$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: 3PLvkAjIxN6UJmYwrsojX13LwlODGRir4RTdN+SxQ+Y= Subject key identifier: CB:5A:83:5A:9B:B3:91:C1:ED:1B:03:3D:B6:E4:F6:B8:0D:2F:42:51 Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 0283 Signing time: Wed 13 May 2026 01:58:18 +0000 Manifest this update: Wed 13 May 2026 01:58:17 +0000 Manifest next update: Wed 20 May 2026 01:58:17 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: AFm/5elC/E8fnZYSOhk3zfmJ7M9M7P//8s4aVTVv8Ys=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: May 13 01:58:17 2026 GMT Not After : May 20 01:58:17 2026 GMT Subject: CN=6a03dab9-04f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:bf:e9:10:a0:c4:ed:24:73:c1:6c:5a:5e: d8:be:16:97:50:63:d1:bb:07:ed:e5:aa:e6:b5:e7: 88:99:a7:46:55:c6:b6:bd:c5:8f:53:95:36:c0:ce: 09:71:32:e0:ae:a5:1f:b8:6c:cf:df:ca:db:de:46: 6a:72:0f:fb:2e:77:a9:d2:44:3b:9c:17:21:3c:32: 2a:35:9d:ca:45:4a:8d:5d:f8:9f:4f:c1:8c:a2:f5: 19:71:53:0e:d8:42:95:07:4c:ae:8c:12:e1:de:23: 25:c1:4a:96:5e:46:8b:6c:c2:6e:82:ca:2a:75:3a: 67:3c:a9:61:e8:70:bf:2f:fb:2a:1d:e3:18:ae:62: 60:b0:3b:74:dc:75:5b:58:da:dd:12:24:89:99:89: 44:79:04:da:9a:59:9e:0c:af:06:60:0a:db:6d:bf: 55:c4:05:a3:14:d6:85:c4:2b:12:44:85:d4:f1:97: 6e:d4:62:22:b9:15:8a:67:d6:6f:ca:18:c3:6f:93: ce:a9:54:bf:07:2e:24:e2:30:0d:2a:88:6c:99:d5: 88:20:54:8f:10:02:88:09:e6:bb:ca:cc:fa:b3:0a: 9d:6a:d9:e1:e8:21:53:70:bf:b3:52:49:ca:00:82: 6f:e8:87:d5:a9:df:00:00:12:27:85:10:1a:98:5a: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5A:83:5A:9B:B3:91:C1:ED:1B:03:3D:B6:E4:F6:B8:0D:2F:42:51 X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:46:cc:25:f3:a8:0e:92:ea:05:83:4a:d6:2e:86:47:81:c2: 77:54:5e:24:17:70:09:66:e1:aa:04:85:6e:5b:b0:e5:93:27: 3c:d0:f8:c6:88:70:3a:87:b5:99:3f:6c:6b:aa:d7:5c:87:d7: 28:e1:12:cd:23:73:8a:be:df:b6:8e:c0:d0:ec:b6:70:f3:82: f7:e9:83:6e:e7:68:a8:92:71:1b:ad:4a:78:40:8d:80:76:89: 55:fe:ab:94:cd:0f:9e:51:ab:42:ce:7a:98:13:48:64:d7:e4: b7:c0:ad:6a:06:f1:0f:19:d6:c8:f2:05:98:11:80:7e:cf:1c: b1:0d:e2:2b:fb:1e:97:7c:d7:45:3a:3e:c4:7e:2e:fb:11:8d: 90:1f:c7:74:34:a7:25:7a:0d:12:c2:56:07:d4:c1:81:28:4a: ff:f9:ea:1b:53:3e:47:fa:68:f2:e8:40:7d:a7:3d:b9:bb:ae: d1:ce:a8:ce:04:a8:ed:bf:54:c7:4c:73:bb:88:38:54:1f:2b: 6d:0c:fb:da:60:04:9e:a9:76:15:3f:ae:30:c0:b2:48:d5:91: ac:27:48:9e:d4:ae:36:5e:d4:34:9f:bb:77:52:60:36:f5:d8: 42:49:70:e8:e9:ce:9c:df:15:02:26:a0:c7:d1:bc:92:63:76: aa:f5:1b:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjYwNTEzMDE1ODE3WhcNMjYwNTIwMDE1ODE3WjAYMRYwFAYD VQQDEw02YTAzZGFiOS0wNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtW/6RCgxO0kc8FsWl7YvhaXUGPRuwft5armteeImadGVca2vcWPU5U2wM4J cTLgrqUfuGzP38rb3kZqcg/7Lnep0kQ7nBchPDIqNZ3KRUqNXfifT8GMovUZcVMO 2EKVB0yujBLh3iMlwUqWXkaLbMJugsoqdTpnPKlh6HC/L/sqHeMYrmJgsDt03HVb WNrdEiSJmYlEeQTamlmeDK8GYArbbb9VxAWjFNaFxCsSRIXU8Zdu1GIiuRWKZ9Zv yhjDb5POqVS/By4k4jANKohsmdWIIFSPEAKICea7ysz6swqdatnh6CFTcL+zUknK AIJv6IfVqd8AABInhRAamFpiRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtag1qb s5HB7RsDPbbk9rgNL0JRMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf0bMJfOoDpLqBYNK1i6GR4HCd1ReJBdwCWbhqgSFbluw5ZMnPND4xohwOoe1 mT9sa6rXXIfXKOESzSNzir7fto7A0Oy2cPOC9+mDbudoqJJxG61KeECNgHaJVf6r lM0PnlGrQs56mBNIZNfkt8CtagbxDxnWyPIFmBGAfs8csQ3iK/sel3zXRTo+xH4u +xGNkB/HdDSnJXoNEsJWB9TBgShK//nqG1M+R/po8uhAfac9ubuu0c6ozgSo7b9U x0xzu4g4VB8rbQz72mAEnql2FT+uMMCySNWRrCdIntSuNl7UNJ+7d1JgNvXYQklw 6OnOnN8VAiagx9G8kmN2qvUbqg== -----END CERTIFICATE-----Generated at Wed May 13 11:48:16 2026 by rpki-client