$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: 8zAwFjt5OmjsoG94Nz81QPyuYUnJ6rjZcD/lIRJKoZE= Subject key identifier: 54:6B:56:C9:97:E0:35:F4:BC:B2:9C:44:F8:75:E4:07:3D:13:2A:64 Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 02C5 Signing time: Mon 21 Sep 2026 01:20:28 +0000 Manifest this update: Mon 21 Sep 2026 01:20:27 +0000 Manifest next update: Mon 28 Sep 2026 01:20:27 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: 3KK7laEl7kChJbng2zxKwkKuPrhRg0P8aLwZ6IQo/iQ=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: Sep 21 01:20:27 2026 GMT Not After : Sep 28 01:20:27 2026 GMT Subject: CN=6ab0865c-c3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:1d:13:22:d7:b7:8b:d5:b1:a7:97:4b:f3: 96:0c:a3:de:1f:01:18:20:67:e5:32:ee:d5:4c:0e: a8:ac:4e:1d:3b:ff:4e:c0:ae:09:8c:22:17:8d:e6: 93:00:4d:b6:6b:cc:b5:75:cb:9a:da:88:f3:13:b6: 90:e2:dc:02:a3:49:10:61:9e:fc:2e:d4:e4:2b:74: d2:d1:51:25:03:30:0a:1f:c4:b9:b8:be:dc:f4:9d: 7a:56:7b:22:b4:46:fe:9d:25:59:26:77:76:cc:7e: e1:18:d0:f8:34:ff:4c:e8:52:8e:e3:a4:8d:9e:f6: 5e:32:f6:ce:51:fd:8b:d9:85:69:dc:0d:34:85:b9: 55:45:74:94:17:48:bb:9d:34:ae:d9:77:73:51:e5: d5:a9:98:cd:4d:04:01:68:4e:3d:fd:06:c5:db:74: b5:2d:d2:33:d5:bf:87:24:bc:a8:20:08:8b:ac:24: e2:84:52:76:40:65:7a:5e:e1:e1:bc:35:9f:ff:cb: 65:15:76:c6:78:f5:40:7f:fa:b2:e4:99:32:52:bb: ed:a7:f4:a5:9f:34:fe:cd:1e:c3:a3:17:9b:d9:2c: d0:5a:f3:a4:91:97:10:1d:dc:ac:3e:00:87:a8:f5: 52:9e:83:9d:51:82:13:88:d4:0f:11:22:1c:bd:09: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:56:C9:97:E0:35:F4:BC:B2:9C:44:F8:75:E4:07:3D:13:2A:64 X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0a:ba:aa:f4:64:d3:ca:79:0b:2b:65:29:43:c6:39:f6:fc: e1:96:f1:16:82:15:80:3e:67:dd:37:d6:83:9f:ee:b0:a6:a9: 5a:73:2a:ab:9c:da:8c:b4:70:5e:e5:1d:76:72:a6:63:d4:e8: 10:d1:30:3e:1d:b3:6d:84:be:26:35:02:6a:83:92:71:17:8a: 67:5a:e8:7c:43:24:63:21:89:d4:56:e0:27:b5:01:3e:94:78: 28:d0:0d:c6:03:30:5f:96:b0:2d:a9:40:db:b1:0f:49:b9:36: af:1f:05:c7:ee:7d:d5:bc:c7:25:ec:b1:c5:b5:83:8b:11:cf: 85:a9:3d:75:1d:61:82:ba:00:c2:90:32:65:c3:24:17:9c:02: 65:d8:9b:d6:41:19:68:48:8a:bf:53:10:c7:f0:96:d8:d1:0f: e9:8e:5b:0b:01:ec:91:da:df:87:46:94:90:76:c3:54:95:94: ca:66:70:74:b6:b2:53:56:0b:a8:24:12:65:68:29:dd:ff:9e: 70:8c:75:6c:ad:83:2f:d7:c9:4d:e2:70:39:1c:84:36:63:51: 3d:86:8b:a6:b9:99:4c:82:d8:bf:ad:46:88:6f:fe:a5:49:15: 6c:d1:c3:d7:0b:07:bd:b3:2d:7f:49:89:3a:f0:ef:0c:21:bd: bd:8e:98:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjYwOTIxMDEyMDI3WhcNMjYwOTI4MDEyMDI3WjAYMRYwFAYD VQQDEw02YWIwODY1Yy1jM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3QdEyLXt4vVsaeXS/OWDKPeHwEYIGflMu7VTA6orE4dO/9OwK4JjCIXjeaT AE22a8y1dcua2ojzE7aQ4twCo0kQYZ78LtTkK3TS0VElAzAKH8S5uL7c9J16Vnsi tEb+nSVZJnd2zH7hGND4NP9M6FKO46SNnvZeMvbOUf2L2YVp3A00hblVRXSUF0i7 nTSu2XdzUeXVqZjNTQQBaE49/QbF23S1LdIz1b+HJLyoIAiLrCTihFJ2QGV6XuHh vDWf/8tlFXbGePVAf/qy5JkyUrvtp/SlnzT+zR7Doxeb2SzQWvOkkZcQHdysPgCH qPVSnoOdUYITiNQPESIcvQnVDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRrVsmX 4DX0vLKcRPh15Ac9EypkMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABgq6qvRk08p5CytlKUPGOfb84ZbxFoIVgD5n3TfWg5/usKapWnMqq5zajLRw XuUddnKmY9ToENEwPh2zbYS+JjUCaoOScReKZ1rofEMkYyGJ1FbgJ7UBPpR4KNAN xgMwX5awLalA27EPSbk2rx8Fx+591bzHJeyxxbWDixHPhak9dR1hgroAwpAyZcMk F5wCZdib1kEZaEiKv1MQx/CW2NEP6Y5bCwHskdrfh0aUkHbDVJWUymZwdLayU1YL qCQSZWgp3f+ecIx1bK2DL9fJTeJwORyENmNRPYaLprmZTILYv61GiG/+pUkVbNHD 1wsHvbMtf0mJOvDvDCG9vY6YSw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:04:51 2026 by rpki-client