$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json) Hash identifier: IoMlI3TtC3B08n1uPa39y2pM/XX3yN+XHVNCqMV6lrI= Subject key identifier: 03:74:A7:E6:B5:C0:18:22:4F:B8:67:FD:B6:F1:99:A4:F9:B1:B9:2B Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft Manifest number: 2C Signing time: Mon 01 Jun 2026 09:33:04 +0000 Manifest this update: Mon 01 Jun 2026 09:33:03 +0000 Manifest next update: Mon 08 Jun 2026 09:33:03 +0000 Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: YKP/+jUwSCnbbY46ttD0Uc4C/DUf9jDTKiMnYFomrKM=) 2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Validity Not Before: Jun 1 09:33:03 2026 GMT Not After : Jun 8 09:33:03 2026 GMT Subject: CN=6a1d51d0-c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:da:42:a6:e6:79:5c:91:92:b0:80:48:75: f2:6b:bb:9e:ae:35:8a:c9:7d:d8:5a:a6:af:b4:ea: 68:07:a3:1a:8c:06:9a:db:d4:97:36:b6:4b:f6:9e: c9:4c:aa:e0:42:ce:64:1b:02:a6:00:25:fe:fc:5e: ef:9f:cb:21:36:b1:b3:6e:10:13:4e:1b:a7:4a:86: 38:f2:06:c3:95:da:8d:38:e6:03:5d:b8:c8:e7:57: 68:46:5b:98:48:29:8f:b9:59:b4:f1:c2:31:a1:80: 84:0a:89:7f:fb:f9:06:6f:af:68:cd:31:d7:e9:90: 85:62:c7:91:6a:72:db:4f:02:2f:29:21:85:50:f1: 8f:b0:f1:96:30:b0:7b:7d:16:d6:df:27:ef:89:54: d1:e2:0d:9d:5f:70:e6:9b:24:7e:fc:84:52:73:30: 42:f4:9f:f2:c8:a5:df:d9:07:73:fa:84:fc:57:1b: 82:c5:38:7d:5c:ca:05:dc:e7:87:cb:e7:be:cf:91: 1f:f8:ce:89:aa:db:dc:aa:94:97:d3:3c:8d:93:89: 95:29:16:21:09:29:d7:b4:fc:48:e4:54:e3:39:e4: 8d:f6:a7:91:96:de:d1:84:aa:2c:b1:ea:7e:20:5b: 89:b7:61:21:7a:4b:9e:8d:2e:4f:64:26:f1:f3:26: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:A7:E6:B5:C0:18:22:4F:B8:67:FD:B6:F1:99:A4:F9:B1:B9:2B X509v3 Authority Key Identifier: keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ee:35:49:87:35:a5:4e:d1:24:d2:f7:02:f1:29:bf:be:ed: 40:98:18:8d:33:8b:8c:54:f4:3a:5d:36:5a:c4:ee:5d:bf:a5: 8a:23:34:08:ab:ed:6f:3b:eb:62:85:0c:dc:93:1e:5a:85:0c: 30:85:d8:75:b8:18:6f:17:62:ea:d4:00:f1:24:1f:62:74:3f: 48:61:c2:bd:f0:ec:e5:e1:4a:b4:cc:4d:e9:9b:07:53:3a:c2: 89:e6:5b:51:87:59:3a:03:e1:d1:9d:ea:42:52:41:04:b6:05: 6a:19:9e:f6:2a:3e:60:1b:96:80:6b:09:42:5c:2b:64:a1:84: 1a:16:9d:7a:6f:a1:5e:c1:12:d9:3e:13:58:ca:36:74:ea:cc: 2a:ef:51:bb:11:7d:c0:f9:04:2f:a8:3c:6d:aa:22:c8:c3:98: b5:f9:f4:ea:8c:3f:bd:64:03:cd:8b:e4:e6:5c:1b:36:84:3c: 23:f8:9c:c8:91:92:f6:b8:51:13:b5:de:d7:53:17:e4:11:0c: 5c:cb:55:10:8b:5d:f1:9b:af:85:1d:03:0c:1b:19:2b:c8:23: 30:08:d5:05:bb:43:63:82:5a:75:b2:d3:28:de:0a:11:28:84: fa:b1:0c:94:9a:d4:b2:5a:c2:3f:c5:fd:71:5b:dc:e8:d5:66: 6d:2c:b4:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODAxOTExMC8GA1UEBRMoMEIzMENCQzczM0REQzQ2ODZCMzQ1NTRDRUU5NkUyN0Q2 MUVDOUMyRjAeFw0yNjA2MDEwOTMzMDNaFw0yNjA2MDgwOTMzMDNaMBgxFjAUBgNV BAMTDTZhMWQ1MWQwLWM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfyNpCpuZ5XJGSsIBIdfJru56uNYrJfdhapq+06mgHoxqMBprb1Jc2tkv2nslM quBCzmQbAqYAJf78Xu+fyyE2sbNuEBNOG6dKhjjyBsOV2o045gNduMjnV2hGW5hI KY+5WbTxwjGhgIQKiX/7+QZvr2jNMdfpkIVix5FqcttPAi8pIYVQ8Y+w8ZYwsHt9 FtbfJ++JVNHiDZ1fcOabJH78hFJzMEL0n/LIpd/ZB3P6hPxXG4LFOH1cygXc54fL 577PkR/4zomq29yqlJfTPI2TiZUpFiEJKde0/EjkVOM55I32p5GW3tGEqiyx6n4g W4m3YSF6S56NLk9kJvHzJgZLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA3Sn5rXA GCJPuGf9tvGZpPmxuSswHwYDVR0jBBgwFoAUCzDLxzPdxGhrNFVM7pbifWHsnC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5L0ZGMjUzNTM4MjEx MzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdock5GVk03cGJpZldIc25D OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3pETHh6UGR4R2hyTkZWTTdwYmlmV0hzbkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MDE5L0ZGMjUzNTM4MjExMzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdo ck5GVk03cGJpZldIc25DOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAu7jVJhzWlTtEk0vcC8Sm/vu1AmBiNM4uMVPQ6XTZaxO5dv6WKIzQIq+1vO+ti hQzckx5ahQwwhdh1uBhvF2Lq1ADxJB9idD9IYcK98Ozl4Uq0zE3pmwdTOsKJ5ltR h1k6A+HRnepCUkEEtgVqGZ72Kj5gG5aAawlCXCtkoYQaFp16b6FewRLZPhNYyjZ0 6swq71G7EX3A+QQvqDxtqiLIw5i1+fTqjD+9ZAPNi+TmXBs2hDwj+JzIkZL2uFET td7XUxfkEQxcy1UQi13xm6+FHQMMGxkryCMwCNUFu0Njglp1stMo3goRKIT6sQyU mtSyWsI/xf1xW9zo1WZtLLSq -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:04 2026 by rpki-client