$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: RE/rSVZOau7sX9mK9N9O/bCIhxDBSFO0JmCOet8q3XI= Subject key identifier: 47:88:98:F7:D9:6F:94:6E:CF:0F:16:8D:99:58:CE:FF:BF:11:BA:A3 Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 059E Signing time: Fri 04 Sep 2026 22:59:00 +0000 Manifest this update: Fri 04 Sep 2026 22:58:59 +0000 Manifest next update: Fri 11 Sep 2026 22:58:59 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: qP+LjdN9rCY6GVe4+vaXbZDJp53Q5sSSGQor8usMqps=) 2: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=) 3: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Sep 4 22:58:59 2026 GMT Not After : Sep 11 22:58:59 2026 GMT Subject: CN=6a9b4d34-3f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:4a:d0:e7:df:68:5b:00:61:26:b9:f9:af: 17:5b:cd:cb:35:6a:3d:76:c3:48:b5:34:fa:23:ce: 86:04:f8:84:07:ab:36:ae:e5:cf:1b:85:00:9b:64: e1:33:d1:2e:d5:d8:33:ba:fd:7e:3f:21:2f:1e:73: 3c:b6:a4:b3:c5:3c:6c:69:2d:15:3f:62:22:cf:4a: 82:32:61:ee:6d:0f:ed:04:d6:65:40:ab:64:a7:6d: 8b:a9:6a:80:f4:6b:dd:02:4b:c8:b3:ff:fb:62:55: 79:da:08:7a:4a:91:dc:27:83:62:8d:7c:7d:2b:63: 86:33:57:3b:1d:40:f2:69:13:88:66:60:17:9c:97: cd:43:18:bf:48:a1:75:11:04:7d:7d:c1:e8:09:78: a5:54:55:42:10:62:67:bd:32:64:f2:f7:a5:00:af: 39:82:ca:4c:b1:10:b5:4d:9e:c4:af:14:aa:56:79: df:a5:7f:74:2e:21:0a:d5:61:ae:6a:a3:35:25:8e: 03:e8:f3:49:fb:b7:ac:56:3d:a0:87:0e:61:c9:06: 4e:8d:15:7d:59:12:21:4d:ce:5f:bf:a2:7e:60:11: 28:2d:ff:77:93:3f:f7:39:5c:ad:58:90:2c:8b:46: 95:f1:96:24:67:0f:6e:cc:59:14:b0:f7:bc:0f:b2: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:98:F7:D9:6F:94:6E:CF:0F:16:8D:99:58:CE:FF:BF:11:BA:A3 X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:15:37:3f:f9:7d:18:1d:6e:38:58:b2:45:80:99:f1:34:04: f2:3b:e2:2d:d3:dc:a4:94:b6:84:9e:4c:c7:49:99:d0:3c:ad: dd:ae:3d:5b:f4:1e:f1:3a:ec:97:f0:eb:90:f4:a8:77:4f:7f: 80:21:05:be:93:55:24:2e:ca:6e:51:f8:24:1d:ed:aa:e5:9d: 9e:53:9d:36:31:7a:5c:c7:fd:a8:58:05:45:73:b9:5d:9e:b1: d2:4c:9d:8c:99:84:02:4c:7d:7c:9b:c4:31:cd:02:e7:92:ad: 8a:29:29:e4:6c:c5:98:58:3e:dd:36:65:ae:8b:55:5e:9b:2c: f1:58:9d:e8:92:4a:31:d9:f8:7b:41:62:d2:ee:d1:15:38:50: 2f:f0:04:3d:39:2e:8f:6c:e4:47:95:70:f0:68:21:53:38:9d: b5:7a:21:13:db:6d:cc:13:fc:87:3f:05:41:75:c4:ca:3e:37: f7:a8:0b:52:43:e2:b7:0c:ef:8c:da:c4:c2:75:01:e3:8c:e0: bb:dd:24:d3:e0:4e:3d:e7:67:cd:9c:98:10:6e:99:30:6f:b1: 4e:9d:70:a7:c7:fc:5a:86:cc:0c:d5:07:2b:cb:f9:cf:e0:c6: 1b:23:27:79:31:94:0d:e1:36:4b:04:bf:75:9c:bf:dd:58:e0: 63:52:bf:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjYwOTA0MjI1ODU5WhcNMjYwOTExMjI1ODU5WjAYMRYwFAYD VQQDEw02YTliNGQzNC0zZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArahK0OffaFsAYSa5+a8XW83LNWo9dsNItTT6I86GBPiEB6s2ruXPG4UAm2Th M9Eu1dgzuv1+PyEvHnM8tqSzxTxsaS0VP2Iiz0qCMmHubQ/tBNZlQKtkp22LqWqA 9GvdAkvIs//7YlV52gh6SpHcJ4NijXx9K2OGM1c7HUDyaROIZmAXnJfNQxi/SKF1 EQR9fcHoCXilVFVCEGJnvTJk8velAK85gspMsRC1TZ7ErxSqVnnfpX90LiEK1WGu aqM1JY4D6PNJ+7esVj2ghw5hyQZOjRV9WRIhTc5fv6J+YBEoLf93kz/3OVytWJAs i0aV8ZYkZw9uzFkUsPe8D7L6TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeImPfZ b5Ruzw8WjZlYzv+/EbqjMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdRU3P/l9GB1uOFiyRYCZ8TQE8jviLdPcpJS2hJ5Mx0mZ0Dyt3a49W/Qe8Trs l/DrkPSod09/gCEFvpNVJC7KblH4JB3tquWdnlOdNjF6XMf9qFgFRXO5XZ6x0kyd jJmEAkx9fJvEMc0C55Ktiikp5GzFmFg+3TZlrotVXpss8Vid6JJKMdn4e0Fi0u7R FThQL/AEPTkuj2zkR5Vw8GghUzidtXohE9ttzBP8hz8FQXXEyj4396gLUkPitwzv jNrEwnUB44zgu90k0+BOPednzZyYEG6ZMG+xTp1wp8f8WobMDNUHK8v5z+DGGyMn eTGUDeE2SwS/dZy/3VjgY1K/cQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:45:03 2026 by rpki-client