$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: PnhqC44tRmTrBsNUujcgMrVKaPvjLoCQ565SxUk2AZE= Subject key identifier: 6D:A0:B4:2B:B0:8B:94:B4:CD:90:31:B8:AB:A7:D3:D9:C5:03:61:05 Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 1615 Signing time: Tue 06 Oct 2026 18:02:55 +0000 Manifest this update: Tue 06 Oct 2026 18:02:54 +0000 Manifest next update: Tue 13 Oct 2026 18:02:54 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: U6BwqLf/HyhFuQhIXOxJI7MiQEW/b+GsiSOhxjTCyQc=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: ue5ndJ8DrcK9W907BtlxWmIb4e/ViU5GMxY4q9X9FmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Oct 6 18:02:54 2026 GMT Not After : Oct 13 18:02:54 2026 GMT Subject: CN=6ac537cf-134f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:4e:6a:c5:45:d9:10:25:9b:40:25:a4:c7: fa:04:2f:8a:05:33:e8:60:62:5a:19:41:de:d2:3e: d6:40:dc:ec:76:af:f4:b4:4e:1c:01:ea:a5:be:1f: 4c:cd:2a:0f:3a:ea:c4:33:2f:4d:4a:09:9b:a5:a0: 4a:82:3f:13:fd:2f:5c:6e:9b:62:8d:0b:4a:29:0f: a7:a0:6a:d5:4d:5e:a5:74:56:d7:23:d8:05:8f:11: 49:b4:16:b6:98:6c:1f:56:03:cf:65:fc:66:9f:fb: 89:46:a0:44:27:c1:79:5e:a7:b6:dd:77:24:eb:ab: 90:d2:96:f4:a1:d2:c4:7d:30:8c:76:af:bb:d1:fa: 98:14:f8:58:8d:e6:93:a7:e6:76:4f:5f:99:82:f6: 95:ad:80:1e:dc:fa:4f:1b:c0:88:b3:84:f6:4c:86: 25:31:bb:e2:fb:ab:a5:a9:b5:59:df:dc:bf:61:6b: f8:13:50:77:dd:85:12:0c:45:a9:25:3e:c1:55:9c: bb:12:1c:0f:a7:fd:3e:cb:f3:4e:8f:17:3d:c5:48: 1f:26:6e:76:c6:07:da:28:e3:d3:9e:20:da:9b:a9: 70:de:50:fb:05:e5:de:dc:99:d0:7d:49:67:30:46: 87:fa:a2:5b:ca:9e:0e:09:22:b3:29:b0:bb:a1:ba: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A0:B4:2B:B0:8B:94:B4:CD:90:31:B8:AB:A7:D3:D9:C5:03:61:05 X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:12:15:17:43:ce:5d:30:31:23:a0:22:7a:ce:54:13:89:5e: 56:9e:b6:67:1d:ff:ad:1c:3c:ae:44:40:ff:a8:d0:7a:37:46: cb:37:ec:1e:09:c0:ed:94:86:1b:47:97:81:fb:11:57:d8:29: 6c:03:96:21:ff:c9:c6:53:18:7e:b1:d5:fb:c0:b5:0d:05:ae: fe:1d:08:89:b2:f5:e1:93:fa:c5:f4:13:0f:9b:4a:1d:2b:40: db:3a:63:2a:e6:4e:bf:90:b9:01:a1:01:9c:0c:27:a3:09:7f: 91:1c:4c:d6:2e:07:02:4c:fb:4a:d9:9d:eb:ba:48:9c:b5:6f: b6:a3:dc:e6:04:2c:2c:56:1a:d1:ca:52:e5:00:ca:7b:81:31: 89:62:cd:06:30:41:44:bb:f1:8c:69:03:66:a6:0b:b3:3d:8b: c1:40:80:46:06:00:9f:8e:c7:1f:85:28:d7:32:a3:57:9b:c4: 91:f6:85:c0:eb:3b:e2:53:22:69:a9:ff:c0:06:55:fc:9b:0f: d5:f3:69:44:69:7f:91:13:c6:20:3d:a9:89:4f:aa:14:6d:2c: 4a:c2:8a:0e:29:ca:c0:15:69:da:e7:1b:05:45:43:62:ab:93: 08:8f:af:4a:6d:d4:a1:0d:14:1c:98:33:20:48:f6:ad:22:8f: 68:2d:f2:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjYxMDA2MTgwMjU0WhcNMjYxMDEzMTgwMjU0WjAYMRYwFAYD VQQDEw02YWM1MzdjZi0xMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuNOasVF2RAlm0AlpMf6BC+KBTPoYGJaGUHe0j7WQNzsdq/0tE4cAeqlvh9M zSoPOurEMy9NSgmbpaBKgj8T/S9cbptijQtKKQ+noGrVTV6ldFbXI9gFjxFJtBa2 mGwfVgPPZfxmn/uJRqBEJ8F5Xqe23Xck66uQ0pb0odLEfTCMdq+70fqYFPhYjeaT p+Z2T1+ZgvaVrYAe3PpPG8CIs4T2TIYlMbvi+6ulqbVZ39y/YWv4E1B33YUSDEWp JT7BVZy7EhwPp/0+y/NOjxc9xUgfJm52xgfaKOPTniDam6lw3lD7BeXe3JnQfUln MEaH+qJbyp4OCSKzKbC7obqD5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2gtCuw i5S0zZAxuKun09nFA2EFMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxIVF0POXTAxI6Aies5UE4leVp62Zx3/rRw8rkRA/6jQejdGyzfsHgnA7ZSG G0eXgfsRV9gpbAOWIf/JxlMYfrHV+8C1DQWu/h0IibL14ZP6xfQTD5tKHStA2zpj KuZOv5C5AaEBnAwnowl/kRxM1i4HAkz7Stmd67pInLVvtqPc5gQsLFYa0cpS5QDK e4ExiWLNBjBBRLvxjGkDZqYLsz2LwUCARgYAn47HH4Uo1zKjV5vEkfaFwOs74lMi aan/wAZV/JsP1fNpRGl/kRPGID2piU+qFG0sSsKKDinKwBVp2ucbBUVDYquTCI+v Sm3UoQ0UHJgzIEj2rSKPaC3yfA== -----END CERTIFICATE-----Generated at Thu Oct 8 07:55:11 2026 by rpki-client