b: a0:9c:de:eb:0a:0e:49:d1:ca:c6:0f:4a:1f:04:f8: 3d:fa:d4:7d:9c:7a:63:1e:34:20:95:12:bb:c0:f2: 45:2e:ea:e0:6e:fd:b9:8e:7d:e5:1f:42:25:20:57: bb:1f:ad:5e:a5:88:e6:5e:e8:66:35:2b:7a:06:f3: d5:e8:9f:7d:4d:fa:76:2f:f1:2d:f5:53:78:2c:f4: 9b:0a:d2:86:e6:36:65:33:81:17:64:ab:80:9c:27: 57:ac:40:93:e2:4b:93:a2:aa:63:8b:b3:5e:79:1e: 5b:01:8d:f3:f0:2a:83:8c:1a:cd:dc:09:a4:9b:aa: 11:08:5d:88:ae:da:91:64:00:6e:da:be:ba:ee:75: 59:6d:61:f5:fe:49:0f:df:a2:66:96:cc:79:54:c7: 35:bc:8a:75:07:54:fa:86:2d:24:d2:e7:d2:d3:50: 0d:d6:ee:8d:39:3d:2f:b5:35:25:da:e8:df:0a:e2: f4:d8:c2:58:00:87:40:74:ce:59:5f:d6:54:4b:28: 8f:f4:0a:98:31:ba:9d:32:b8:aa:da:0a:65:ba:6e: 10:69:f1:e8:b2:f8:5d:6b:50:71:f0:fc:39:7c:ee: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:CA:E6:06:56:5E:10:DA:1B:22:E9:BC:16:22:F4:D5:40:B5:B9 X509v3 Authority Key Identifier: keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9d:cf:5e:54:83:9c:f7:3c:b8:5b:6d:05:d4:3c:aa:2b:16: c7:12:7e:ef:5b:37:7f:72:0d:90:48:78:9f:a8:d4:5f:7d:e6: 9e:25:47:8a:d1:32:41:5d:c4:a7:91:14:fd:0c:40:99:19:15: ad:08:82:3a:c0:0c:fc:aa:c9:ee:59:d6:49:25:d9:84:23:23: b8:d5:b4:66:5f:6d:db:05:cf:a1:6d:c2:e7:89:44:9b:c9:8a: b1:19:fc:b5:3b:3a:ad:df:1e:b3:ae:e4:3f:b7:21:9e:c5:fd: 5b:2f:da:ce:b2:1b:aa:16:fa:aa:79:77:cf:c0:b4:ae:8f:7e: e9:d5:9c:29:ed:85:7c:f8:61:8a:67:10:da:50:d1:4b:15:f9: 71:a0:c3:2e:38:6d:c8:fe:28:74:4c:10:1e:52:9e:8f:8f:18: 14:53:60:6f:ac:5b:e9:9b:b4:78:21:60:2a:4f:0d:7d:88:a5: 4c:6f:d4:18:0e:0f:e2:81:91:1a:ea:4c:36:9e:d0:9f:8c:0f: e0:e9:f5:29:9c:3b:a9:82:bc:7a:f6:8e:f0:f2:47:dc:ed:17: 97:9d:25:10:d6:01:a2:75:38:00:65:8d:80:bf:5f:81:48:d2: 87:26:13:17:4a:58:ea:41:06:7e:3f:6c:02:f2:5d:05:a8:06: f0:43:48:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKDZFNDg2MTBBQTBFNkIwRTJDNUVFRDQwMkREMDc4MzNB QTczRTdFQTIwHhcNMjYxMDI0MTUzNzMwWhcNMjYxMDMxMTUzNzMwWjAYMRYwFAYD VQQDEw02YWRjZDBiYS00ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLOZRk7/6UZDlnKB7B0hksAGR2QDXPSb4kMq4EugnN7rCg5J0crGD0ofBPg9 +tR9nHpjHjQglRK7wPJFLurgbv25jn3lH0IlIFe7H61epYjmXuhmNSt6BvPV6J99 Tfp2L/Et9VN4LPSbCtKG5jZlM4EXZKuAnCdXrECT4kuToqpji7NeeR5bAY3z8CqD jBrN3Amkm6oRCF2IrtqRZABu2r667nVZbWH1/kkP36Jmlsx5VMc1vIp1B1T6hi0k 0ufS01AN1u6NOT0vtTUl2ujfCuL02MJYAIdAdM5ZX9ZUSyiP9AqYMbqdMriq2gpl um4QafHosvhda1Bx8Pw5fO4f8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBSyuYG Vl4Q2hsi6bwWIvTVQLW5MB8GA1UdIwQYMBaAFG5IYQqg5rDixe7UAt0HgzqnPn6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC8yNjc1OEJCNDNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNPTEY3dFFDM1FlRE9xYy1m cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2JraGhDcURtc09MRjd0UUMzUWVET3FjLWZxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC8yNjc1OEJCNDNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9ia2hoQ3FEbXNP TEY3dFFDM1FlRE9xYy1mcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANJ3PXlSDnPc8uFttBdQ8qisWxxJ+71s3f3INkEh4n6jUX33mniVHitEyQV3E p5EU/QxAmRkVrQiCOsAM/KrJ7lnWSSXZhCMjuNW0Zl9t2wXPoW3C54lEm8mKsRn8 tTs6rd8es67kP7chnsX9Wy/azrIbqhb6qnl3z8C0ro9+6dWcKe2FfPhhimcQ2lDR SxX5caDDLjhtyP4odEwQHlKej48YFFNgb6xb6Zu0eCFgKk8NfYilTG/UGA4P4oGR GupMNp7Qn4wP4On1KZw7qYK8evaO8PJH3O0Xl50lENYBonU4AGWNgL9fgUjShyYT F0pY6kEGfj9sAvJdBagG8ENIXA== -----END CERTIFICATE-----Generated at Sun Oct 25 19:58:49 2026 by rpki-client