$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: gQN48l6BLNRCMF1lf3XmAHin5FthJLPjPvUoYrM23A0= Subject key identifier: DC:3C:3C:88:A7:B0:E1:BF:FE:A8:0B:81:E4:95:4D:C2:00:E9:9C:71 Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 1584 Signing time: Wed 20 May 2026 18:02:30 +0000 Manifest this update: Wed 20 May 2026 18:02:29 +0000 Manifest next update: Wed 27 May 2026 18:02:29 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: W2lLu8EYbinAuZRwz7n0BwL2bj14KuO0leK1LVvNamg=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: HxB0HCgQPbOlmo96fIp6uk7AphF4jHP5wZ0nGph8yhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: May 20 18:02:29 2026 GMT Not After : May 27 18:02:29 2026 GMT Subject: CN=6a0df736-32a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:c4:dc:b5:51:b2:2f:90:97:ce:30:8d:5d: a6:f6:12:88:57:64:bf:4e:72:7b:67:f2:3f:ec:4a: f4:a0:53:8c:22:d0:b5:5a:87:ac:e3:64:2d:9a:5c: 47:d6:6c:1b:26:4b:af:00:1c:20:41:4f:b6:3b:a4: e5:bc:7e:26:fc:56:e6:14:a8:ef:91:13:24:a1:ee: 7f:10:9c:d5:7f:e8:17:c8:a0:fa:f4:06:f3:fb:98: 6c:1c:2f:1e:b1:cf:f1:0d:20:53:4e:5f:0a:5b:ae: d4:ab:21:d2:fb:20:64:b3:7c:f9:01:ce:4e:8d:19: 4f:23:1e:2c:4c:42:c9:17:78:00:72:d4:f3:cf:06: de:9e:c5:c4:e7:ee:9a:46:ba:d6:56:8b:f2:3c:b3: 83:6e:ca:c4:8b:a5:bb:83:a2:96:fd:4c:e5:7c:26: 1c:7d:df:0b:06:43:04:d5:4e:19:32:37:08:8d:92: 54:4b:13:d8:bc:6f:0c:d3:bf:66:4f:9a:4a:31:bf: 25:0e:eb:19:58:eb:f9:ad:d7:c3:a5:c6:0d:28:d2: 83:44:fa:a7:b3:d7:32:aa:f3:96:1b:fc:c6:47:46: c2:c5:73:ff:4c:b3:4e:f6:62:aa:fb:c3:21:80:9a: 6a:c2:a0:48:01:f6:e7:f9:d8:52:8d:41:76:d8:d9: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:3C:88:A7:B0:E1:BF:FE:A8:0B:81:E4:95:4D:C2:00:E9:9C:71 X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:11:9a:0e:c4:9e:c6:b2:71:b5:5f:94:bd:d8:42:07:01:c7: fa:91:43:d9:58:46:73:0d:a3:ac:13:94:7e:02:17:f0:92:cb: d5:4d:59:5e:9a:24:10:e9:75:4f:f0:00:2e:86:00:61:42:bf: 91:54:04:c8:71:03:45:da:81:d3:9a:d5:6b:bf:c1:fa:61:3e: de:96:8d:2e:a1:3b:d7:78:77:af:f4:5d:62:e6:b7:15:44:97: 72:64:42:02:1d:09:9a:5b:0f:e0:da:53:1b:c4:1a:a7:12:bf: 1f:97:70:09:18:3d:e1:84:7f:ca:9c:11:73:0e:c0:da:70:24: 28:a0:5a:24:91:46:d9:54:09:e2:90:d5:b4:e5:54:85:53:e9: c7:35:4d:4a:1e:8b:34:2f:b8:e3:fa:c7:8b:c1:6d:0b:17:4b: b1:dc:99:d3:49:8b:e1:5e:71:27:77:e1:d8:03:3d:da:2c:39: c3:fe:cd:88:0e:f9:68:fc:27:d0:29:5a:66:85:08:77:d5:22: 0f:7c:7c:28:46:36:4f:51:42:27:64:a7:97:f8:17:86:33:2a: 30:3b:3f:ae:cf:69:b4:85:c3:b8:ff:06:a9:22:43:1d:12:c4: c4:e2:95:5b:c4:51:39:76:2e:c8:a4:ff:5e:a3:15:01:0a:39: 87:44:fb:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjYwNTIwMTgwMjI5WhcNMjYwNTI3MTgwMjI5WjAYMRYwFAYD VQQDEw02YTBkZjczNi0zMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6zE3LVRsi+Ql84wjV2m9hKIV2S/TnJ7Z/I/7Er0oFOMItC1Woes42QtmlxH 1mwbJkuvABwgQU+2O6TlvH4m/FbmFKjvkRMkoe5/EJzVf+gXyKD69Abz+5hsHC8e sc/xDSBTTl8KW67UqyHS+yBks3z5Ac5OjRlPIx4sTELJF3gActTzzwbensXE5+6a RrrWVovyPLODbsrEi6W7g6KW/UzlfCYcfd8LBkME1U4ZMjcIjZJUSxPYvG8M079m T5pKMb8lDusZWOv5rdfDpcYNKNKDRPqns9cyqvOWG/zGR0bCxXP/TLNO9mKq+8Mh gJpqwqBIAfbn+dhSjUF22NkRqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNw8PIin sOG//qgLgeSVTcIA6ZxxMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBGaDsSexrJxtV+UvdhCBwHH+pFD2VhGcw2jrBOUfgIX8JLL1U1ZXpokEOl1 T/AALoYAYUK/kVQEyHEDRdqB05rVa7/B+mE+3paNLqE713h3r/RdYua3FUSXcmRC Ah0JmlsP4NpTG8QapxK/H5dwCRg94YR/ypwRcw7A2nAkKKBaJJFG2VQJ4pDVtOVU hVPpxzVNSh6LNC+44/rHi8FtCxdLsdyZ00mL4V5xJ3fh2AM92iw5w/7NiA75aPwn 0ClaZoUId9UiD3x8KEY2T1FCJ2Snl/gXhjMqMDs/rs9ptIXDuP8GqSJDHRLExOKV W8RROXYuyKT/XqMVAQo5h0T7dQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:09 2026 by rpki-client