$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: Ed1GzbDuw07jojdXZf8Yv/9ya+gqQ0GrVJDTtHsDLko= Subject key identifier: ED:F5:A4:13:77:87:A7:3B:39:C8:81:A5:FF:65:7D:0B:3F:C9:22:C5 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 04F1 Signing time: Thu 16 Apr 2026 23:38:46 +0000 Manifest this update: Thu 16 Apr 2026 23:38:45 +0000 Manifest next update: Thu 23 Apr 2026 23:38:45 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: X/wDC8SEy/H5RuXmucxAx7hAM1nI2OARa3fe6KcAQbo=) 2: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) 3: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Apr 16 23:38:45 2026 GMT Not After : Apr 23 23:38:45 2026 GMT Subject: CN=69e17306-083c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:66:02:15:3c:70:2a:c1:3c:db:ab:e0:7e: 87:25:3a:9c:a5:c8:29:8c:07:bc:ee:3e:31:0d:ed: dc:59:77:49:e7:d1:70:1f:a0:60:b0:cc:d4:a3:fe: c6:a6:41:94:66:f0:a0:0a:a6:99:10:a3:f2:97:8a: 9b:79:41:93:cd:3e:60:bf:e8:cc:2d:41:ba:07:f4: bd:35:70:23:0c:fa:e0:5a:e9:28:b2:8a:db:78:ff: 28:1c:4e:c9:21:b7:b3:3d:fc:0f:11:cb:1a:37:a5: 06:fa:b8:a0:58:6a:53:e3:18:ec:f0:28:1c:e9:f1: af:07:bf:2e:ba:a8:e5:87:d4:4d:d5:99:1f:d0:fd: 76:53:35:d2:be:2d:92:71:81:1e:c9:95:23:90:88: 69:45:95:09:75:ed:28:2e:af:d1:cc:e9:9a:bf:8f: 1e:27:a7:e4:90:8f:d7:1f:14:b3:ab:98:cb:9e:f3: 08:6b:64:1a:fb:9a:0b:2a:53:98:53:dc:73:84:43: 0a:57:cc:e5:92:4c:5b:82:ce:bf:dd:44:ec:12:dc: 87:00:84:70:81:84:72:15:30:38:25:63:5a:c0:7a: 95:20:8b:39:eb:23:a0:db:2d:6b:d2:56:76:4d:f1: 2e:d4:e2:b2:1c:23:8c:58:63:47:bf:08:f0:2e:07: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F5:A4:13:77:87:A7:3B:39:C8:81:A5:FF:65:7D:0B:3F:C9:22:C5 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b3:0e:b3:f8:53:e2:ea:09:45:fa:e3:69:3d:a9:e0:ad:69: ce:28:65:e9:b3:69:75:e4:aa:f6:3e:9e:c0:48:71:1f:7f:c1: 11:ea:ff:7d:8c:32:33:fa:5d:58:43:ad:86:88:94:9c:98:a6: 12:20:e7:db:de:4b:7a:84:e2:e5:2e:d6:d8:17:32:c6:84:51: 6d:41:a0:39:72:11:79:ea:d0:5f:45:22:5c:d5:6c:7b:b7:de: 1e:07:ca:9b:de:67:39:da:9e:21:df:89:c2:b5:f0:ab:0f:69: 10:ba:61:78:f0:97:67:e0:0f:cb:66:33:d5:13:62:de:96:62: a2:69:db:3c:da:57:37:a6:8d:b8:14:b6:41:3f:5c:5d:c9:56: 46:85:1b:26:15:56:2b:cd:db:70:11:d8:7b:43:c2:0d:72:9b: 91:06:f2:3b:14:8a:71:a7:c2:17:a7:3c:79:df:da:41:c4:af: 6d:8e:62:41:e5:6f:a7:cf:5f:19:9a:63:01:35:20:8a:4c:05: 81:87:e6:b6:32:d4:40:97:d4:49:85:c4:ab:19:68:59:b7:dc: 1d:f7:13:d7:78:26:a8:ff:13:59:98:e3:80:bb:ab:9e:24:0c: 19:38:f9:4f:98:27:7a:6c:9b:72:1e:f0:5c:a0:d8:3f:11:b9: 31:49:77:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwNDE2MjMzODQ1WhcNMjYwNDIzMjMzODQ1WjAYMRYwFAYD VQQDEw02OWUxNzMwNi0wODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzNmAhU8cCrBPNur4H6HJTqcpcgpjAe87j4xDe3cWXdJ59FwH6BgsMzUo/7G pkGUZvCgCqaZEKPyl4qbeUGTzT5gv+jMLUG6B/S9NXAjDPrgWukosorbeP8oHE7J IbezPfwPEcsaN6UG+rigWGpT4xjs8Cgc6fGvB78uuqjlh9RN1Zkf0P12UzXSvi2S cYEeyZUjkIhpRZUJde0oLq/RzOmav48eJ6fkkI/XHxSzq5jLnvMIa2Qa+5oLKlOY U9xzhEMKV8zlkkxbgs6/3UTsEtyHAIRwgYRyFTA4JWNawHqVIIs56yOg2y1r0lZ2 TfEu1OKyHCOMWGNHvwjwLgdu+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO31pBN3 h6c7OciBpf9lfQs/ySLFMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhLMOs/hT4uoJRfrjaT2p4K1pzihl6bNpdeSq9j6ewEhxH3/BEer/fYwyM/pd WEOthoiUnJimEiDn295LeoTi5S7W2BcyxoRRbUGgOXIReerQX0UiXNVse7feHgfK m95nOdqeId+JwrXwqw9pELphePCXZ+APy2Yz1RNi3pZiomnbPNpXN6aNuBS2QT9c XclWRoUbJhVWK83bcBHYe0PCDXKbkQbyOxSKcafCF6c8ed/aQcSvbY5iQeVvp89f GZpjATUgikwFgYfmtjLUQJfUSYXEqxloWbfcHfcT13gmqP8TWZjjgLurniQMGTj5 T5gnemybch7wXKDYPxG5MUl3tA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:06 2026 by rpki-client