$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: NrF3vmUoAQPzlrFhVFr0HvAmXySWRLmre9/18k8Xt0U= Subject key identifier: 8A:50:81:C3:54:6D:7B:89:23:01:5F:42:6C:01:D4:82:E8:C9:68:07 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 04F3 Signing time: Mon 20 Apr 2026 23:38:05 +0000 Manifest this update: Mon 20 Apr 2026 23:38:04 +0000 Manifest next update: Mon 27 Apr 2026 23:38:04 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: 7aNpIMC8PwJfcdPV9ZkaY5QkYlVx+icXY6t46eptg40=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Apr 20 23:38:04 2026 GMT Not After : Apr 27 23:38:04 2026 GMT Subject: CN=69e6b8dd-88e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:9c:39:19:bb:90:e1:f7:fd:74:60:3e:6f: 5a:f2:62:ea:76:b5:5e:fe:88:81:38:3a:26:94:ac: 53:18:c7:88:e4:25:c5:34:3d:6d:b7:7e:f7:b9:f6: 88:5b:cb:d6:54:a8:bd:7c:9b:82:8e:c8:1c:52:81: 09:06:ec:99:0c:a3:b8:48:59:77:9d:74:13:7f:a4: eb:81:76:51:d5:17:be:d4:5e:be:f5:9a:4a:1a:16: ec:a0:af:d5:9f:a4:f1:2d:fb:ba:58:52:35:e1:a3: 9e:7d:0b:64:61:d3:b7:2e:bd:d9:27:44:97:41:b9: 71:84:79:5d:72:12:19:64:f5:4d:33:8b:02:59:72: 47:da:b6:de:01:9b:c0:33:66:3c:0c:4c:4f:89:8f: fb:bc:ca:98:82:24:78:04:08:2c:17:f9:48:41:65: e1:85:18:4e:23:a1:9e:b2:9f:38:87:99:cd:ff:18: 36:b2:d3:d3:77:b7:64:7e:f1:9e:49:c4:d2:c8:2a: ec:66:9e:ae:ea:6a:cd:bc:fa:96:ff:95:d5:56:ab: 98:0f:ea:7a:d6:2e:be:69:f3:b2:5b:62:95:42:6b: db:c7:eb:70:0a:7e:a6:af:14:8f:a5:4d:9b:f1:f4: 29:fa:0f:9b:7d:ad:d8:f4:ea:94:58:1f:ec:38:0a: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:81:C3:54:6D:7B:89:23:01:5F:42:6C:01:D4:82:E8:C9:68:07 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f3:5f:96:fe:29:09:dc:ba:f6:1d:f2:10:17:e5:61:99:24: c0:96:a1:54:bc:74:db:81:36:49:99:db:fd:2e:7f:f0:db:69: 51:43:3c:0f:10:a4:86:fb:da:c9:5e:04:21:a1:d5:29:43:2b: 28:1c:e9:5d:bf:20:c8:93:d9:84:5b:81:04:d4:35:d7:16:2e: 0c:0f:0d:a5:3d:92:c0:83:8f:4d:1c:28:57:be:38:a7:3d:d6: 0e:56:11:24:8e:6b:7f:ea:8d:98:1f:7b:5e:08:8c:f2:a5:f7: fd:8f:e2:85:3d:c1:b3:2b:1c:c5:bc:7b:a7:60:52:8a:a8:c8: 38:95:25:04:98:72:c4:4f:9b:30:53:b2:75:8a:33:c9:b3:27: 61:dc:58:18:2b:6c:6f:ad:c3:4e:c1:6a:17:ba:70:28:e2:ac: 0f:c3:c9:f3:a8:f3:15:1a:bf:54:ad:34:81:e4:fa:bd:bb:11: e2:09:2b:c2:f5:85:e3:92:8f:a8:86:eb:d4:45:43:61:87:0e: a4:91:29:2b:eb:15:80:3e:8d:90:ae:46:f9:eb:61:f6:03:ae: 78:8e:48:89:9c:37:d8:df:30:9c:b3:ed:99:d8:b0:3d:bf:44: ba:8b:8f:4b:81:61:2a:cf:73:9c:04:af:97:31:13:0f:e5:83: 63:84:56:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwNDIwMjMzODA0WhcNMjYwNDI3MjMzODA0WjAYMRYwFAYD VQQDEw02OWU2YjhkZC04OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+KcORm7kOH3/XRgPm9a8mLqdrVe/oiBODomlKxTGMeI5CXFND1tt373ufaI W8vWVKi9fJuCjsgcUoEJBuyZDKO4SFl3nXQTf6TrgXZR1Re+1F6+9ZpKGhbsoK/V n6TxLfu6WFI14aOefQtkYdO3Lr3ZJ0SXQblxhHldchIZZPVNM4sCWXJH2rbeAZvA M2Y8DExPiY/7vMqYgiR4BAgsF/lIQWXhhRhOI6Gesp84h5nN/xg2stPTd7dkfvGe ScTSyCrsZp6u6mrNvPqW/5XVVquYD+p61i6+afOyW2KVQmvbx+twCn6mrxSPpU2b 8fQp+g+bfa3Y9OqUWB/sOApTjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpQgcNU bXuJIwFfQmwB1ILoyWgHMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPNflv4pCdy69h3yEBflYZkkwJahVLx024E2SZnb/S5/8NtpUUM8DxCkhvva yV4EIaHVKUMrKBzpXb8gyJPZhFuBBNQ11xYuDA8NpT2SwIOPTRwoV744pz3WDlYR JI5rf+qNmB97XgiM8qX3/Y/ihT3Bsyscxbx7p2BSiqjIOJUlBJhyxE+bMFOydYoz ybMnYdxYGCtsb63DTsFqF7pwKOKsD8PJ86jzFRq/VK00geT6vbsR4gkrwvWF45KP qIbr1EVDYYcOpJEpK+sVgD6NkK5G+eth9gOueI5IiZw32N8wnLPtmdiwPb9EuouP S4FhKs9znASvlzETD+WDY4RWdg== -----END CERTIFICATE-----Generated at Tue Apr 21 19:09:09 2026 by rpki-client