$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: 8UDZZXMd7osLT3aSKqPwvA2MrroEb+CF2OjyFQVn1l8= Subject key identifier: 16:53:8F:9A:44:74:C6:3E:33:56:D4:79:B3:98:CC:E3:5B:D2:13:26 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0522 Signing time: Thu 23 Jul 2026 00:23:22 +0000 Manifest this update: Thu 23 Jul 2026 00:23:22 +0000 Manifest next update: Thu 30 Jul 2026 00:23:22 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: YmxIdlcp0q/EXwEJX/s7j0mrqjlri90tqACt5ToVy7w=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Jul 23 00:23:22 2026 GMT Not After : Jul 30 00:23:22 2026 GMT Subject: CN=6a615efa-5d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:eb:93:0e:8e:3f:3d:32:89:e9:4e:c2:79: c3:32:01:19:07:97:b9:c4:5b:c4:03:24:ab:27:79: 26:d2:16:91:7d:a1:64:f1:a4:66:b9:59:12:33:fd: 61:32:2e:13:05:d5:0b:88:e3:11:0c:af:78:3f:01: 15:cf:2b:59:aa:37:de:c6:dd:ba:0c:3b:93:c9:49: 99:b4:f3:fd:31:dc:a6:ea:78:e4:9f:74:31:48:17: 20:a1:28:15:6a:f2:d0:89:91:79:9a:a1:29:2b:ee: b9:bc:87:15:be:d9:9a:df:f5:59:c8:15:0b:19:2b: c4:53:28:aa:12:fd:de:d8:72:52:40:f1:18:06:0c: 0f:f5:01:10:95:11:7d:72:3f:5e:d7:4d:a8:77:01: f1:95:41:7b:f0:c0:02:8e:fe:6f:78:6d:84:4f:e0: 63:6d:8b:df:24:fb:44:22:bd:69:c4:af:59:e9:c1: 29:1e:d2:fd:b9:98:df:fc:8a:4d:02:66:da:67:1b: ea:33:5b:a8:1e:c3:dc:bc:00:ed:aa:c4:34:e7:9e: c3:77:92:75:e0:f0:e1:ea:8a:80:1c:42:08:0e:6c: b7:15:e9:b7:1f:ed:fb:02:3b:96:06:c0:7f:7a:a8: 1d:f8:51:54:f4:37:f8:ce:d2:2c:9c:0a:4b:3f:7f: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:53:8F:9A:44:74:C6:3E:33:56:D4:79:B3:98:CC:E3:5B:D2:13:26 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:8a:24:cf:a6:00:a8:2b:72:a9:a7:3d:bc:0a:71:1f:51:53: 41:05:3a:c6:1b:0f:bd:ee:88:bd:c5:1e:7b:08:ac:fc:01:a3: 7d:d3:2a:90:e8:c2:b5:af:4a:87:13:81:9d:d3:32:d2:91:84: bf:c4:69:0a:25:44:7f:ec:2d:64:a0:58:d3:ed:4f:e7:f8:da: 3f:93:4f:1d:9f:3a:69:59:2f:9e:1e:a3:48:f4:b4:7e:ee:5e: fd:13:4e:a0:19:e5:8e:4e:b4:67:51:f7:43:2d:7b:47:3c:e6: 14:d1:db:0a:83:fc:d1:77:de:41:7a:34:e2:b9:34:a2:d3:ba: c4:42:45:dd:59:46:f4:96:d1:4f:65:bf:f7:4d:ed:5b:0f:94: 58:e1:a9:3a:3e:bb:5d:4a:6d:6b:3f:73:11:d1:72:63:46:6f: 0d:74:8a:56:5d:68:5a:aa:ed:c2:f1:a9:39:1f:7b:a8:50:0f: bf:ca:16:2e:ad:c2:af:67:d9:25:2f:4f:9d:c8:58:f9:aa:c7: bb:4a:be:33:ce:ba:2a:f0:0c:ec:63:ac:2f:77:1d:34:d1:6f: 56:38:6b:82:92:43:aa:6c:88:41:a6:96:12:dc:ea:cb:9b:a3: c9:bb:b7:8b:65:9e:d9:18:9f:dc:dd:9b:5b:85:3a:ec:88:4e: 1d:e1:b3:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwNzIzMDAyMzIyWhcNMjYwNzMwMDAyMzIyWjAYMRYwFAYD VQQDEw02YTYxNWVmYS01ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTbrkw6OPz0yielOwnnDMgEZB5e5xFvEAySrJ3km0haRfaFk8aRmuVkSM/1h Mi4TBdULiOMRDK94PwEVzytZqjfext26DDuTyUmZtPP9Mdym6njkn3QxSBcgoSgV avLQiZF5mqEpK+65vIcVvtma3/VZyBULGSvEUyiqEv3e2HJSQPEYBgwP9QEQlRF9 cj9e102odwHxlUF78MACjv5veG2ET+BjbYvfJPtEIr1pxK9Z6cEpHtL9uZjf/IpN AmbaZxvqM1uoHsPcvADtqsQ0557Dd5J14PDh6oqAHEIIDmy3Fem3H+37AjuWBsB/ eqgd+FFU9Df4ztIsnApLP39+CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZTj5pE dMY+M1bUebOYzONb0hMmMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk4okz6YAqCtyqac9vApxH1FTQQU6xhsPve6IvcUeewis/AGjfdMqkOjCta9K hxOBndMy0pGEv8RpCiVEf+wtZKBY0+1P5/jaP5NPHZ86aVkvnh6jSPS0fu5e/RNO oBnljk60Z1H3Qy17RzzmFNHbCoP80XfeQXo04rk0otO6xEJF3VlG9JbRT2W/903t Ww+UWOGpOj67XUptaz9zEdFyY0ZvDXSKVl1oWqrtwvGpOR97qFAPv8oWLq3Cr2fZ JS9PnchY+arHu0q+M866KvAM7GOsL3cdNNFvVjhrgpJDqmyIQaaWEtzqy5ujybu3 i2We2Rif3N2bW4U67IhOHeGzUg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:00:43 2026 by rpki-client