$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: HzdIUrgW/F7kNmL27zdraY/aNQOss9tuNVqlKrKsPPs= Subject key identifier: A5:59:CB:95:45:86:29:CD:F8:A6:0A:A6:42:DA:80:92:39:78:FD:52 Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 0142 Signing time: Thu 21 May 2026 05:37:07 +0000 Manifest this update: Thu 21 May 2026 05:37:06 +0000 Manifest next update: Thu 28 May 2026 05:37:06 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: XZAIk2kbyYnD59wBMvI2Ur4TD7uvOV14qNVIr8zurVA=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: May 21 05:37:06 2026 GMT Not After : May 28 05:37:06 2026 GMT Subject: CN=6a0e9a03-af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:68:83:31:db:1e:fd:d3:87:af:84:29:19: 32:a9:56:d1:8a:19:f7:e3:fe:2c:20:1b:05:27:92: d0:ea:b4:f4:a7:73:68:1a:30:b1:d7:59:18:f0:bb: 10:b7:db:22:bf:4c:e7:04:83:79:7c:c0:48:1f:32: 3c:bc:58:eb:bd:5b:68:55:c6:31:b3:8f:30:77:c9: dc:72:27:ac:3a:68:18:8a:6b:47:e7:fe:37:c2:5e: 50:21:77:a9:c6:4e:6a:5c:ea:9a:52:1a:90:cb:5c: eb:b8:46:36:0a:3e:a1:48:f2:42:fb:6c:16:aa:89: e7:fe:eb:4c:1e:e1:92:d2:7c:0d:f5:4c:36:0c:f2: af:60:33:af:32:e9:7c:c1:d0:38:db:6a:db:41:f3: 42:5e:12:7f:2a:b0:67:df:66:a8:ee:30:fc:37:13: c6:13:3a:55:85:2c:e1:48:35:57:8c:09:18:f4:4d: 62:79:fe:9b:2f:0c:9d:7d:54:cf:d1:4f:50:f8:9a: 13:50:81:7a:87:55:54:ce:85:dd:3c:55:66:c5:5f: 9b:9b:b2:3f:30:02:25:46:7a:c7:23:71:da:e3:1f: 3d:cd:17:d9:2c:17:7a:2d:c7:8c:e7:f8:ce:a4:7a: 2b:98:1e:f3:73:e9:3e:09:af:ec:fb:45:77:76:63: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:59:CB:95:45:86:29:CD:F8:A6:0A:A6:42:DA:80:92:39:78:FD:52 X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:3f:4d:68:db:fe:01:f2:db:89:0d:e3:37:02:d5:36:ee: ec:83:34:28:08:b4:0c:ed:71:56:74:20:39:c8:8d:ac:79:48: a3:55:77:24:19:66:f6:d0:76:02:3f:98:22:5d:a5:ec:cc:53: 84:8c:68:15:46:7e:5a:dd:4e:5e:42:68:f8:76:b3:b3:36:1b: f9:5e:54:67:65:f8:78:fd:eb:5d:43:42:a8:6e:14:75:5b:43: b4:37:ca:26:6c:c2:e0:d6:59:31:4f:7d:e3:a7:57:0e:5a:39: 65:39:e5:01:71:54:71:0d:81:73:9d:a2:4f:8c:3f:00:8d:01: b8:99:f8:c6:e8:72:e3:dd:d5:c7:73:37:22:1c:5b:e8:0b:15: 9c:95:3f:33:ab:47:ea:f4:ba:01:91:66:03:45:f8:8b:9b:6d: 41:9d:ee:9e:22:a4:70:54:0b:26:10:57:4d:54:b2:8a:8d:20: bf:c1:53:01:33:aa:1f:12:bc:af:7f:52:ed:7a:aa:06:65:3e: d6:79:e2:a6:4b:3a:81:b6:27:76:f7:28:8d:2a:c2:a1:22:75: 11:e0:ce:c0:ea:f4:f1:cd:c0:b8:ff:d3:9b:76:72:56:ad:6c: 42:25:14:72:eb:5c:2e:64:7f:c0:e2:4d:0e:ff:c0:4c:84:41: e5:09:d2:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjYwNTIxMDUzNzA2WhcNMjYwNTI4MDUzNzA2WjAYMRYwFAYD VQQDEw02YTBlOWEwMy1hZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NJogzHbHv3Th6+EKRkyqVbRihn34/4sIBsFJ5LQ6rT0p3NoGjCx11kY8LsQ t9siv0znBIN5fMBIHzI8vFjrvVtoVcYxs48wd8ncciesOmgYimtH5/43wl5QIXep xk5qXOqaUhqQy1zruEY2Cj6hSPJC+2wWqonn/utMHuGS0nwN9Uw2DPKvYDOvMul8 wdA422rbQfNCXhJ/KrBn32ao7jD8NxPGEzpVhSzhSDVXjAkY9E1ief6bLwydfVTP 0U9Q+JoTUIF6h1VUzoXdPFVmxV+bm7I/MAIlRnrHI3Ha4x89zRfZLBd6LceM5/jO pHormB7zc+k+Ca/s+0V3dmOh8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVZy5VF hinN+KYKpkLagJI5eP1SMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAghE/TWjb/gHy24kN4zcC1Tbu7IM0KAi0DO1xVnQgOciNrHlIo1V3JBlm9tB2 Aj+YIl2l7MxThIxoFUZ+Wt1OXkJo+HazszYb+V5UZ2X4eP3rXUNCqG4UdVtDtDfK JmzC4NZZMU9946dXDlo5ZTnlAXFUcQ2Bc52iT4w/AI0BuJn4xuhy493Vx3M3Ihxb 6AsVnJU/M6tH6vS6AZFmA0X4i5ttQZ3uniKkcFQLJhBXTVSyio0gv8FTATOqHxK8 r39S7XqqBmU+1nnipks6gbYndvcojSrCoSJ1EeDOwOr08c3AuP/Tm3ZyVq1sQiUU cutcLmR/wOJNDv/ATIRB5QnSFA== -----END CERTIFICATE-----Generated at Thu May 21 11:04:25 2026 by rpki-client