$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: gw5IzBNgFec33OQCpmMTUnwUTQ+7aPWCOV9RNKTtJ4Y= Subject key identifier: CF:D7:09:76:36:19:52:66:0C:A8:FF:AB:58:C7:08:47:9B:28:B0:14 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 04D7 Signing time: Sun 01 Mar 2026 00:27:02 +0000 Manifest this update: Sun 01 Mar 2026 00:27:02 +0000 Manifest next update: Sun 08 Mar 2026 00:27:02 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: 29iuo61wQqt19CBFbjU0JADb4E0Kn6UO6UZrwQcp9Wo=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: YCce8tgGIDPMHY1UAJx0Vt+V35//ZESj5TUbI8mggBI=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: mAObJG/noQv8HuWrQdRwwEpct2Xqan3vBTnLkNPqPBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Mar 1 00:27:02 2026 GMT Not After : Mar 8 00:27:02 2026 GMT Subject: CN=69a387d6-37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:27:4f:96:10:5f:cb:cc:ad:85:d2:f4:22: 4e:92:f3:20:58:02:77:ff:97:3f:fb:89:20:20:1f: 31:38:23:80:26:a8:1e:88:93:d3:40:82:a5:0c:f8: b0:da:46:97:67:2d:23:e9:a2:84:fa:54:cd:61:db: 0a:e1:14:73:e5:8c:d1:35:df:9c:d1:00:2d:43:0d: 9e:9a:8a:05:53:7d:eb:20:ae:db:b8:c2:d6:b7:c9: 05:26:f1:2a:ae:2e:e7:89:e8:b9:0f:53:ae:f8:a2: 39:0c:05:a5:c0:87:c9:5e:f9:34:af:95:ab:75:0b: 53:cf:00:52:da:64:73:34:e0:d3:5a:94:1b:c5:6f: 6b:9c:cb:dc:34:db:2e:8b:78:c9:62:0f:0c:e0:47: 85:b8:d7:4c:7e:ee:50:d7:be:7b:ec:1b:4d:27:44: 2e:b9:3c:b0:81:60:1f:93:23:4c:d9:ce:c9:b8:74: b9:b7:cc:5a:75:3c:e1:a6:85:6d:89:f2:a0:ea:bb: ef:e2:1c:d4:76:51:d4:f3:33:7f:ad:14:28:27:09: 2d:b0:41:07:a2:2c:eb:dc:dc:6d:05:4b:35:83:8d: 52:2b:62:09:00:7c:1e:7f:7e:15:8e:c6:6d:54:45: 64:85:96:3b:ce:e3:ab:8e:dd:7a:ac:3a:1e:ea:19: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D7:09:76:36:19:52:66:0C:A8:FF:AB:58:C7:08:47:9B:28:B0:14 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:3f:4f:ee:21:14:18:e7:72:51:39:a0:8b:3a:b4:ae:28:9a: cb:dc:8d:ea:30:4d:06:1a:bf:c1:5b:34:71:64:0b:dd:95:3a: 81:f7:d5:6c:21:a0:bc:c8:00:d7:0c:d2:2b:aa:09:12:1f:49: f3:6d:b0:8d:a5:ec:0b:87:a5:36:8d:82:44:8e:be:98:82:80: 0e:31:c4:98:de:19:aa:9b:5a:e1:27:b1:6e:60:c2:a1:fd:63: c1:78:7d:05:24:b0:e6:b2:a1:c9:7b:5f:0f:98:f8:66:13:fd: 49:ab:04:34:dc:0d:09:b0:cf:77:7f:c5:9e:4b:10:f5:77:28: f4:9e:6a:04:8e:7c:ea:f1:ec:ec:f6:f8:12:5e:fe:57:93:e9: df:49:c5:88:16:6d:ab:00:4a:a8:b4:12:75:fd:24:f3:ba:72: 76:8a:fa:80:7a:b1:b2:7e:de:7f:55:cd:3a:a6:ff:53:e4:78: d9:bb:f3:c9:50:e2:01:6b:79:ec:9c:c9:62:9f:e3:28:66:27: 50:3f:0b:ae:9a:e7:5c:3b:47:67:42:47:9c:36:5c:84:c3:13: 5f:a9:04:62:e9:1d:50:74:97:b2:75:a8:ed:a7:7d:8a:3a:f3: 52:27:53:a1:41:4b:91:07:72:76:ae:56:94:98:c0:1c:6c:c4: a2:cd:66:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjYwMzAxMDAyNzAyWhcNMjYwMzA4MDAyNzAyWjAYMRYwFAYD VQQDDA02OWEzODdkNi0zN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EAnT5YQX8vMrYXS9CJOkvMgWAJ3/5c/+4kgIB8xOCOAJqgeiJPTQIKlDPiw 2kaXZy0j6aKE+lTNYdsK4RRz5YzRNd+c0QAtQw2emooFU33rIK7buMLWt8kFJvEq ri7niei5D1Ou+KI5DAWlwIfJXvk0r5WrdQtTzwBS2mRzNODTWpQbxW9rnMvcNNsu i3jJYg8M4EeFuNdMfu5Q17577BtNJ0QuuTywgWAfkyNM2c7JuHS5t8xadTzhpoVt ifKg6rvv4hzUdlHU8zN/rRQoJwktsEEHoizr3NxtBUs1g41SK2IJAHwef34VjsZt VEVkhZY7zuOrjt16rDoe6hnukwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/XCXY2 GVJmDKj/q1jHCEebKLAUMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkz9P7iEUGOdyUTmgizq0riiay9yN6jBNBhq/wVs0cWQL3ZU6gffVbCGgvMgA 1wzSK6oJEh9J822wjaXsC4elNo2CRI6+mIKADjHEmN4Zqpta4SexbmDCof1jwXh9 BSSw5rKhyXtfD5j4ZhP9SasENNwNCbDPd3/FnksQ9Xco9J5qBI586vHs7Pb4El7+ V5Pp30nFiBZtqwBKqLQSdf0k87pydor6gHqxsn7ef1XNOqb/U+R42bvzyVDiAWt5 7JzJYp/jKGYnUD8LrprnXDtHZ0JHnDZchMMTX6kEYukdUHSXsnWo7ad9ijrzUidT oUFLkQdydq5WlJjAHGzEos1mfg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:54 2026 by rpki-client