$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft File: tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft (raw, json) Hash identifier: 6guacGs3trP9xj+zDI6WfJ0g6HrqbvajCVxD/Tbz5lQ= Subject key identifier: B9:DD:C5:00:40:2E:88:0B:1A:F2:70:D4:99:B1:DF:42:BE:D3:33:80 Authority key identifier: B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 Certificate issuer: /CN=A9143409/serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft Manifest number: 06 Signing time: Tue 25 Aug 2026 09:08:46 +0000 Manifest this update: Tue 25 Aug 2026 09:08:46 +0000 Manifest next update: Tue 01 Sep 2026 09:08:46 +0000 Files and hashes: 1: tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl (hash: ftu2R7jKoljSYL4yEfWOraqGl08l443U/merMYC8DBg=) 2: A7DB83269B7B11F1BC8E14144211F970.roa (hash: o6NEa576QOWu7wSaHMbprU6QbrwmUJcq9Rt1I8uW5/w=) 3: A6B52E529B7B11F1B6BF14144211F970.roa (hash: 4yziqtkYx1WlGKb88IiPWTlvQixYnW84rQvQyIqln4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143409, serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Validity Not Before: Aug 25 09:08:46 2026 GMT Not After : Sep 1 09:08:46 2026 GMT Subject: CN=6a8d5b9e-ed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:b7:c9:fc:71:4b:0b:8d:45:a8:d5:08:7e: c2:5b:77:b0:a2:79:c3:84:9a:5f:29:cb:ad:10:66: f9:d6:3b:6f:dc:ae:02:5a:f1:21:19:39:95:ab:04: e0:36:56:df:73:d7:a0:e5:27:c2:c6:ca:c4:b7:36: b0:b9:51:58:58:1e:4f:9f:c1:a0:a6:1a:d2:89:d6: 0a:36:14:3c:4c:9e:14:95:56:f3:7d:65:a9:d5:3d: a6:05:1c:af:25:07:f9:8b:cf:d1:8f:f7:31:ad:6b: 15:4b:02:85:f2:7d:ec:b5:d4:f8:71:19:be:f4:8e: bf:fd:58:80:73:e5:72:66:45:b4:c2:f6:12:ca:8f: 50:aa:88:8f:a8:62:af:7f:a4:c8:bf:78:4f:34:d3: b1:a8:dd:18:f0:5c:78:ca:4b:26:53:8e:b8:b2:59: 18:54:50:0a:99:5c:c3:b4:83:0a:65:d8:94:26:f5: 2e:b0:cf:6d:e1:92:dd:38:ec:2f:3f:26:ae:5c:bc: 67:06:1c:24:48:f4:77:34:88:46:1e:a2:0f:a6:29: c7:25:3c:ae:b9:6a:2d:66:0f:bf:65:37:22:dd:37: cc:f4:a9:17:70:ea:fb:8d:d0:64:6b:61:32:c4:85: 3a:7d:4a:01:4a:a3:4b:ac:f1:1f:23:14:79:fb:85: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:C5:00:40:2E:88:0B:1A:F2:70:D4:99:B1:DF:42:BE:D3:33:80 X509v3 Authority Key Identifier: keyid:B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:7b:0c:77:3e:0c:9a:76:e1:e3:8b:1c:c1:26:85:a6:53: 83:2a:ef:9c:e7:4d:89:6b:3b:03:03:4e:2e:ca:cd:19:9e:e9: 97:8f:a9:d8:2b:3e:aa:cc:22:b6:63:b7:ca:06:93:bf:b1:08: 99:c1:32:3c:b4:5c:db:bd:17:bb:6a:e4:47:d0:cd:b6:ef:11: 26:87:56:da:53:08:c3:4d:af:96:83:47:ce:87:7f:66:6a:37: 52:f1:4d:d9:f1:9f:c2:2e:a9:ce:0b:2b:f5:b2:9d:de:47:a1: b2:bb:2e:be:35:2f:b9:f4:7c:60:e2:36:8a:62:88:08:dd:bf: 1e:0d:d3:06:c7:c8:a4:59:e7:34:d4:61:91:df:f5:c0:d5:75: ad:04:99:25:57:8c:4c:d8:95:9a:53:bb:20:f7:f2:91:3e:d5: e2:06:c7:1e:1c:47:a7:dd:aa:68:ec:bb:3f:e7:3e:c5:c4:2e: 3b:89:0a:b6:bd:bc:e7:b7:79:db:a6:3e:ff:43:43:1b:c4:70: 1a:62:e6:91:d1:02:47:40:c4:24:4f:29:d0:1d:f4:1a:d2:a1: da:df:d5:8d:d8:27:d5:9f:e9:f1:33:7d:a3:84:bd:15:50:c4: 42:e3:ce:6d:3a:00:76:37:b1:df:fb:15:8f:63:b1:1d:5c:eb: 73:dd:ad:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzQwOTExMC8GA1UEBRMoQjczQ0NDMEMyRjY3NjEwQTUwOUFGN0I2MkI1NDFCRTVC NTFCRDUyMDAeFw0yNjA4MjUwOTA4NDZaFw0yNjA5MDEwOTA4NDZaMBgxFjAUBgNV BAMTDTZhOGQ1YjllLWVkN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaZLfJ/HFLC41FqNUIfsJbd7CiecOEml8py60QZvnWO2/crgJa8SEZOZWrBOA2 Vt9z16DlJ8LGysS3NrC5UVhYHk+fwaCmGtKJ1go2FDxMnhSVVvN9ZanVPaYFHK8l B/mLz9GP9zGtaxVLAoXyfey11PhxGb70jr/9WIBz5XJmRbTC9hLKj1CqiI+oYq9/ pMi/eE8007Go3RjwXHjKSyZTjriyWRhUUAqZXMO0gwpl2JQm9S6wz23hkt047C8/ Jq5cvGcGHCRI9Hc0iEYeog+mKcclPK65ai1mD79lNyLdN8z0qRdw6vuN0GRrYTLE hTp9SgFKo0us8R8jFHn7hR5xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUud3FAEAu iAsa8nDUmbHfQr7TM4AwHwYDVR0jBBgwFoAUtzzMDC9nYQpQmve2K1Qb5bUb1SAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNDA5Lzk4RjYyOEQ0OUI2 QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFwUW12ZTJLMVFiNWJVYjFT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHp6TURDOW5ZUXBRbXZlMksxUWI1YlViMVNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz NDA5Lzk4RjYyOEQ0OUI2QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFw UW12ZTJLMVFiNWJVYjFTQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCkNHsMdz4Mmnbh44scwSaFplODKu+c502JazsDA04uys0ZnumXj6nYKz6qzCK2 Y7fKBpO/sQiZwTI8tFzbvRe7auRH0M227xEmh1baUwjDTa+Wg0fOh39majdS8U3Z 8Z/CLqnOCyv1sp3eR6Gyuy6+NS+59Hxg4jaKYogI3b8eDdMGx8ikWec01GGR3/XA 1XWtBJklV4xM2JWaU7sg9/KRPtXiBsceHEen3apo7Ls/5z7FxC47iQq2vbznt3nb pj7/Q0MbxHAaYuaR0QJHQMQkTynQHfQa0qHa39WN2CfVn+nxM32jhL0VUMRC485t OgB2N7Hf+xWPY7EdXOtz3a1y -----END CERTIFICATE-----Generated at Thu Aug 27 03:59:49 2026 by rpki-client