$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: bxqbc4iEYhamzhKw0hjlaoeY8p/W/4wZlJV7yD1elv4= Subject key identifier: D6:0B:36:BC:A0:BC:B0:A0:78:E9:A6:E5:B7:B7:B5:96:50:6C:42:35 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 35A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 3586 Signing time: Fri 04 Sep 2026 14:36:47 +0000 Manifest this update: Fri 04 Sep 2026 14:36:46 +0000 Manifest next update: Fri 11 Sep 2026 14:36:46 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: B7kp366x+cX8x7T+0y1YqU1bI1Yxlp+J2Ozpq5VQi+g=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Sep 4 14:36:46 2026 GMT Not After : Sep 11 14:36:46 2026 GMT Subject: CN=6a9ad77f-9044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:27:09:60:da:d0:31:b4:aa:5e:11:07:8c: 67:58:b8:ef:aa:69:63:a1:e2:56:96:89:f7:6b:a5: 68:00:0a:8b:57:4c:b1:48:48:43:ca:af:ef:3e:39: 61:7b:f1:60:89:cd:80:c6:01:30:d4:f6:87:18:75: fe:7c:e6:5c:a6:de:ef:da:43:f5:78:cc:0b:67:73: 69:cc:f8:04:da:45:fc:6a:b4:1e:1b:87:5f:dc:9c: 03:e6:12:64:e2:e0:2c:7a:14:8a:54:db:67:24:b0: 01:9e:1d:b7:b2:9e:78:4d:06:63:b6:ef:38:03:18: 5e:0b:a3:76:22:d9:8e:65:eb:91:6a:e7:34:78:b1: 6c:de:13:20:91:8e:60:31:bc:ce:aa:fd:49:26:a3: d9:c6:b1:7a:65:77:5a:f0:71:12:72:b9:b2:d7:9b: bf:4b:d7:81:12:f6:a5:6b:12:07:89:e6:0a:1f:93: fb:e0:2d:ac:34:3c:af:76:40:64:dd:c7:ea:34:5f: 0d:c2:cc:e1:59:8b:f8:f0:c5:ca:ed:0d:37:e0:93: 73:06:41:e4:a5:fc:44:5e:2f:79:bf:8f:c5:9e:df: 72:52:63:f8:b7:46:b1:e9:66:5a:3a:f1:bf:b1:e4: ea:40:f0:be:d5:13:27:42:e4:bf:18:27:d0:73:e4: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0B:36:BC:A0:BC:B0:A0:78:E9:A6:E5:B7:B7:B5:96:50:6C:42:35 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1d:65:35:19:4a:01:fb:52:c8:3f:d7:41:55:f4:98:25:28: e4:6a:09:29:21:c3:b8:12:c5:6e:26:d2:f8:52:f0:48:b8:9a: ab:ff:bc:a5:eb:03:30:32:fd:22:d7:e7:fd:d4:88:67:f9:34: 97:1c:8a:d4:c4:59:cb:f4:7f:39:b7:05:43:f9:25:df:4c:d9: fc:d6:8f:0b:89:e9:9d:c8:2e:be:d2:70:e2:a1:a8:88:c2:f3: d7:5c:e0:f6:27:fe:f6:66:a4:61:c0:dc:4f:ff:cf:b6:1b:47: 7e:ba:b1:67:27:21:98:cb:e5:85:e4:de:ce:13:fd:c5:76:e8: d2:29:a2:a0:f3:dd:8b:f8:5b:fd:b0:13:88:38:45:e2:6b:94: ef:dd:4b:8f:5b:e2:f1:ff:e7:ee:7d:fe:f7:82:d6:51:44:71: 7c:21:78:ad:b5:82:df:27:8d:94:36:ed:59:1e:15:87:53:32: d9:22:fa:b7:54:a9:38:8b:0b:90:36:73:ad:97:36:93:83:3f: 09:0c:e1:12:20:ea:09:81:d9:58:ee:1b:41:ca:93:e0:cf:23: 55:f8:8a:97:98:70:d5:eb:34:eb:ac:e8:3f:a7:90:e4:cf:c1: 3e:1e:46:8e:5c:55:92:08:28:f6:d3:64:f2:c8:53:d0:e4:fa: 32:84:a7:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwOTA0MTQzNjQ2WhcNMjYwOTExMTQzNjQ2WjAYMRYwFAYD VQQDEw02YTlhZDc3Zi05MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaknCWDa0DG0ql4RB4xnWLjvqmljoeJWlon3a6VoAAqLV0yxSEhDyq/vPjlh e/Fgic2AxgEw1PaHGHX+fOZcpt7v2kP1eMwLZ3NpzPgE2kX8arQeG4df3JwD5hJk 4uAsehSKVNtnJLABnh23sp54TQZjtu84AxheC6N2ItmOZeuRauc0eLFs3hMgkY5g MbzOqv1JJqPZxrF6ZXda8HEScrmy15u/S9eBEvalaxIHieYKH5P74C2sNDyvdkBk 3cfqNF8NwszhWYv48MXK7Q034JNzBkHkpfxEXi95v4/Fnt9yUmP4t0ax6WZaOvG/ seTqQPC+1RMnQuS/GCfQc+SOUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYLNryg vLCgeOmm5be3tZZQbEI1MB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANh1lNRlKAftSyD/XQVX0mCUo5GoJKSHDuBLFbibS+FLwSLiaq/+8pesDMDL9 Itfn/dSIZ/k0lxyK1MRZy/R/ObcFQ/kl30zZ/NaPC4npncguvtJw4qGoiMLz11zg 9if+9makYcDcT//PthtHfrqxZychmMvlheTezhP9xXbo0imioPPdi/hb/bATiDhF 4muU791Lj1vi8f/n7n3+94LWUURxfCF4rbWC3yeNlDbtWR4Vh1My2SL6t1SpOIsL kDZzrZc2k4M/CQzhEiDqCYHZWO4bQcqT4M8jVfiKl5hw1es066zoP6eQ5M/BPh5G jlxVkggo9tNk8shT0OT6MoSnMQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:46:31 2026 by rpki-client