$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft File: mazcDOVaSyEFtBOmoQ28JJggYPI.mft (raw, json) Hash identifier: UOKdJI6sb50dzD4NvnREFK1M1c+QP71QmoEr7aHahzI= Subject key identifier: FC:A4:49:F9:1C:C1:01:02:87:DA:88:0F:6A:70:6B:A6:E7:82:26:DD Authority key identifier: 99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2 Certificate issuer: /CN=A9123194/serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft Manifest number: 11 Signing time: Sun 11 Oct 2026 09:51:17 +0000 Manifest this update: Sun 11 Oct 2026 09:51:17 +0000 Manifest next update: Sun 18 Oct 2026 09:51:17 +0000 Files and hashes: 1: mazcDOVaSyEFtBOmoQ28JJggYPI.crl (hash: HXenL+P4LptEVX1eXUOW2HUXCZhevaNSTMlutGizUkM=) 2: 1F518440B5DB11F189029FF54811F970.roa (hash: 7QspwJnTwPU8SYRoP8fOtF6hyWUPrM9LdiMlnY0MmsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123194, serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2 Validity Not Before: Oct 11 09:51:17 2026 GMT Not After : Oct 18 09:51:17 2026 GMT Subject: CN=6acb5c15-302a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:c4:0a:84:e1:70:ce:49:b6:11:9d:71:d7: 8b:56:13:0b:41:95:8f:19:79:9d:a0:bf:27:b9:00: 8e:16:75:32:63:4c:07:fe:d6:17:52:14:2b:de:35: fe:4f:a8:b4:99:d3:3a:94:68:c7:be:98:61:0f:3c: 46:5a:2b:72:17:5c:a1:a2:78:1d:2f:c0:dd:95:72: 42:0e:dd:fe:a7:d4:48:a2:4b:d0:a0:44:34:03:25: 90:e8:b6:a2:19:90:12:84:5c:a7:35:85:32:e4:30: b1:75:1f:e8:30:96:4d:97:0e:2d:d4:46:36:7e:b0: dd:c5:07:8f:73:6e:d7:e7:d8:ea:c7:b8:12:3c:8b: 70:4d:61:2f:c2:3b:60:08:7d:33:73:0d:b4:5f:b1: 2f:6b:4d:87:9a:7c:39:ce:41:b5:97:f1:dc:f6:1e: 3e:b8:3f:5b:fc:1b:da:4b:56:bf:91:b0:8a:ee:84: ea:e1:2a:c8:b9:a9:a6:f5:aa:d1:36:c7:94:fb:0d: ee:5f:c1:d3:7f:c0:19:8d:38:b8:e2:8b:f5:4f:b2: 0f:ef:e0:e5:c9:61:3f:fa:18:fa:c9:02:07:d1:81: 86:ed:70:b7:86:a5:25:a1:22:07:a7:5f:b5:02:6c: cf:71:30:4f:0d:a9:a0:a4:5f:f7:64:70:41:a1:ee: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A4:49:F9:1C:C1:01:02:87:DA:88:0F:6A:70:6B:A6:E7:82:26:DD X509v3 Authority Key Identifier: keyid:99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:34:9b:40:ab:5a:d3:34:ed:0c:48:d6:5f:04:60:0a:02: 42:6b:d1:b0:7a:7d:98:bb:15:97:38:b6:a6:b4:7e:08:61:57: bf:7b:7c:1a:4a:7a:b3:02:00:7a:19:ad:d0:17:a7:79:8b:49: c4:68:0f:54:c0:d2:a4:18:4c:44:dd:fe:39:39:89:54:47:e9: 60:79:37:81:ab:6d:b8:f2:a3:0f:46:f3:88:72:ad:7f:c0:96: ad:76:61:b8:62:9d:3e:e7:50:7d:00:4c:f3:78:a6:82:ce:7c: e0:50:0b:f9:75:29:70:b0:b9:02:fb:d6:42:bc:8a:d7:4c:24: 81:0e:3c:c0:6b:db:f8:21:2d:54:99:b6:f8:c3:be:99:bc:ba: 2b:ed:d7:bb:6f:c5:96:b2:8a:f0:4c:0d:f8:fb:de:66:6d:20: c0:3d:6a:8b:05:aa:41:e5:fb:ea:20:f0:00:c5:c2:39:91:05: 21:0c:7e:fd:9d:b6:b4:56:95:60:b5:b4:cc:65:22:26:97:93: 44:c9:40:69:41:67:a1:7a:74:39:a7:12:e0:40:6c:7b:a4:77: cc:52:28:c0:0a:33:e4:57:69:7e:b4:18:ce:de:12:90:6f:52: 0c:3c:79:e4:8f:55:5f:75:a9:bd:5e:19:9c:bc:32:48:89:4f: 83:eb:23:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzE5NDExMC8GA1UEBRMoOTlBQ0RDMENFNTVBNEIyMTA1QjQxM0E2QTEwREJDMjQ5 ODIwNjBGMjAeFw0yNjEwMTEwOTUxMTdaFw0yNjEwMTgwOTUxMTdaMBgxFjAUBgNV BAMTDTZhY2I1YzE1LTMwMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGH8QKhOFwzkm2EZ1x14tWEwtBlY8ZeZ2gvye5AI4WdTJjTAf+1hdSFCveNf5P qLSZ0zqUaMe+mGEPPEZaK3IXXKGieB0vwN2VckIO3f6n1EiiS9CgRDQDJZDotqIZ kBKEXKc1hTLkMLF1H+gwlk2XDi3URjZ+sN3FB49zbtfn2OrHuBI8i3BNYS/CO2AI fTNzDbRfsS9rTYeafDnOQbWX8dz2Hj64P1v8G9pLVr+RsIruhOrhKsi5qab1qtE2 x5T7De5fwdN/wBmNOLjii/VPsg/v4OXJYT/6GPrJAgfRgYbtcLeGpSWhIgenX7UC bM9xME8NqaCkX/dkcEGh7qdxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/KRJ+RzB AQKH2ogPanBrpueCJt0wHwYDVR0jBBgwFoAUmazcDOVaSyEFtBOmoQ28JJggYPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMTk0LzEzNkFEMjlBQjVE QTExRjE4M0E2MjQ4NjQ4MTFGOTcwL21hemNET1ZhU3lFRnRCT21vUTI4SkpnZ1lQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWF6Y0RPVmFTeUVGdEJPbW9RMjhKSmdnWVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MTk0LzEzNkFEMjlBQjVEQTExRjE4M0E2MjQ4NjQ4MTFGOTcwL21hemNET1ZhU3lF RnRCT21vUTI4SkpnZ1lQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNQjSbQKta0zTtDEjWXwRgCgJCa9Gwen2YuxWXOLamtH4IYVe/e3waSnqzAgB6 Ga3QF6d5i0nEaA9UwNKkGExE3f45OYlUR+lgeTeBq2248qMPRvOIcq1/wJatdmG4 Yp0+51B9AEzzeKaCznzgUAv5dSlwsLkC+9ZCvIrXTCSBDjzAa9v4IS1Umbb4w76Z vLor7de7b8WWsorwTA34+95mbSDAPWqLBapB5fvqIPAAxcI5kQUhDH79nba0VpVg tbTMZSIml5NEyUBpQWehenQ5pxLgQGx7pHfMUijACjPkV2l+tBjO3hKQb1IMPHnk j1Vfdam9XhmcvDJIiU+D6yNp -----END CERTIFICATE-----Generated at Sun Oct 11 18:36:36 2026 by rpki-client