$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft File: DrTZlhk2pChD3fXs8MjF2eSwD3w.mft (raw, json) Hash identifier: Dk43wpOGygFLGebn6VgeLY8kXwfnCb8aulvOuYMwQFE= Subject key identifier: 80:7F:DF:4A:07:D2:F3:F3:77:90:BC:0F:14:B7:E9:48:2D:15:D0:FE Authority key identifier: 0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C Certificate issuer: /CN=A9119D80/serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft Manifest number: 05 Signing time: Mon 31 Aug 2026 09:38:45 +0000 Manifest this update: Mon 31 Aug 2026 09:38:44 +0000 Manifest next update: Mon 07 Sep 2026 09:38:44 +0000 Files and hashes: 1: DrTZlhk2pChD3fXs8MjF2eSwD3w.crl (hash: +S2SWCk1ED3ilaf/UL97xh+C3ICl/xiNb9SDCdb5ohg=) 2: 7F394E8EA03B11F1B3E7CFF43811F970.roa (hash: 9gozVmZi4OG/VKvp0JupB8Q4GsNsb+cTt45Qb53BBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D80, serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Validity Not Before: Aug 31 09:38:44 2026 GMT Not After : Sep 7 09:38:44 2026 GMT Subject: CN=6a954ba5-731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:8b:99:06:9f:d9:d7:41:38:84:a3:7f:59: ac:7b:74:24:18:d8:85:e3:c8:17:e6:26:ae:ee:d9: 0f:4c:ed:fc:2d:0d:f5:a9:46:34:61:22:77:88:6c: 27:17:67:61:6e:09:fb:34:ed:b1:70:31:0c:ed:9a: 27:dc:33:0a:be:d3:7e:3d:4f:10:d6:36:2b:f6:8d: a4:84:75:d9:44:68:ee:54:7b:a2:75:5e:8c:1b:2a: 94:24:e0:b7:9a:92:cf:0a:5c:c4:98:e4:8d:38:e8: e2:29:60:7f:fd:01:59:15:85:00:9f:1d:95:6c:9b: 14:7f:6b:e1:ec:9f:a1:91:5a:f8:a5:9a:07:10:e7: ce:28:1c:5f:9d:52:d6:80:63:60:f9:78:49:f4:da: b5:01:38:0f:41:11:c0:83:4e:d8:35:07:ec:95:60: ab:8a:11:ee:6a:b0:3d:ed:97:2d:60:66:64:3b:6e: 25:01:39:b5:12:20:1a:bf:c3:af:d6:29:d7:52:2f: 51:60:40:50:99:c7:04:7f:3f:64:16:e5:3a:24:65: 40:9d:bc:19:9d:70:2b:68:d7:dc:7e:53:70:22:e6: ca:59:7f:d4:62:64:41:e0:60:28:c2:3f:c9:c6:57: f2:16:94:49:f8:94:b4:f4:90:fc:40:af:1a:b6:59: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:DF:4A:07:D2:F3:F3:77:90:BC:0F:14:B7:E9:48:2D:15:D0:FE X509v3 Authority Key Identifier: keyid:0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d7:ab:50:2a:12:83:5b:71:5e:ce:51:51:73:cc:ad:bf:5e: eb:42:0f:ea:a3:41:6e:bb:57:24:72:51:78:47:8e:17:06:b7: d4:c0:24:09:80:80:2b:d7:ce:37:56:35:6f:18:7e:98:a9:2a: 09:ac:a9:b6:a8:f0:80:1b:43:65:8f:49:35:35:85:05:b6:8a: 32:bd:0a:12:41:d7:a4:96:f6:5d:26:20:b8:25:50:23:12:86: aa:37:08:7b:61:29:49:c2:05:d7:7b:e3:65:cc:71:21:48:d3: 65:43:86:fc:47:38:ed:7d:11:13:e0:5e:f3:f2:04:a4:68:1b: bc:98:5f:90:e3:26:49:d7:e9:65:d7:c1:e5:c1:7d:ef:60:45: ea:82:44:f2:df:d1:09:e1:80:e5:46:32:b3:6a:85:8b:b5:20: 2c:63:47:52:36:ee:51:20:df:54:6d:e0:60:03:fa:30:f7:55: 30:d8:90:5d:34:3d:9f:f6:87:f8:3f:a5:a8:59:df:70:70:5e: 59:11:24:50:ae:98:bd:4f:b8:f5:05:59:09:b2:78:2c:88:b0: 42:f1:a4:c0:6a:4c:69:cd:c5:d6:6f:31:3f:9b:67:30:ed:2b: f1:98:23:d4:71:e1:a3:34:32:c8:85:48:63:18:ee:b9:56:e2: 02:ad:29:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUQ4MDExMC8GA1UEBRMoMEVCNEQ5OTYxOTM2QTQyODQzRERGNUVDRjBDOEM1RDlF NEIwMEY3QzAeFw0yNjA4MzEwOTM4NDRaFw0yNjA5MDcwOTM4NDRaMBgxFjAUBgNV BAMTDTZhOTU0YmE1LTczMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyRouZBp/Z10E4hKN/Wax7dCQY2IXjyBfmJq7u2Q9M7fwtDfWpRjRhIneIbCcX Z2FuCfs07bFwMQztmifcMwq+0349TxDWNiv2jaSEddlEaO5Ue6J1XowbKpQk4Lea ks8KXMSY5I046OIpYH/9AVkVhQCfHZVsmxR/a+Hsn6GRWvilmgcQ584oHF+dUtaA Y2D5eEn02rUBOA9BEcCDTtg1B+yVYKuKEe5qsD3tly1gZmQ7biUBObUSIBq/w6/W KddSL1FgQFCZxwR/P2QW5TokZUCdvBmdcCto19x+U3Ai5spZf9RiZEHgYCjCP8nG V/IWlEn4lLT0kPxArxq2Wft3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgH/fSgfS 8/N3kLwPFLfpSC0V0P4wHwYDVR0jBBgwFoAUDrTZlhk2pChD3fXs8MjF2eSwD3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDgwLzVDNEY5QjdDQTAz QTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENoRDNmWHM4TWpGMmVTd0Qz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHJUWmxoazJwQ2hEM2ZYczhNakYyZVN3RDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 RDgwLzVDNEY5QjdDQTAzQTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENo RDNmWHM4TWpGMmVTd0Qzdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAM16tQKhKDW3FezlFRc8ytv17rQg/qo0Fuu1ckclF4R44XBrfUwCQJgIAr1843 VjVvGH6YqSoJrKm2qPCAG0Nlj0k1NYUFtooyvQoSQdeklvZdJiC4JVAjEoaqNwh7 YSlJwgXXe+NlzHEhSNNlQ4b8RzjtfRET4F7z8gSkaBu8mF+Q4yZJ1+ll18HlwX3v YEXqgkTy39EJ4YDlRjKzaoWLtSAsY0dSNu5RIN9UbeBgA/ow91Uw2JBdND2f9of4 P6WoWd9wcF5ZESRQrpi9T7j1BVkJsngsiLBC8aTAakxpzcXWbzE/m2cw7SvxmCPU ceGjNDLIhUhjGO65VuICrSmz -----END CERTIFICATE-----Generated at Tue Sep 1 02:28:37 2026 by rpki-client