$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: FqzHkqJV8Vygw11eOa7YnlbVDjTCQmhqwjIXqQt9qV0= Subject key identifier: 3E:6D:6F:03:51:FE:FD:2D:C1:0E:41:51:41:ED:C9:D5:D9:0A:50:34 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 04E5 Signing time: Tue 24 Mar 2026 23:27:20 +0000 Manifest this update: Tue 24 Mar 2026 23:27:20 +0000 Manifest next update: Tue 31 Mar 2026 23:27:20 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: KWyK4NkLQrP0MtIZ9PkbFyJJT/XPeYIW0pPyyT+ZAc0=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Mar 24 23:27:20 2026 GMT Not After : Mar 31 23:27:20 2026 GMT Subject: CN=69c31dd8-475f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d5:03:d7:44:78:4f:d5:30:2e:4d:12:98:92: df:c9:8e:3f:4c:f7:90:56:54:11:50:48:5f:c5:a3: c3:db:67:4f:11:c3:dc:7d:f3:69:bf:3f:8a:92:7b: 2f:68:a8:6b:ad:b8:71:6b:b6:39:a4:b9:62:e9:8b: a1:71:38:16:44:ed:f1:9e:78:86:54:af:89:52:b1: 86:b6:53:25:dc:60:5b:45:59:88:a7:71:aa:a7:12: f0:b6:b3:88:be:97:97:43:d3:49:52:3f:05:7f:45: 5a:2c:83:19:11:19:9f:71:cf:8b:6d:08:af:3a:d9: 36:c4:d1:66:e9:91:2b:cc:3b:99:21:d5:26:a4:21: 62:81:cf:f0:4b:24:f9:9a:4d:6b:51:de:f3:1c:e5: bc:0c:0d:ba:da:37:87:79:f3:ff:1a:01:7e:a7:14: 96:fd:98:f0:e0:86:fe:ff:3d:58:50:da:bf:5c:1d: 2f:65:a9:29:a1:d2:e7:1d:ec:2e:02:f0:c2:df:6c: f6:ef:a8:b1:81:d8:d8:a6:13:f4:03:57:52:ce:92: 0b:46:6a:f3:05:13:0b:40:82:19:41:ed:81:87:7d: 1e:16:0a:e0:16:2c:bf:46:70:f8:a6:b0:3d:bb:ab: 46:44:99:6e:80:fe:39:3f:6c:33:2a:79:a4:07:69: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:6F:03:51:FE:FD:2D:C1:0E:41:51:41:ED:C9:D5:D9:0A:50:34 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:8a:60:be:63:fd:b7:ed:91:5d:9e:1d:68:d6:09:e4:c9: 97:27:a0:b3:76:ec:d3:fd:47:af:ea:b6:44:17:7c:0e:93:b4: ee:8d:9f:d0:96:41:08:0c:71:9f:cf:07:68:8c:c5:0a:a8:04: 15:9d:9d:d3:b9:72:a7:28:45:44:4c:75:9f:44:7c:cb:d0:df: b2:56:6d:ce:aa:82:d8:9f:20:63:ea:35:c6:da:82:d8:6e:d3: e0:53:10:b1:45:03:bf:fd:33:fd:01:24:88:2b:29:4a:3f:23: 88:e6:22:55:e1:1f:c9:3e:34:7f:c0:e2:ee:09:55:50:c8:6b: 5c:d7:d6:64:5e:86:12:00:1d:d4:9c:a3:59:7a:d1:f2:63:cf: bc:34:3d:54:22:8a:a1:5f:06:2f:54:87:ea:32:6d:cf:98:37: ab:57:e8:4f:12:2a:21:1c:17:04:b4:ad:54:b8:87:8a:29:fe: 97:9e:da:c0:0b:01:57:b9:54:22:b4:9d:b3:b3:02:13:7c:43: 90:c2:a4:ba:ff:c6:92:d4:3f:eb:2c:30:80:61:37:80:e4:66: aa:48:dc:f0:a2:32:a6:b4:3d:dc:d1:7c:85:3a:be:af:88:72: ee:ff:10:14:f8:ab:6d:aa:82:f4:a1:6c:da:9d:f8:2a:23:b7: 2a:d4:3b:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwMzI0MjMyNzIwWhcNMjYwMzMxMjMyNzIwWjAYMRYwFAYD VQQDEw02OWMzMWRkOC00NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NUD10R4T9UwLk0SmJLfyY4/TPeQVlQRUEhfxaPD22dPEcPcffNpvz+Kknsv aKhrrbhxa7Y5pLli6YuhcTgWRO3xnniGVK+JUrGGtlMl3GBbRVmIp3GqpxLwtrOI vpeXQ9NJUj8Ff0VaLIMZERmfcc+LbQivOtk2xNFm6ZErzDuZIdUmpCFigc/wSyT5 mk1rUd7zHOW8DA262jeHefP/GgF+pxSW/Zjw4Ib+/z1YUNq/XB0vZakpodLnHewu AvDC32z276ixgdjYphP0A1dSzpILRmrzBRMLQIIZQe2Bh30eFgrgFiy/RnD4prA9 u6tGRJlugP45P2wzKnmkB2kRbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5tbwNR /v0twQ5BUUHtydXZClA0MB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaP6KYL5j/bftkV2eHWjWCeTJlyegs3bs0/1Hr+q2RBd8DpO07o2f0JZBCAxx n88HaIzFCqgEFZ2d07lypyhFREx1n0R8y9DfslZtzqqC2J8gY+o1xtqC2G7T4FMQ sUUDv/0z/QEkiCspSj8jiOYiVeEfyT40f8Di7glVUMhrXNfWZF6GEgAd1JyjWXrR 8mPPvDQ9VCKKoV8GL1SH6jJtz5g3q1foTxIqIRwXBLStVLiHiin+l57awAsBV7lU IrSds7MCE3xDkMKkuv/GktQ/6ywwgGE3gORmqkjc8KIyprQ93NF8hTq+r4hy7v8Q FPirbaqC9KFs2p34KiO3KtQ7Bw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:04 2026 by rpki-client