$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: sMZ+cUl8w676RhdGAPtZEbYY4i3pz7W+mnJspVQz53w= Subject key identifier: 81:AA:26:F0:05:1F:09:55:7B:65:38:5E:AB:EA:1E:15:D3:31:DA:FB Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0541 Signing time: Sun 20 Sep 2026 23:18:32 +0000 Manifest this update: Sun 20 Sep 2026 23:18:32 +0000 Manifest next update: Sun 27 Sep 2026 23:18:32 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: Lh+jh5iE6fwKpl28UieDxUnsm9S5bm43pmNDwcljbVo=) 2: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) 3: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Sep 20 23:18:32 2026 GMT Not After : Sep 27 23:18:32 2026 GMT Subject: CN=6ab069c8-38b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:cd:60:c3:48:0b:0e:6a:76:94:5e:0d:16: ac:91:ac:49:bc:d2:51:11:26:ce:b1:1f:22:9c:be: 3f:8c:bb:bd:bb:5b:f7:f2:b9:48:ac:1a:14:37:0c: 87:5d:8f:75:a4:19:63:c2:e5:8d:03:e1:0d:f2:08: c0:d2:81:f8:12:ec:62:c8:e4:28:e1:ac:cc:c5:90: d0:47:d9:9a:f8:70:4d:05:76:55:60:af:9a:b6:86: e0:09:ed:51:f2:1d:ca:00:30:d5:62:9e:b4:e2:05: 77:25:66:94:1d:4f:74:f5:e5:3a:e9:d8:10:a6:02: 60:11:4a:5d:08:00:fc:c1:94:13:c7:53:61:d2:0b: 76:7b:4d:74:1a:dc:a2:79:49:bf:2d:0c:2a:d6:92: f6:05:7d:3a:57:56:07:b6:5c:51:a7:54:a4:49:bf: 2a:c5:15:15:5c:2c:2a:f2:9f:c2:87:ea:48:df:32: ae:11:31:b2:ce:7e:b4:cf:10:8f:30:de:4d:cb:a7: ba:db:10:e1:1a:ac:00:ed:1d:f0:c6:91:08:d1:5a: 67:95:ab:28:42:8d:41:5d:45:07:56:34:5c:49:a5: 5c:5d:3c:54:e3:8f:a2:e3:91:1e:76:1e:89:e6:ab: d0:81:a7:07:87:b8:56:ac:4d:bd:c8:38:d2:af:c8: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AA:26:F0:05:1F:09:55:7B:65:38:5E:AB:EA:1E:15:D3:31:DA:FB X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:f5:e4:fe:ca:3a:2d:6d:4e:ad:94:da:f1:6a:56:59:f3: ea:22:c7:b1:07:33:f8:e5:53:06:64:ac:a1:1a:80:93:7f:f4: 24:4f:2a:e2:ea:11:2b:0e:35:3d:65:cf:11:b2:32:43:71:3e: a4:ed:39:99:52:74:87:8e:07:ec:39:03:b2:59:d3:3b:dd:5f: 4e:12:85:0a:f8:22:38:16:7e:84:a7:f9:97:d3:96:08:8a:91: ff:04:95:0c:7e:14:23:03:0a:bd:45:93:2c:cc:79:ec:fc:bf: 42:ac:86:32:77:75:cb:56:5e:22:60:33:44:c1:9f:fa:b9:6b: f6:88:d6:61:df:5a:8e:42:d6:27:08:58:ea:ff:3b:d7:e1:00: b2:2e:10:cb:f2:8a:c5:af:d0:e7:c1:c7:f2:64:fb:e8:04:43: c5:79:a3:52:d4:ca:0e:d6:18:a7:42:8e:b1:ac:77:16:a7:ce: 80:97:59:17:cf:95:55:1e:12:32:35:6b:a3:ea:26:fa:08:70: a3:90:21:29:ea:31:f0:0b:90:c5:9c:3e:6e:0f:bf:62:a2:d0: c8:d3:26:54:34:a7:48:b3:eb:2d:fb:2a:90:9c:de:fc:bc:52: da:bd:a1:f0:c4:2a:4a:f9:0f:37:46:fa:37:df:f2:71:b9:6b: 60:d6:b8:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwOTIwMjMxODMyWhcNMjYwOTI3MjMxODMyWjAYMRYwFAYD VQQDEw02YWIwNjljOC0zOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyorNYMNICw5qdpReDRaskaxJvNJRESbOsR8inL4/jLu9u1v38rlIrBoUNwyH XY91pBljwuWNA+EN8gjA0oH4EuxiyOQo4azMxZDQR9ma+HBNBXZVYK+atobgCe1R 8h3KADDVYp604gV3JWaUHU909eU66dgQpgJgEUpdCAD8wZQTx1Nh0gt2e010Gtyi eUm/LQwq1pL2BX06V1YHtlxRp1SkSb8qxRUVXCwq8p/Ch+pI3zKuETGyzn60zxCP MN5Ny6e62xDhGqwA7R3wxpEI0VpnlasoQo1BXUUHVjRcSaVcXTxU44+i45Eedh6J 5qvQgacHh7hWrE29yDjSr8hs9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGqJvAF HwlVe2U4XqvqHhXTMdr7MB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAovn15P7KOi1tTq2U2vFqVlnz6iLHsQcz+OVTBmSsoRqAk3/0JE8q4uoRKw41 PWXPEbIyQ3E+pO05mVJ0h44H7DkDslnTO91fThKFCvgiOBZ+hKf5l9OWCIqR/wSV DH4UIwMKvUWTLMx57Py/QqyGMnd1y1ZeImAzRMGf+rlr9ojWYd9ajkLWJwhY6v87 1+EAsi4Qy/KKxa/Q58HH8mT76ARDxXmjUtTKDtYYp0KOsax3FqfOgJdZF8+VVR4S MjVro+om+ghwo5AhKeox8AuQxZw+bg+/YqLQyNMmVDSnSLPrLfsqkJze/LxS2r2h 8MQqSvkPN0b6N9/ycblrYNa4Uw== -----END CERTIFICATE-----Generated at Wed Sep 23 01:02:02 2026 by rpki-client