$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: CuoXdxUo+4GouTt3TCeTpYMtNAFk5kQwXIFDcGWWcGc= Subject key identifier: 23:2B:8B:2E:02:E1:E3:4B:82:57:2D:E3:CB:73:39:DE:15:92:39:C3 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0544 Signing time: Sat 26 Sep 2026 23:31:57 +0000 Manifest this update: Sat 26 Sep 2026 23:31:56 +0000 Manifest next update: Sat 03 Oct 2026 23:31:56 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: A4erIemEwdCHda8PYafFF2b7VjWtVahLK4LTzHcwz1Y=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Sep 26 23:31:56 2026 GMT Not After : Oct 3 23:31:56 2026 GMT Subject: CN=6ab855ed-b909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:9b:75:ef:b5:f2:07:51:3a:bc:25:bd:31: 1a:27:dd:8f:41:81:81:9c:88:c6:7d:11:61:b6:9d: ff:7f:6b:c4:a0:f4:11:9c:b6:79:63:d6:9d:63:04: 8b:47:b0:45:85:ae:51:3b:cb:fb:65:76:ef:d8:18: 54:47:49:5e:4b:5c:12:aa:d2:b7:8c:45:ed:d1:9b: b9:f3:39:79:99:e2:fb:f0:81:68:d9:6a:da:d3:94: ce:95:b8:f1:7e:89:fb:22:ff:13:be:78:cd:15:af: 7f:34:78:97:4e:a7:4d:11:9f:9d:be:75:2b:c1:16: 2a:92:ff:99:e4:c0:c2:fd:18:2a:f3:10:d8:73:7a: 4b:bf:f4:4f:21:00:fc:62:ba:a0:ed:2f:65:8f:1a: cd:e5:52:b5:a6:29:bc:9c:9d:54:39:31:76:a0:45: a6:04:97:4b:1b:45:f2:3a:38:dc:1a:fe:31:46:cc: 21:92:66:ef:38:55:77:ef:1f:f9:ce:29:70:b7:6f: 3e:61:c6:67:4b:74:32:70:59:fb:9f:42:f7:ad:cc: 4a:fa:1b:5b:ff:8d:bb:a6:12:aa:06:4c:ef:fc:18: 77:85:11:fe:75:e1:ac:33:0b:42:ac:c0:66:c5:40: ac:65:ec:e1:79:e2:8d:01:dc:2e:d3:fa:23:f5:fd: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:8B:2E:02:E1:E3:4B:82:57:2D:E3:CB:73:39:DE:15:92:39:C3 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:22:a7:35:46:94:21:9e:2f:23:7d:1e:17:5f:c4:44:ef:fa: 21:be:ab:00:b4:5f:a0:c5:bd:b2:66:c7:fc:22:8e:f3:06:1d: ef:02:cc:a7:97:ef:02:d9:83:db:3a:f9:90:b1:a7:98:30:a9: e7:9d:2a:1c:57:ca:90:a5:b0:67:a1:10:ab:88:62:42:2f:d7: 2e:6b:a2:2f:42:6c:f5:dd:5c:7e:b0:08:a4:ec:6f:4b:55:c4: cf:93:72:49:d4:08:f4:a0:98:7c:25:5b:7e:46:44:a0:3d:f3: f0:19:62:30:64:9c:b8:13:09:5d:60:8f:55:ca:3f:b8:97:26: 58:a3:1d:b2:c9:69:09:6d:55:ac:9c:5f:fa:de:99:44:14:ae: 13:dc:cb:b6:46:46:a0:a2:ee:3a:7f:ee:9d:85:a1:76:1e:cd: 58:80:93:bd:5c:ba:cd:0c:26:62:3f:df:cb:09:fa:fc:7f:4a: 4d:8a:e4:1c:1e:21:f6:cd:6a:0a:82:b8:c6:ab:5a:86:16:61: 39:b6:2c:55:c9:a6:9d:8c:2f:5c:dd:5d:cd:ca:3d:6b:4a:d3: f1:5e:e6:e6:41:0e:db:7f:22:1a:bf:26:e3:ad:29:ee:4b:db: 57:ed:ca:c5:59:91:b2:ae:01:39:c8:0b:5c:f6:8c:df:d5:af: b2:6e:de:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwOTI2MjMzMTU2WhcNMjYxMDAzMjMzMTU2WjAYMRYwFAYD VQQDEw02YWI4NTVlZC1iOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxubde+18gdROrwlvTEaJ92PQYGBnIjGfRFhtp3/f2vEoPQRnLZ5Y9adYwSL R7BFha5RO8v7ZXbv2BhUR0leS1wSqtK3jEXt0Zu58zl5meL78IFo2Wra05TOlbjx fon7Iv8TvnjNFa9/NHiXTqdNEZ+dvnUrwRYqkv+Z5MDC/Rgq8xDYc3pLv/RPIQD8 Yrqg7S9ljxrN5VK1pim8nJ1UOTF2oEWmBJdLG0XyOjjcGv4xRswhkmbvOFV37x/5 zilwt28+YcZnS3QycFn7n0L3rcxK+htb/427phKqBkzv/Bh3hRH+deGsMwtCrMBm xUCsZezheeKNAdwu0/oj9f2VtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMriy4C 4eNLglct48tzOd4VkjnDMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsiKnNUaUIZ4vI30eF1/ERO/6Ib6rALRfoMW9smbH/CKO8wYd7wLMp5fvAtmD 2zr5kLGnmDCp550qHFfKkKWwZ6EQq4hiQi/XLmuiL0Js9d1cfrAIpOxvS1XEz5Ny SdQI9KCYfCVbfkZEoD3z8BliMGScuBMJXWCPVco/uJcmWKMdsslpCW1VrJxf+t6Z RBSuE9zLtkZGoKLuOn/unYWhdh7NWICTvVy6zQwmYj/fywn6/H9KTYrkHB4h9s1q CoK4xqtahhZhObYsVcmmnYwvXN1dzco9a0rT8V7m5kEO238iGr8m460p7kvbV+3K xVmRsq4BOcgLXPaM39Wvsm7exg== -----END CERTIFICATE-----Generated at Tue Sep 29 02:41:41 2026 by rpki-client