$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: Gl1CioXoOY2sI4uVrRk0Vv8YwA+J0tjJXqu2X8MoE7k= Subject key identifier: C9:11:3C:34:B5:6D:7F:EA:F2:B1:0A:D2:B3:49:FF:27:87:C5:ED:C2 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0538 Signing time: Wed 02 Sep 2026 23:28:35 +0000 Manifest this update: Wed 02 Sep 2026 23:28:34 +0000 Manifest next update: Wed 09 Sep 2026 23:28:34 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: MZOwTzcDX6+IhNFBZpmdmxOXr7RFPPim5dOgieaP/z8=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 23:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Sep 2 23:28:34 2026 GMT Not After : Sep 9 23:28:34 2026 GMT Subject: CN=6a98b123-d445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:43:e4:3d:d1:c6:a5:d2:bb:80:a2:bc:03: c7:a1:22:84:a1:14:20:dd:d7:21:12:52:6d:b9:69: 22:16:50:55:1b:28:a1:45:3e:79:41:db:26:26:d9: 39:b7:a0:dd:0c:27:f3:6e:57:5f:32:be:97:b2:94: e9:21:f0:5c:65:98:cf:71:20:d4:42:e1:b1:63:42: a3:a4:c0:a8:53:70:58:23:c9:f9:8d:8f:2f:69:cf: 88:61:04:d8:85:e4:e5:a1:02:5d:4b:0a:58:4c:aa: a7:dd:c3:95:54:10:47:f4:65:34:4d:63:09:a5:cc: 1a:ed:e5:72:22:1a:02:a2:ae:4b:e7:fe:db:75:06: d5:f5:d4:36:a8:a0:48:5a:fd:e0:f6:21:8f:fe:b8: f4:9c:70:81:83:31:bb:a8:93:26:5e:a1:c5:29:db: 94:2b:05:d8:f3:8d:f7:19:36:e2:db:4d:2a:dd:c3: e7:a6:2f:1c:75:a2:c8:23:5a:e1:3d:f3:bf:ba:01: 5c:13:a8:f6:04:1a:bd:c0:e0:aa:8b:d6:4e:59:0e: 48:ff:8d:f5:6b:ea:7a:e5:cd:08:53:9d:19:be:0a: 0e:d4:b6:1b:fa:29:86:c9:a0:cb:65:ac:77:a2:b7: f4:a1:6a:e8:6a:78:5b:e7:d7:27:a8:b7:ae:7a:3b: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:11:3C:34:B5:6D:7F:EA:F2:B1:0A:D2:B3:49:FF:27:87:C5:ED:C2 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d9:51:80:d1:6c:3f:de:f2:1f:61:87:a3:f4:37:30:46:15: 3d:fa:9c:e3:b5:0e:c5:5f:70:e5:b8:1a:7c:b2:e4:1a:f9:32: d7:75:72:1d:b0:eb:e3:84:90:32:b1:23:66:b4:0d:04:9e:63: a9:2a:3e:eb:39:d8:35:3a:b6:69:3e:93:0d:14:32:f9:98:23: 23:84:9e:a4:f5:c0:0a:2e:fe:6e:2c:bf:2e:5f:48:b4:0d:2a: 1b:be:d2:ac:ff:2d:1b:19:76:41:e7:2d:df:d4:6d:37:aa:12: cc:8f:4d:08:ed:7c:27:70:2c:3d:89:c8:1a:b8:51:56:b6:f3: 07:89:a4:b3:d6:f3:77:cc:eb:d1:57:fa:f3:2a:08:8a:ab:cb: 58:51:de:62:7c:a8:86:10:66:91:a3:cc:73:47:ce:a6:2a:39: ed:3a:9a:5f:cb:bd:c5:ff:91:dd:14:6c:9b:1d:c1:25:7f:a8: b3:fd:fb:52:00:81:1f:54:56:94:4a:7c:af:5e:4e:c9:31:93: ff:9e:cc:aa:eb:74:74:ac:b4:25:b5:77:a6:22:49:36:98:87: f9:d2:a0:03:8e:da:6f:2f:4b:25:c1:be:e1:a1:79:2f:08:6c: e5:e8:d3:b1:7b:96:1c:00:72:dd:87:75:c9:15:47:0f:30:e0: 84:12:4c:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwOTAyMjMyODM0WhcNMjYwOTA5MjMyODM0WjAYMRYwFAYD VQQDEw02YTk4YjEyMy1kNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTRD5D3RxqXSu4CivAPHoSKEoRQg3dchElJtuWkiFlBVGyihRT55QdsmJtk5 t6DdDCfzbldfMr6XspTpIfBcZZjPcSDUQuGxY0KjpMCoU3BYI8n5jY8vac+IYQTY heTloQJdSwpYTKqn3cOVVBBH9GU0TWMJpcwa7eVyIhoCoq5L5/7bdQbV9dQ2qKBI Wv3g9iGP/rj0nHCBgzG7qJMmXqHFKduUKwXY8433GTbi200q3cPnpi8cdaLII1rh PfO/ugFcE6j2BBq9wOCqi9ZOWQ5I/431a+p65c0IU50ZvgoO1LYb+imGyaDLZax3 orf0oWroanhb59cnqLeuejsgmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkRPDS1 bX/q8rEK0rNJ/yeHxe3CMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhtlRgNFsP97yH2GHo/Q3MEYVPfqc47UOxV9w5bgafLLkGvky13VyHbDr44SQ MrEjZrQNBJ5jqSo+6znYNTq2aT6TDRQy+ZgjI4SepPXACi7+biy/Ll9ItA0qG77S rP8tGxl2Qect39RtN6oSzI9NCO18J3AsPYnIGrhRVrbzB4mks9bzd8zr0Vf68yoI iqvLWFHeYnyohhBmkaPMc0fOpio57TqaX8u9xf+R3RRsmx3BJX+os/37UgCBH1RW lEp8r15OyTGT/57Mqut0dKy0JbV3piJJNpiH+dKgA47aby9LJcG+4aF5Lwhs5ejT sXuWHABy3Yd1yRVHDzDghBJMeg== -----END CERTIFICATE-----Generated at Sat Sep 5 01:03:38 2026 by rpki-client