$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft File: DrTZlhk2pChD3fXs8MjF2eSwD3w.mft (raw, json) Hash identifier: NWvl72/XK28AJWJBMqo0v7r9cD/niVaF9cPu/JSoS6I= Subject key identifier: 53:2A:AF:22:7C:A1:CB:2E:4D:EC:94:D9:90:7E:6A:E2:7E:71:B1:D6 Authority key identifier: 0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C Certificate issuer: /CN=A9119D80/serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft Manifest number: 1F Signing time: Wed 21 Oct 2026 09:30:47 +0000 Manifest this update: Wed 21 Oct 2026 09:30:46 +0000 Manifest next update: Wed 28 Oct 2026 09:30:46 +0000 Files and hashes: 1: DrTZlhk2pChD3fXs8MjF2eSwD3w.crl (hash: qE+rRRphipf6Bi7pp/ON8rMCLhFBtm3DzI5hupSrD5g=) 2: 7F394E8EA03B11F1B3E7CFF43811F970.roa (hash: 9gozVmZi4OG/VKvp0JupB8Q4GsNsb+cTt45Qb53BBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D80, serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Validity Not Before: Oct 21 09:30:46 2026 GMT Not After : Oct 28 09:30:46 2026 GMT Subject: CN=6ad88647-0d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:5f:76:bc:a1:d9:30:de:ac:f2:0b:7b:78: cf:09:58:ac:43:dc:a9:bb:ff:58:68:ef:cd:44:f7: 7f:5e:cf:81:1c:64:09:b0:c3:8c:cd:88:56:4c:a7: de:bd:be:83:17:c2:93:22:27:38:63:f8:97:3b:d5: 7a:fd:14:b5:cb:19:a7:6a:18:71:5c:bf:98:52:bc: 12:f0:65:3d:a3:29:d7:4c:91:ca:bc:f1:e6:09:e5: c2:5a:e3:2f:32:9e:a7:47:70:c3:3c:25:94:3d:43: 43:71:03:23:85:96:56:ed:3a:d5:19:42:9a:aa:54: a3:f8:b5:2a:ab:b2:b7:55:79:60:94:ed:fd:6d:d9: 93:22:53:5d:d8:84:9f:0c:15:a5:c7:bf:24:6e:71: e5:35:f6:de:64:81:8e:89:fd:5d:e4:ec:c6:30:2d: fa:ca:c2:86:9f:78:8a:00:80:ad:64:0f:1d:6e:80: ac:87:f4:ed:ec:21:af:e8:b2:cf:04:9a:77:2b:4b: 42:80:8f:19:39:33:ce:f2:6d:8e:71:79:66:24:47: 50:ac:f3:dc:9d:f2:c9:41:54:57:2a:44:07:86:f5: b4:95:12:bf:88:d4:50:39:d8:c7:3a:36:c9:47:17: bc:07:a8:6f:bc:88:70:2c:28:0b:10:a6:53:1b:da: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:AF:22:7C:A1:CB:2E:4D:EC:94:D9:90:7E:6A:E2:7E:71:B1:D6 X509v3 Authority Key Identifier: keyid:0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c3:b9:b7:62:22:d0:c6:c0:69:05:b2:46:d9:e6:11:c4:d1: 53:85:ac:88:2f:9c:3d:53:f4:04:e8:51:e1:d9:b2:c5:ab:84: 9d:26:03:bb:c8:bd:5d:15:40:4e:f1:2f:f6:4b:0d:0e:a2:e8: ba:7a:3f:82:37:0d:69:f1:9e:e6:4c:af:9b:87:04:9e:82:53: 02:99:60:92:d7:1e:11:ac:ef:95:f3:99:84:78:ed:43:56:82: a5:db:0a:06:0e:d6:c9:4e:fa:bd:99:4a:35:9f:28:ea:b3:f8: be:e3:62:77:48:73:50:29:64:13:10:ad:f5:8d:c2:b7:a7:7e: c4:b2:04:20:f9:f7:03:e2:bf:34:a9:03:0f:5e:97:b7:0e:0f: 71:70:d8:17:a2:ab:2e:c1:f6:df:97:7c:58:dd:e6:76:c6:1b: 89:78:a4:d7:4c:23:ad:e6:60:d1:82:7a:cc:7f:81:ac:fd:bd: da:e0:bd:ed:d1:aa:41:45:be:2e:60:a9:04:71:76:e7:e5:97: 8c:17:30:ef:a9:4b:2b:55:f1:16:ac:cb:30:54:0c:69:d4:6b: ec:db:1c:af:62:bd:b9:b7:ff:3e:3d:22:10:1c:9f:b4:14:70: 70:8c:a8:4b:29:6b:34:11:36:ae:95:de:25:a8:d2:4a:f2:04: d4:ed:27:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUQ4MDExMC8GA1UEBRMoMEVCNEQ5OTYxOTM2QTQyODQzRERGNUVDRjBDOEM1RDlF NEIwMEY3QzAeFw0yNjEwMjEwOTMwNDZaFw0yNjEwMjgwOTMwNDZaMBgxFjAUBgNV BAMTDTZhZDg4NjQ3LTBkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClel92vKHZMN6s8gt7eM8JWKxD3Km7/1ho781E939ez4EcZAmww4zNiFZMp969 voMXwpMiJzhj+Jc71Xr9FLXLGadqGHFcv5hSvBLwZT2jKddMkcq88eYJ5cJa4y8y nqdHcMM8JZQ9Q0NxAyOFllbtOtUZQpqqVKP4tSqrsrdVeWCU7f1t2ZMiU13YhJ8M FaXHvyRuceU19t5kgY6J/V3k7MYwLfrKwoafeIoAgK1kDx1ugKyH9O3sIa/oss8E mncrS0KAjxk5M87ybY5xeWYkR1Cs89yd8slBVFcqRAeG9bSVEr+I1FA52Mc6NslH F7wHqG+8iHAsKAsQplMb2m61AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUyqvInyh yy5N7JTZkH5q4n5xsdYwHwYDVR0jBBgwFoAUDrTZlhk2pChD3fXs8MjF2eSwD3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDgwLzVDNEY5QjdDQTAz QTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENoRDNmWHM4TWpGMmVTd0Qz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHJUWmxoazJwQ2hEM2ZYczhNakYyZVN3RDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 RDgwLzVDNEY5QjdDQTAzQTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENo RDNmWHM4TWpGMmVTd0Qzdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/w7m3YiLQxsBpBbJG2eYRxNFThayIL5w9U/QE6FHh2bLFq4SdJgO7yL1dFUBO 8S/2Sw0Ooui6ej+CNw1p8Z7mTK+bhwSeglMCmWCS1x4RrO+V85mEeO1DVoKl2woG DtbJTvq9mUo1nyjqs/i+42J3SHNQKWQTEK31jcK3p37EsgQg+fcD4r80qQMPXpe3 Dg9xcNgXoqsuwfbfl3xY3eZ2xhuJeKTXTCOt5mDRgnrMf4Gs/b3a4L3t0apBRb4u YKkEcXbn5ZeMFzDvqUsrVfEWrMswVAxp1Gvs2xyvYr25t/8+PSIQHJ+0FHBwjKhL KWs0ETauld4lqNJK8gTU7ScL -----END CERTIFICATE-----Generated at Thu Oct 22 05:53:01 2026 by rpki-client