$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json) Hash identifier: 5HD17fINEFmSsdI/+fMSHBPc0liIq17SEvP+xchr47Y= Subject key identifier: 8E:FE:84:F4:85:85:EC:B1:22:93:2B:25:CF:DC:C1:78:FB:D8:20:67 Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft Manifest number: 018F Signing time: Sat 03 Oct 2026 05:07:42 +0000 Manifest this update: Sat 03 Oct 2026 05:07:41 +0000 Manifest next update: Sat 10 Oct 2026 05:07:41 +0000 Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: bbAwljIZwXJi8z70v8xbwh3Gyph3uzgmFVQNagbzV/Q=) 2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: RVbj01Du1WKFasCmwg1jqLFxFljVV487kT8U/4ZCdZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Oct 3 05:07:41 2026 GMT Not After : Oct 10 05:07:41 2026 GMT Subject: CN=6ac08d9e-d2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:31:96:39:34:17:4d:a3:f2:96:b9:e3:0e: 3a:31:40:a8:08:63:50:dd:46:2f:30:74:8f:ae:8b: e8:81:03:e2:3e:90:7f:e8:66:31:b2:c9:b1:57:67: 4e:ed:1f:1c:57:3b:0b:49:b7:17:55:57:18:a5:77: bc:28:e9:85:33:fc:4d:a0:c7:1c:99:5b:2a:c8:a3: 57:42:4e:4c:25:7b:3a:f2:df:9b:f0:f9:0c:1c:0b: c2:4b:b7:d4:60:57:d9:7e:09:48:ce:f4:6b:82:5b: 96:f8:30:fd:57:1f:f1:e3:67:0f:f6:cb:ae:8c:8b: 69:47:c9:d5:7f:69:4d:43:5c:bf:2c:76:16:3b:4b: e7:df:fd:3f:a9:b9:47:8c:db:90:3f:e8:da:db:f6: 17:fb:c8:0d:ea:d7:88:bf:d4:43:8c:e0:4d:89:72: 14:79:6a:2b:62:37:ae:cc:db:45:e6:4e:b0:77:bd: 5d:49:be:e5:32:2e:e4:45:51:11:46:f3:bd:a1:cd: bb:16:be:95:f7:25:f1:38:93:16:4e:28:04:8d:d3: aa:17:ca:a5:9a:03:b7:c1:5c:e9:a6:bc:8b:af:96: 7b:72:d4:91:8c:d4:0a:a2:8d:6d:f4:64:bc:8c:b4: fa:25:74:33:a4:92:b3:f8:7f:c2:f2:cc:67:33:f2: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FE:84:F4:85:85:EC:B1:22:93:2B:25:CF:DC:C1:78:FB:D8:20:67 X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cb:59:3c:5f:f5:81:c6:c6:07:fa:1c:cd:be:bf:2f:5b:38: 17:4e:31:66:6a:cd:5b:0a:b0:3c:6a:b7:be:be:a6:2b:54:6b: 50:fe:49:66:6d:f2:ee:2b:60:94:cd:f4:80:fb:7c:be:58:e2: fc:c8:90:89:36:c6:53:94:6a:90:c6:96:cb:d4:46:dd:25:b7: df:bc:4b:15:a4:71:4c:3b:84:ea:f4:e3:d2:92:93:9b:bf:01: 8d:31:4e:fa:ce:8c:ef:21:84:e4:43:1c:f7:22:18:b6:ad:40: e8:4e:98:10:7e:76:f6:1c:ce:c0:2d:62:96:3b:3b:f6:42:64: 6f:de:3a:65:68:2e:9b:ca:ba:c5:f0:03:40:98:41:66:f9:ae: 35:8a:88:97:c7:93:b5:ad:38:3a:d0:cb:9d:ad:f5:93:6a:c8: 4b:9e:fc:b8:92:19:54:f8:38:44:9d:aa:80:21:b2:c4:dc:4d: 99:cb:9e:5e:7a:a9:dc:38:bb:e7:03:f6:8f:b9:0b:39:89:c4: a1:86:69:32:a5:3b:50:b7:29:16:9a:4d:5e:0f:a8:1f:de:32: d8:43:25:fb:88:a3:c9:7d:a7:6a:09:61:43:22:9f:51:9b:1a: 22:09:bc:93:ee:7a:31:ee:81:21:b5:52:5d:f3:c8:92:07:3c: 48:11:c2:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMEExMTAvBgNVBAUTKDA5OTUwNkVDOTg3QzhCMTk0MDU4NTNCMDhDNzE4QjVC QkU0QUM2OTIwHhcNMjYxMDAzMDUwNzQxWhcNMjYxMDEwMDUwNzQxWjAYMRYwFAYD VQQDEw02YWMwOGQ5ZS1kMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4Uxljk0F02j8pa54w46MUCoCGNQ3UYvMHSProvogQPiPpB/6GYxssmxV2dO 7R8cVzsLSbcXVVcYpXe8KOmFM/xNoMccmVsqyKNXQk5MJXs68t+b8PkMHAvCS7fU YFfZfglIzvRrgluW+DD9Vx/x42cP9suujItpR8nVf2lNQ1y/LHYWO0vn3/0/qblH jNuQP+ja2/YX+8gN6teIv9RDjOBNiXIUeWorYjeuzNtF5k6wd71dSb7lMi7kRVER RvO9oc27Fr6V9yXxOJMWTigEjdOqF8qlmgO3wVzppryLr5Z7ctSRjNQKoo1t9GS8 jLT6JXQzpJKz+H/C8sxnM/I3SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7+hPSF heyxIpMrJc/cwXj72CBnMB8GA1UdIwQYMBaAFAmVBuyYfIsZQFhTsIxxi1u+SsaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwQS9ENURCNkRGNjYw N0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4bEFXRk93akhHTFc3NUt4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwQS9ENURCNkRGNjYwN0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4 bEFXRk93akhHTFc3NUt4cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmstZPF/1gcbGB/oczb6/L1s4F04xZmrNWwqwPGq3vr6mK1RrUP5JZm3y7itg lM30gPt8vlji/MiQiTbGU5RqkMaWy9RG3SW337xLFaRxTDuE6vTj0pKTm78BjTFO +s6M7yGE5EMc9yIYtq1A6E6YEH529hzOwC1iljs79kJkb946ZWgum8q6xfADQJhB ZvmuNYqIl8eTta04OtDLna31k2rIS578uJIZVPg4RJ2qgCGyxNxNmcueXnqp3Di7 5wP2j7kLOYnEoYZpMqU7ULcpFppNXg+oH94y2EMl+4ijyX2naglhQyKfUZsaIgm8 k+56Me6BIbVSXfPIkgc8SBHCPg== -----END CERTIFICATE-----Generated at Sun Oct 4 13:35:20 2026 by rpki-client