$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: Id/lQxenmRFGlY2Xh60hLS1G6Vx64Br8l3SesL01ksg= Subject key identifier: DE:E3:37:0B:88:F1:F6:4C:98:63:1D:A8:DF:45:F7:A5:7E:C2:41:BE Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 050A Signing time: Thu 04 Jun 2026 23:43:58 +0000 Manifest this update: Thu 04 Jun 2026 23:43:57 +0000 Manifest next update: Thu 11 Jun 2026 23:43:57 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: wMETPiR66kog+4uSvGWwKpVun1n7pPI67lcbml/xz2I=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Jun 4 23:43:57 2026 GMT Not After : Jun 11 23:43:57 2026 GMT Subject: CN=6a220dbe-a9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:09:4b:4a:44:e2:8f:e9:29:8e:b5:5f:d0: 9c:bd:87:0b:e0:aa:76:62:3c:a4:10:03:54:11:b5: 41:3d:27:39:de:76:08:0d:8c:42:b2:fe:bd:15:90: 1a:35:10:de:6d:a0:12:e3:a4:ca:4e:e0:03:ef:50: 28:6b:e1:9c:43:af:3c:ac:80:f0:9a:5f:b7:b2:e4: d3:b3:e6:38:55:8b:b1:1a:30:e2:e8:b2:6f:9b:dd: 10:25:0c:79:d3:42:05:7b:0e:a3:e6:97:55:3f:ea: cd:d3:5e:f0:f8:ce:4d:f3:b9:2f:1e:6b:06:4e:7c: ea:81:4e:a5:2b:80:d3:c6:bc:56:72:b3:35:f5:03: c8:c2:4b:b0:34:f5:ca:28:32:82:d1:20:62:6a:2a: 7a:61:fa:ea:c2:17:40:b5:57:1f:27:c5:9e:5d:aa: 57:d1:9b:43:02:7d:47:32:73:c0:ba:72:b8:f3:94: 13:00:30:b4:8c:fa:dc:79:e9:92:27:2a:fe:ad:4b: 1e:5a:0a:70:c1:a7:47:49:47:9b:b7:64:18:89:c0: dc:f1:d5:b1:85:5f:b7:62:a7:61:9f:43:d4:08:2c: 8a:17:dd:94:c1:a9:91:70:32:05:0a:f0:4f:bf:91: d8:7f:12:14:32:9f:af:e4:93:bb:0b:f7:14:2e:dd: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:37:0B:88:F1:F6:4C:98:63:1D:A8:DF:45:F7:A5:7E:C2:41:BE X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:84:b2:2a:a3:e6:29:da:60:63:4f:69:7f:2b:76:99:e6: 27:9d:52:f8:fd:4a:47:db:c3:f9:52:81:79:17:92:b6:ac:12: cc:5d:6c:58:c4:91:dc:bc:5a:bc:9e:5d:07:a4:18:e1:1a:39: 24:09:c1:e7:4e:98:99:48:cb:47:84:5e:16:20:6d:f0:46:59: 64:db:5e:04:5e:aa:84:97:86:41:01:c0:04:9d:5e:23:09:42: a6:a6:48:a1:22:30:30:a4:7f:1e:6f:1d:dc:7d:4d:a5:35:5d: 2e:b5:97:d6:68:04:aa:1d:ef:65:fd:e8:06:40:41:65:54:2d: b4:f0:db:48:66:54:c2:87:fc:7d:88:5d:f7:60:cc:c1:34:d4: 81:bf:ad:02:85:89:d6:f9:53:da:43:07:e9:89:2b:96:27:27: ae:ae:3a:e2:1b:c0:1f:75:4f:2c:bd:7f:63:8e:f9:5e:1a:c9: b6:28:59:d9:bf:ed:cb:3d:b3:06:93:21:8e:0f:21:b6:37:ee: f1:18:52:ce:28:2d:98:b3:21:d6:93:22:e9:6e:54:e1:97:41: 4d:71:60:1f:3f:95:db:3a:ab:f9:87:97:1f:43:bf:1a:3a:d9: d1:a7:e4:ec:33:3b:f2:fb:69:e8:12:7e:76:ac:d9:af:00:ab: 13:cc:62:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwNjA0MjM0MzU3WhcNMjYwNjExMjM0MzU3WjAYMRYwFAYD VQQDEw02YTIyMGRiZS1hOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvsJS0pE4o/pKY61X9CcvYcL4Kp2YjykEANUEbVBPSc53nYIDYxCsv69FZAa NRDebaAS46TKTuAD71Aoa+GcQ688rIDwml+3suTTs+Y4VYuxGjDi6LJvm90QJQx5 00IFew6j5pdVP+rN017w+M5N87kvHmsGTnzqgU6lK4DTxrxWcrM19QPIwkuwNPXK KDKC0SBiaip6YfrqwhdAtVcfJ8WeXapX0ZtDAn1HMnPAunK485QTADC0jPrceemS Jyr+rUseWgpwwadHSUebt2QYicDc8dWxhV+3Yqdhn0PUCCyKF92UwamRcDIFCvBP v5HYfxIUMp+v5JO7C/cULt1zhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7jNwuI 8fZMmGMdqN9F96V+wkG+MB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJdyEsiqj5inaYGNPaX8rdpnmJ51S+P1KR9vD+VKBeReStqwSzF1sWMSR3Lxa vJ5dB6QY4Ro5JAnB506YmUjLR4ReFiBt8EZZZNteBF6qhJeGQQHABJ1eIwlCpqZI oSIwMKR/Hm8d3H1NpTVdLrWX1mgEqh3vZf3oBkBBZVQttPDbSGZUwof8fYhd92DM wTTUgb+tAoWJ1vlT2kMH6Ykrlicnrq464hvAH3VPLL1/Y475XhrJtihZ2b/tyz2z BpMhjg8htjfu8RhSzigtmLMh1pMi6W5U4ZdBTXFgHz+V2zqr+YeXH0O/GjrZ0afk 7DM78vtp6BJ+dqzZrwCrE8xifQ== -----END CERTIFICATE-----Generated at Sat Jun 6 07:01:41 2026 by rpki-client