$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: wZXqgTKG2zl37fbQHq4rrKBynKzFzKGOfhzuS2Y17Nw= Subject key identifier: B1:5D:C7:7B:02:AE:63:10:C6:A4:70:AA:58:96:C8:B8:6C:F5:2F:57 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0521 Signing time: Tue 21 Jul 2026 00:24:04 +0000 Manifest this update: Tue 21 Jul 2026 00:24:04 +0000 Manifest next update: Tue 28 Jul 2026 00:24:04 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: tPVcKE+dt9NFRbOH+31YuywiNsRXSFDtaN+jM7wEleg=) 2: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) 3: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Jul 21 00:24:04 2026 GMT Not After : Jul 28 00:24:04 2026 GMT Subject: CN=6a5ebc24-ba12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:b0:56:c3:37:cb:0b:bf:83:b7:a1:af:f8: 18:ad:28:aa:11:7d:57:f8:d8:b0:0a:2c:f2:f2:87: bf:39:dc:4b:3b:a0:da:0d:98:be:ba:20:d2:0f:d5: 2a:4e:47:bd:de:5b:67:4e:7b:3c:72:50:fc:4d:5b: fb:2e:db:36:45:ab:5f:37:df:a3:e3:3d:73:c4:df: e1:04:a6:26:d6:d3:f8:b6:5a:5c:e2:2f:68:8c:ac: 75:c2:69:1f:a8:83:8d:13:21:37:2d:8b:c5:e9:e8: 43:38:1c:36:4e:ae:b7:d7:ff:f5:47:07:ae:ed:7f: 2e:51:1c:84:d2:58:28:5d:b9:58:39:28:59:8e:68: ce:b0:48:75:13:b8:96:70:ad:de:76:a4:39:c2:23: c3:6a:99:47:e9:88:3e:99:c6:b6:ee:07:fe:c3:fa: 7c:10:f3:49:3a:d4:87:62:81:f9:e7:f5:34:41:c4: 85:ad:58:81:70:ae:41:3b:c1:ec:71:a8:10:cc:ba: d5:84:bf:a9:c8:1b:a9:d4:c7:c8:7c:f0:5c:d6:c0: 44:34:4c:18:f3:e7:c4:fa:ba:96:87:83:94:a3:18: 22:63:bf:d4:1d:5b:0f:73:53:ab:c7:6e:b1:6a:03: 4b:e7:9e:2a:c4:b6:3d:3f:4e:4f:e3:75:68:cc:d0: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5D:C7:7B:02:AE:63:10:C6:A4:70:AA:58:96:C8:B8:6C:F5:2F:57 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d2:23:37:ff:54:82:00:da:6a:1c:74:d5:d9:ba:52:f5:a3: b1:0f:0e:13:59:b0:f8:11:1a:55:ce:f1:46:cf:12:aa:d8:c2: b5:6c:82:d6:c3:c1:e8:a4:d8:97:c5:72:16:29:fd:94:25:04: 0c:27:30:ac:4c:ba:1d:12:8a:a2:f0:9b:82:39:49:e1:d4:02: 07:94:8f:50:6e:75:55:17:74:f2:ef:53:b3:ca:fd:85:e6:0f: 30:83:9c:78:54:c5:08:b6:2c:db:c8:45:15:ff:5a:91:5a:e5: c3:05:7a:e3:4f:80:ca:84:37:9e:ec:72:82:64:e1:90:21:dd: 5e:f2:a5:4e:01:aa:b4:75:bb:71:45:42:60:88:d5:b0:f1:6d: 7c:02:4b:60:81:b9:f0:03:6b:82:a2:bd:52:24:36:43:8e:5c: 67:36:f6:36:6b:10:75:b5:cd:2b:a0:66:56:6b:3d:97:d8:70: 98:bd:88:f0:a2:c6:1a:f2:b8:b8:cb:3a:17:1e:bb:ae:18:28: 11:3e:db:4c:77:48:e2:b2:2d:fa:bf:28:c1:54:9a:e4:50:33: 54:72:bd:ae:4a:a1:98:46:0a:84:37:30:10:7a:e6:b0:1e:dc: 89:2e:5c:70:ff:f1:25:d3:58:d4:79:1e:0c:21:ec:55:f8:8a: da:6f:80:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwNzIxMDAyNDA0WhcNMjYwNzI4MDAyNDA0WjAYMRYwFAYD VQQDEw02YTVlYmMyNC1iYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqGwVsM3ywu/g7ehr/gYrSiqEX1X+NiwCizy8oe/OdxLO6DaDZi+uiDSD9Uq Tke93ltnTns8clD8TVv7Lts2RatfN9+j4z1zxN/hBKYm1tP4tlpc4i9ojKx1wmkf qIONEyE3LYvF6ehDOBw2Tq631//1Rweu7X8uURyE0lgoXblYOShZjmjOsEh1E7iW cK3edqQ5wiPDaplH6Yg+mca27gf+w/p8EPNJOtSHYoH55/U0QcSFrViBcK5BO8Hs cagQzLrVhL+pyBup1MfIfPBc1sBENEwY8+fE+rqWh4OUoxgiY7/UHVsPc1Orx26x agNL554qxLY9P05P43VozNAChwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFdx3sC rmMQxqRwqliWyLhs9S9XMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtIjN/9UggDaahx01dm6UvWjsQ8OE1mw+BEaVc7xRs8SqtjCtWyC1sPB6KTY l8VyFin9lCUEDCcwrEy6HRKKovCbgjlJ4dQCB5SPUG51VRd08u9Ts8r9heYPMIOc eFTFCLYs28hFFf9akVrlwwV640+AyoQ3nuxygmThkCHdXvKlTgGqtHW7cUVCYIjV sPFtfAJLYIG58ANrgqK9UiQ2Q45cZzb2NmsQdbXNK6BmVms9l9hwmL2I8KLGGvK4 uMs6Fx67rhgoET7bTHdI4rIt+r8owVSa5FAzVHK9rkqhmEYKhDcwEHrmsB7ciS5c cP/xJdNY1HkeDCHsVfiK2m+AtQ== -----END CERTIFICATE-----Generated at Tue Jul 21 18:27:52 2026 by rpki-client