$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: 1FAzYUgfxbnNSpVq2AjvoUH+8wKRoYriMV2QfzqO2zY= Subject key identifier: 3C:04:4D:3C:88:CC:F3:14:AC:76:DF:4B:0E:69:88:A5:34:AF:6C:D3 Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 02A8 Signing time: Mon 27 Jul 2026 02:54:31 +0000 Manifest this update: Mon 27 Jul 2026 02:54:31 +0000 Manifest next update: Mon 03 Aug 2026 02:54:31 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: bq9mi6X0UdVhp/PPNUIfbs1qcfeLG3kOSYYKFWDRD/w=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: Jul 27 02:54:31 2026 GMT Not After : Aug 3 02:54:31 2026 GMT Subject: CN=6a66c867-c159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:bd:ef:20:99:34:b6:fa:f3:aa:8e:73:bb: d3:49:0f:04:14:f5:d0:92:04:5c:29:fa:15:6a:15: 79:c3:ec:b0:1a:f3:a1:7f:37:1b:51:a1:5b:49:c6: 90:8b:92:b1:b2:80:8c:88:ab:fd:1f:cc:bf:d7:83: 59:aa:1e:e5:b9:7b:08:88:e7:9c:cb:d4:d7:f6:a5: 85:0d:ee:52:7a:7d:b2:5f:ec:13:8b:49:4d:eb:f4: 51:81:0f:37:97:c6:9d:0f:63:ff:f3:d5:58:c6:ee: 64:29:40:e8:ef:0f:c3:15:97:43:39:31:74:d1:6c: e1:2b:c4:70:14:6b:d4:41:82:e0:2c:3f:1e:fd:21: c4:89:e7:53:be:52:c9:b7:e9:ec:aa:92:b2:03:00: 8e:a6:8b:18:1b:b5:4e:ac:6c:3e:de:a3:61:12:06: d4:d6:bb:0b:63:33:4e:2f:34:7e:c6:b5:ec:a0:f0: 82:16:99:53:fa:00:45:eb:54:07:e5:55:08:44:67: ce:27:e8:93:a6:f9:15:32:3b:02:f8:3f:19:a3:06: 4e:88:80:37:0a:ab:ed:b3:0c:d1:6f:81:9a:08:3c: 7f:79:32:e8:b3:38:45:c6:85:eb:d9:50:d2:20:46: a9:08:26:33:d4:0b:36:bb:64:d0:d1:29:d5:a9:76: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:04:4D:3C:88:CC:F3:14:AC:76:DF:4B:0E:69:88:A5:34:AF:6C:D3 X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:04:bf:93:33:11:91:a1:1b:d7:37:33:bb:eb:ce:e1:dd:69: d0:4d:86:e5:cf:fa:6a:c1:2c:ab:1d:ac:9a:63:66:c6:7d:cd: a6:6c:73:b8:37:b2:6d:a2:8f:2b:28:1b:a6:78:9d:7b:db:28: 7c:cc:43:89:5d:83:0f:de:9d:b2:3f:cf:04:9c:8a:29:46:21: fe:16:9a:69:5f:28:c1:98:08:49:38:e9:8f:65:fa:5a:ab:6b: fb:fc:2b:f4:f1:cf:cc:d2:78:b0:fe:b2:30:54:48:9d:1b:c2: 78:36:cc:b1:7f:5c:fd:c5:00:76:68:0a:a0:3d:6a:68:a3:b4: 68:8f:c0:7a:62:c7:f6:b0:9d:e6:83:19:88:f3:54:35:bd:6e: be:27:c7:dc:87:7c:6a:fa:10:31:96:f2:d2:ac:ea:8b:58:a6: 05:c6:14:c3:f2:8f:dc:f2:15:6c:7e:34:fe:b8:8b:a2:b5:df: 89:e2:8e:a4:82:c3:05:36:51:68:5c:7a:ce:2d:9d:a7:3a:27: f6:ce:f9:b7:3c:7c:6c:fa:1b:3e:79:02:95:96:ba:34:15:3a: d9:48:9e:96:c2:4a:04:72:6e:e2:10:3d:9b:ae:ea:c1:5b:56: d6:a7:91:93:cb:41:32:d4:84:a0:40:19:58:ac:d5:55:9f:e6: f4:3c:ca:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjYwNzI3MDI1NDMxWhcNMjYwODAzMDI1NDMxWjAYMRYwFAYD VQQDEw02YTY2Yzg2Ny1jMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkDK97yCZNLb686qOc7vTSQ8EFPXQkgRcKfoVahV5w+ywGvOhfzcbUaFbScaQ i5KxsoCMiKv9H8y/14NZqh7luXsIiOecy9TX9qWFDe5Sen2yX+wTi0lN6/RRgQ83 l8adD2P/89VYxu5kKUDo7w/DFZdDOTF00WzhK8RwFGvUQYLgLD8e/SHEiedTvlLJ t+nsqpKyAwCOposYG7VOrGw+3qNhEgbU1rsLYzNOLzR+xrXsoPCCFplT+gBF61QH 5VUIRGfOJ+iTpvkVMjsC+D8ZowZOiIA3CqvtswzRb4GaCDx/eTLoszhFxoXr2VDS IEapCCYz1As2u2TQ0SnVqXZ+6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwETTyI zPMUrHbfSw5piKU0r2zTMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQS/kzMRkaEb1zczu+vO4d1p0E2G5c/6asEsqx2smmNmxn3NpmxzuDeybaKP Kygbpnide9sofMxDiV2DD96dsj/PBJyKKUYh/haaaV8owZgISTjpj2X6Wqtr+/wr 9PHPzNJ4sP6yMFRInRvCeDbMsX9c/cUAdmgKoD1qaKO0aI/AemLH9rCd5oMZiPNU Nb1uvifH3Id8avoQMZby0qzqi1imBcYUw/KP3PIVbH40/riLorXfieKOpILDBTZR aFx6zi2dpzon9s75tzx8bPobPnkClZa6NBU62UielsJKBHJu4hA9m67qwVtW1qeR k8tBMtSEoEAZWKzVVZ/m9DzKGg== -----END CERTIFICATE-----Generated at Tue Jul 28 02:28:03 2026 by rpki-client