$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: hgrMmc0Rrsf9c+ID6XyH/FZCCRCqZz2RE8Ubt56TK9s= Subject key identifier: 45:67:CA:82:90:E0:EA:9B:E5:B1:DF:8C:DE:83:6A:D8:41:2B:36:5C Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 02D8 Signing time: Thu 29 Oct 2026 01:41:55 +0000 Manifest this update: Thu 29 Oct 2026 01:41:54 +0000 Manifest next update: Thu 05 Nov 2026 01:41:54 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: BE6ZFNGoIKXqhmcPdYD29IPokVuO/ttKLhScmnWOCPE=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: Oct 29 01:41:54 2026 GMT Not After : Nov 5 01:41:54 2026 GMT Subject: CN=6ae2a463-a0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:26:6c:1e:5f:33:0f:34:02:cf:b9:bb:a2: 43:ce:16:15:26:a3:ff:56:08:8f:0f:5a:c5:d2:28: 16:c0:4a:9b:72:2a:2a:51:0b:b3:69:ab:94:3e:53: f5:52:b2:06:ab:90:9b:ef:3a:a2:b7:b9:a5:5c:17: 39:a5:a2:0b:37:89:a1:9d:a8:c6:53:bb:4d:52:9f: fe:75:1a:ca:04:a1:a3:27:3d:41:bc:5f:77:ee:c7: 2a:ca:73:10:b0:b3:41:9d:b4:07:c9:e7:ca:8b:ee: 6f:51:bc:c7:f9:3f:57:fd:b8:c0:96:f6:ab:e0:8f: 25:48:17:ed:60:50:61:52:1c:c7:02:71:83:5f:a6: bd:f6:39:cf:a2:bb:8f:2e:70:35:7e:6a:82:07:5e: 18:e3:3c:b7:12:6a:7d:91:92:00:28:1d:c8:9f:00: a3:ff:6c:6c:e9:58:77:cb:91:b9:f7:7d:e5:2e:66: c6:58:1c:f6:c8:38:ec:ae:eb:50:e6:60:56:4b:26: 05:ec:b9:96:6f:6e:d3:38:d6:82:63:34:34:71:95: d4:fa:ef:3e:82:7d:c6:31:64:3c:a1:22:3c:ec:c3: f2:11:f0:9d:70:e1:6f:b7:e0:59:23:ca:b9:53:52: b1:4d:88:c9:6f:97:6a:7a:6b:ec:ee:98:90:cd:1c: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:CA:82:90:E0:EA:9B:E5:B1:DF:8C:DE:83:6A:D8:41:2B:36:5C X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:6b:d4:8c:c0:f8:78:41:d7:71:b0:d1:8c:76:2f:a2:7d: bd:b5:1b:53:3e:75:1d:0e:d8:7a:56:cb:00:2f:fc:74:31:74: 9f:96:5e:ec:16:33:e2:61:c4:0d:fc:04:a2:10:1b:34:88:f4: c6:2f:d4:3c:d5:2e:93:81:7b:37:49:60:91:4d:5c:78:65:4f: 5c:67:6e:f5:9b:1a:e8:de:cd:61:44:4f:72:34:ff:98:d3:b9: 19:ee:1d:4f:a7:44:e6:1a:03:ce:4d:89:62:fa:e8:20:ef:cc: 4f:b8:25:87:90:10:87:db:d8:e9:7a:a3:4d:db:ba:f1:8f:30: 07:08:c6:77:e0:b5:ab:ea:ac:4f:1a:f0:83:16:0e:9e:47:6c: 97:cb:48:2e:66:73:57:90:b5:04:b4:26:4a:69:cc:75:4b:40: 6c:07:b8:08:fc:33:04:d3:ed:9a:b1:3e:a9:c5:54:b8:c8:94: b9:b8:c9:36:7f:83:53:ec:f6:02:57:d7:30:90:2e:af:45:39: 74:69:35:8e:86:bc:ad:ae:4e:39:e4:99:9a:d4:bf:f8:ba:07: 3e:61:b3:24:f8:4d:75:c8:65:5c:b0:cf:99:73:de:40:c9:bc: b6:8e:d9:ee:86:37:8a:5d:57:5d:d0:77:fe:f2:27:19:4b:51: ca:63:9e:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjYxMDI5MDE0MTU0WhcNMjYxMTA1MDE0MTU0WjAYMRYwFAYD VQQDEw02YWUyYTQ2My1hMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVUmbB5fMw80As+5u6JDzhYVJqP/VgiPD1rF0igWwEqbcioqUQuzaauUPlP1 UrIGq5Cb7zqit7mlXBc5paILN4mhnajGU7tNUp/+dRrKBKGjJz1BvF937scqynMQ sLNBnbQHyefKi+5vUbzH+T9X/bjAlvar4I8lSBftYFBhUhzHAnGDX6a99jnPoruP LnA1fmqCB14Y4zy3Emp9kZIAKB3InwCj/2xs6Vh3y5G5933lLmbGWBz2yDjsrutQ 5mBWSyYF7LmWb27TONaCYzQ0cZXU+u8+gn3GMWQ8oSI87MPyEfCdcOFvt+BZI8q5 U1KxTYjJb5dqemvs7piQzRzqUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVnyoKQ 4Oqb5bHfjN6DathBKzZcMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/Zr1IzA+HhB13Gw0Yx2L6J9vbUbUz51HQ7YelbLAC/8dDF0n5Ze7BYz4mHE DfwEohAbNIj0xi/UPNUuk4F7N0lgkU1ceGVPXGdu9Zsa6N7NYURPcjT/mNO5Ge4d T6dE5hoDzk2JYvroIO/MT7glh5AQh9vY6XqjTdu68Y8wBwjGd+C1q+qsTxrwgxYO nkdsl8tILmZzV5C1BLQmSmnMdUtAbAe4CPwzBNPtmrE+qcVUuMiUubjJNn+DU+z2 AlfXMJAur0U5dGk1joa8ra5OOeSZmtS/+LoHPmGzJPhNdchlXLDPmXPeQMm8to7Z 7oY3il1XXdB3/vInGUtRymOe7Q== -----END CERTIFICATE-----Generated at Thu Oct 29 22:57:43 2026 by rpki-client