$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft File: tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft (raw, json) Hash identifier: QmYSorzilj7rLmGkkkJfYvmbBNrxCB6zB97hSM4VuvM= Subject key identifier: 16:01:02:E4:14:9F:DC:9C:1A:39:FB:D8:97:0C:F2:88:20:7B:70:85 Authority key identifier: B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 Certificate issuer: /CN=A9143409/serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft Manifest number: 1F Signing time: Tue 13 Oct 2026 09:42:25 +0000 Manifest this update: Tue 13 Oct 2026 09:42:24 +0000 Manifest next update: Tue 20 Oct 2026 09:42:24 +0000 Files and hashes: 1: tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl (hash: BQbrNuyoy5Twi5F8oLfWQ0383uz5MiI52Dr5jnJqkg4=) 2: A7DB83269B7B11F1BC8E14144211F970.roa (hash: o6NEa576QOWu7wSaHMbprU6QbrwmUJcq9Rt1I8uW5/w=) 3: A6B52E529B7B11F1B6BF14144211F970.roa (hash: 4yziqtkYx1WlGKb88IiPWTlvQixYnW84rQvQyIqln4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 09:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143409, serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Validity Not Before: Oct 13 09:42:24 2026 GMT Not After : Oct 20 09:42:24 2026 GMT Subject: CN=6acdfd00-2d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:27:c3:3d:a1:02:64:10:b2:4a:cb:d1:f7: 75:ff:c1:47:fe:b3:c9:a1:69:48:ec:be:58:ae:90: 83:aa:28:e7:fd:3f:ea:87:24:06:09:e7:c8:5f:c2: 56:a4:e8:06:be:66:48:68:ac:ae:1e:fd:3c:73:4b: 2d:c2:b7:e0:1b:1b:f8:e8:94:f1:f2:1a:a4:80:c8: f2:fc:eb:2c:c1:5e:96:ff:f9:22:ea:4b:21:67:34: 3b:40:d2:54:67:1e:9d:4a:ad:f0:28:a0:ac:0a:5e: 44:b8:dd:a3:cb:f2:0b:64:74:9f:63:e3:95:ca:72: d0:f6:54:c7:47:ce:f3:d9:8e:0b:3e:dc:62:7b:cc: f7:a2:4e:d3:3a:3b:f8:4d:9b:41:20:92:b3:c8:2a: 3b:7f:bb:1f:59:19:9a:e9:14:b7:5a:22:f2:ae:30: d7:46:05:20:06:16:92:83:b5:7f:ca:e4:c9:eb:c2: c4:f4:fc:37:d0:6d:8b:13:92:bb:37:36:d7:69:61: 73:43:4f:2e:22:67:48:89:cb:e3:e1:f8:c1:45:ca: f0:56:41:4c:29:d2:18:96:8c:b0:ad:23:6e:ba:71: 98:53:fb:83:cb:1f:ca:4f:c1:09:ce:82:3b:a3:9a: ee:81:cf:df:0d:d9:ee:ae:4a:37:f5:36:2b:4f:af: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:02:E4:14:9F:DC:9C:1A:39:FB:D8:97:0C:F2:88:20:7B:70:85 X509v3 Authority Key Identifier: keyid:B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:a1:1d:a5:1c:e4:84:2c:e1:40:8b:4d:2f:91:77:78:8a: 12:b2:2c:c1:af:e9:e6:12:df:89:1b:37:9f:90:0f:b3:ba:77: 46:4e:74:2b:f1:d5:cd:56:bb:2d:84:37:ec:cf:2c:8b:40:a1: e0:89:e3:f1:6f:3d:15:bb:b2:4d:fb:6d:64:c5:bb:32:e8:05: c6:c0:63:5e:86:57:17:2e:33:ce:ba:ea:4f:2d:b5:84:ae:f3: ab:07:b7:7a:d1:06:b8:6b:84:23:20:08:a2:9f:84:72:6f:71: 68:04:64:56:ad:17:6c:2a:8f:40:f0:ef:db:43:99:b2:58:9b: fc:dc:2f:57:2f:a3:00:cd:31:eb:35:fa:2d:ba:08:3f:00:2c: 2d:b1:6a:82:ca:1c:f5:bc:47:88:c5:ae:6a:30:ec:ec:38:f3: c8:bd:d6:a2:c4:5f:d8:5e:dd:6a:d0:b6:02:24:b6:87:ce:f1: 06:6e:73:d8:f9:d6:da:f5:28:82:d8:5c:3b:f9:b9:e2:dc:d9: 32:d5:cb:4b:87:2f:38:b1:49:10:45:15:42:f8:fb:13:2a:60: 4f:bd:e8:38:4a:8c:48:00:2f:5d:d6:c1:58:e6:d6:01:65:f6: 84:49:1b:c4:07:88:a9:60:26:ed:87:01:63:62:8b:b9:e3:9e: 86:47:2c:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzQwOTExMC8GA1UEBRMoQjczQ0NDMEMyRjY3NjEwQTUwOUFGN0I2MkI1NDFCRTVC NTFCRDUyMDAeFw0yNjEwMTMwOTQyMjRaFw0yNjEwMjAwOTQyMjRaMBgxFjAUBgNV BAMTDTZhY2RmZDAwLTJkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8yfDPaECZBCySsvR93X/wUf+s8mhaUjsvliukIOqKOf9P+qHJAYJ58hfwlak 6Aa+ZkhorK4e/TxzSy3Ct+AbG/jolPHyGqSAyPL86yzBXpb/+SLqSyFnNDtA0lRn Hp1KrfAooKwKXkS43aPL8gtkdJ9j45XKctD2VMdHzvPZjgs+3GJ7zPeiTtM6O/hN m0EgkrPIKjt/ux9ZGZrpFLdaIvKuMNdGBSAGFpKDtX/K5MnrwsT0/DfQbYsTkrs3 NtdpYXNDTy4iZ0iJy+Ph+MFFyvBWQUwp0hiWjLCtI266cZhT+4PLH8pPwQnOgjuj mu6Bz98N2e6uSjf1NitPr5VFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFgEC5BSf 3JwaOfvYlwzyiCB7cIUwHwYDVR0jBBgwFoAUtzzMDC9nYQpQmve2K1Qb5bUb1SAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNDA5Lzk4RjYyOEQ0OUI2 QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFwUW12ZTJLMVFiNWJVYjFT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHp6TURDOW5ZUXBRbXZlMksxUWI1YlViMVNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz NDA5Lzk4RjYyOEQ0OUI2QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFw UW12ZTJLMVFiNWJVYjFTQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJgaEdpRzkhCzhQItNL5F3eIoSsizBr+nmEt+JGzefkA+zundGTnQr8dXNVrst hDfszyyLQKHgiePxbz0Vu7JN+21kxbsy6AXGwGNehlcXLjPOuupPLbWErvOrB7d6 0Qa4a4QjIAiin4Ryb3FoBGRWrRdsKo9A8O/bQ5myWJv83C9XL6MAzTHrNfotugg/ ACwtsWqCyhz1vEeIxa5qMOzsOPPIvdaixF/YXt1q0LYCJLaHzvEGbnPY+dba9SiC 2Fw7+bni3Nky1ctLhy84sUkQRRVC+PsTKmBPveg4SoxIAC9d1sFY5tYBZfaESRvE B4ipYCbthwFjYou5456GRyyo -----END CERTIFICATE-----Generated at Wed Oct 14 11:53:19 2026 by rpki-client