$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: vqsNkBixcdJUfTXGJx0mVTq6nI2lxOkUw4NqjJBUQL0= Subject key identifier: EC:1E:A6:31:DB:AB:47:05:CC:23:13:8E:06:9D:CA:A5:30:8C:DA:63 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0C20 Signing time: Sun 04 Oct 2026 18:54:19 +0000 Manifest this update: Sun 04 Oct 2026 18:54:19 +0000 Manifest next update: Sun 11 Oct 2026 18:54:19 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: VDDW1uY99ixRfV4mgmX/i2JU+MVz5jHsmM2T9HRxUxg=) 2: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=) 3: 132F6030B74B11F1A50305EC3B11F970.roa (hash: btyGfYX3kghG+AITheqkFtouzfiDWA0txhXyYF7/yYY=) 4: 1221D894B74B11F1A50305EC3B11F970.roa (hash: 5techFKvTgAmGGC9EMyJ0WlFDr9hYrwJgXc0g4j95j8=) 5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=) 6: 12B1AAB4B74B11F1A50305EC3B11F970.roa (hash: v/IAUsXxFsvbrsBGrwa/A9xRHR8PY3Ni0uZYv24b1TQ=) 7: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=) 8: 117CE5BEB74B11F1A50305EC3B11F970.roa (hash: B+N3zsEIWaP/PTXXhHhOzK4D1nGxtBCJHv+XN/SOCGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Oct 4 18:54:19 2026 GMT Not After : Oct 11 18:54:19 2026 GMT Subject: CN=6ac2a0db-e49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:a5:d1:8c:39:21:65:9c:8f:00:e1:bf:9e: 6b:8e:31:cf:b2:aa:f5:17:44:6e:d9:e8:7a:c3:19: e8:e7:83:1f:ee:14:1c:c7:0d:2b:e8:03:88:97:fa: c8:e6:d9:63:1f:62:d9:d1:3c:72:22:9e:7b:8c:92: 98:c8:a3:fa:32:93:5d:a0:b8:e9:44:ed:ed:58:91: 14:57:d8:89:dc:2b:92:d5:87:24:15:1b:dc:39:f0: f7:4d:3b:73:99:9c:88:4b:62:df:02:6c:cb:7d:e1: 59:20:71:4d:e9:f8:33:f4:90:00:34:f6:e4:c9:28: c2:39:6e:e0:84:aa:96:5a:e5:60:c8:1f:31:d5:25: 51:e2:67:fb:11:58:cf:6d:a1:6d:54:ee:30:af:a4: 84:f7:f6:d5:0c:c1:8d:c5:d3:e7:81:92:d5:95:95: e5:8b:b1:f7:ae:56:37:c0:f3:f4:2a:a7:c9:2e:fa: cd:d4:18:38:15:6e:6e:db:5c:bf:ba:8f:11:22:f6: 8b:cd:6b:9f:2c:c5:e1:cf:74:6b:52:54:fc:ae:42: 9c:4d:9c:db:0f:b7:e6:01:bb:8d:6c:d7:f1:02:a4: a5:97:01:74:69:87:04:ef:25:37:dc:35:ba:30:e4: 30:fd:88:a9:58:4a:cb:6c:39:05:04:fe:9c:f5:3b: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1E:A6:31:DB:AB:47:05:CC:23:13:8E:06:9D:CA:A5:30:8C:DA:63 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:8b:9c:3d:ee:49:56:55:72:ec:bc:e2:04:6e:26:5c:b4: da:9e:8a:3e:6b:58:88:79:56:cf:ad:c2:3a:a7:89:73:14:0d: 6e:cd:9e:9a:5d:9a:3b:77:ff:80:b5:e7:6a:6d:6c:cd:14:d5: fb:97:7c:ab:7f:c1:a1:86:42:99:fb:52:a4:2f:2a:2e:cc:e0: 06:84:55:98:bc:e4:32:b7:34:ac:d9:8a:73:75:af:c3:df:8a: f4:d7:ed:55:a4:b6:6d:e9:cd:3f:2b:e2:91:03:be:bb:ff:12: af:43:c2:94:ed:ca:f1:43:54:5f:22:ef:31:f0:79:cd:bc:14: 29:0a:84:60:a5:35:18:44:bd:b4:8e:79:ef:09:8e:46:53:12: d0:09:43:f7:28:57:41:e3:65:1b:41:8e:80:4d:48:c1:32:2b: 3d:07:d1:f0:2e:28:68:ce:30:d7:28:ed:78:eb:fb:07:4a:b1: 19:fe:ed:db:d4:63:dc:0e:f9:8b:98:38:02:be:a0:d7:a3:84: d2:8d:a5:17:24:65:f5:63:16:71:b7:df:21:10:61:96:a7:a3: 48:cb:47:7a:56:74:1e:78:f1:d0:0e:aa:ae:7b:2a:db:99:11: 71:69:f3:21:17:d1:72:5b:96:a7:a6:96:d7:76:a9:57:5c:7c: 57:26:83:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjYxMDA0MTg1NDE5WhcNMjYxMDExMTg1NDE5WjAYMRYwFAYD VQQDEw02YWMyYTBkYi1lNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOCl0Yw5IWWcjwDhv55rjjHPsqr1F0Ru2eh6wxno54Mf7hQcxw0r6AOIl/rI 5tljH2LZ0TxyIp57jJKYyKP6MpNdoLjpRO3tWJEUV9iJ3CuS1YckFRvcOfD3TTtz mZyIS2LfAmzLfeFZIHFN6fgz9JAANPbkySjCOW7ghKqWWuVgyB8x1SVR4mf7EVjP baFtVO4wr6SE9/bVDMGNxdPngZLVlZXli7H3rlY3wPP0KqfJLvrN1Bg4FW5u21y/ uo8RIvaLzWufLMXhz3RrUlT8rkKcTZzbD7fmAbuNbNfxAqSllwF0aYcE7yU33DW6 MOQw/YipWErLbDkFBP6c9TtTPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwepjHb q0cFzCMTjgadyqUwjNpjMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbfmLnD3uSVZVcuy84gRuJly02p6KPmtYiHlWz63COqeJcxQNbs2eml2aO3f/ gLXnam1szRTV+5d8q3/BoYZCmftSpC8qLszgBoRVmLzkMrc0rNmKc3Wvw9+K9Nft VaS2benNPyvikQO+u/8Sr0PClO3K8UNUXyLvMfB5zbwUKQqEYKU1GES9tI557wmO RlMS0AlD9yhXQeNlG0GOgE1IwTIrPQfR8C4oaM4w1yjteOv7B0qxGf7t29Rj3A75 i5g4Ar6g16OE0o2lFyRl9WMWcbffIRBhlqejSMtHelZ0Hnjx0A6qrnsq25kRcWnz IRfRcluWp6aW13apV1x8VyaDwg== -----END CERTIFICATE-----Generated at Mon Oct 5 13:04:10 2026 by rpki-client