$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft File: mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft (raw, json) Hash identifier: AsfT57+r6lZMEPknpXIHGVNFjSAnGd+rH5PI3sTuwH8= Subject key identifier: EB:48:E0:47:97:B9:A5:BB:58:D7:F7:FC:E1:00:83:DC:F5:8E:D7:6E Authority key identifier: 9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81 Certificate issuer: /CN=A9187BD8/serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft Manifest number: 0D Signing time: Tue 03 Nov 2026 10:20:45 +0000 Manifest this update: Tue 03 Nov 2026 10:20:44 +0000 Manifest next update: Tue 10 Nov 2026 10:20:44 +0000 Files and hashes: 1: mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl (hash: dAYnNtaAHCNhtLhy+/4WjNfQdPAhciPSf5PQK5rCLoo=) 2: 3E0372C8D37611F1B2C9C866FD65CEF9.roa (hash: Y0Y5Amq5pdqxZORl0g9ZbkgZIidt2qr9TG0eElNBqbY=) 3: B32C87E6D37711F1B170C695FE65CEF9.roa (hash: ivZQ/5oM9vazsWigpkAbUftu17ZpA6Iq8Inxi/GcLeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BD8, serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481 Validity Not Before: Nov 3 10:20:44 2026 GMT Not After : Nov 10 10:20:44 2026 GMT Subject: CN=6ae9b57d-bb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:05:4f:5f:69:2f:96:c8:9e:e4:ec:f0:2e: 82:a8:9f:89:3f:51:6b:a8:f2:c4:9a:f0:b2:07:d1: 3f:5d:18:7d:90:0d:b3:c2:34:11:13:6a:4a:4f:ee: 8f:ef:84:4b:91:b3:63:df:63:fc:27:8e:9c:f6:d2: a4:0d:46:02:94:f9:43:28:42:b8:c2:ff:de:5a:93: c7:8f:69:00:39:91:21:d6:f3:32:45:bf:b1:0f:24: 2f:d3:78:18:24:d1:f6:e8:8d:8d:0c:98:2c:46:5d: 3e:3f:e9:dd:db:5a:dd:e9:79:41:2f:2d:b7:1b:57: 91:d2:c0:51:16:ab:1d:57:5c:5d:f8:2d:b4:85:a4: 5f:18:82:29:1c:c1:7d:ae:ae:04:42:4b:ec:44:4d: 92:d2:68:36:c2:84:67:b5:e0:2b:1f:35:f0:64:08: 46:fa:4d:73:a0:ad:90:27:59:93:53:45:77:de:53: af:6b:30:e0:78:7c:e3:29:19:db:2e:d1:b3:e4:4d: 50:7a:43:f5:ab:2d:1a:a9:2f:8c:66:ff:6f:d7:bc: e6:9b:ef:68:f4:ba:9a:af:fb:d4:5d:79:f2:3a:4e: e5:81:8c:81:72:d2:7e:cb:79:42:a9:37:5f:3e:cf: 8f:0a:d4:ac:62:6e:2e:65:79:35:f9:25:be:ff:61: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:48:E0:47:97:B9:A5:BB:58:D7:F7:FC:E1:00:83:DC:F5:8E:D7:6E X509v3 Authority Key Identifier: keyid:9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:4c:e6:4c:16:08:89:93:88:3d:7a:3c:b6:55:db:a0:9c:f0: df:c4:b1:f6:cf:a9:09:d0:45:29:f4:07:b5:4b:ef:f2:fc:a8: c4:40:e9:95:89:6a:70:90:5b:47:89:2f:2a:7a:08:a4:7b:2b: 32:0f:d1:49:90:eb:37:07:71:ff:11:8f:ff:e5:d6:c4:9d:f3: 9b:c6:b7:58:69:d0:2d:6f:81:26:5c:9d:51:5f:16:97:39:1f: c9:47:0b:a2:ad:b9:d5:09:68:dc:a2:22:50:36:b4:b6:2f:52: 1c:89:58:32:e5:7a:87:b4:b2:36:99:62:b8:be:7a:e4:9c:0a: bf:13:eb:57:29:38:75:06:2c:9b:41:5e:6c:99:2b:ec:28:49: 47:ad:d7:ad:90:2d:f1:d8:1f:1a:20:3e:df:93:87:22:42:74: 0a:0e:88:a7:f8:d2:f1:1b:e6:69:0d:4a:32:5a:63:04:a1:ff: d1:42:9a:cd:df:d3:ee:c0:64:a7:ea:f7:7e:98:f5:aa:3e:3e: 3f:a9:2c:9e:f6:be:79:66:19:59:84:3f:3f:08:a7:a6:a1:3a: 7e:cf:5a:bd:ce:ca:9f:19:df:5c:36:a6:cf:ac:b9:13:a3:86: 91:6e:bf:ab:98:bc:60:7e:a2:7e:49:84:02:21:02:ed:f2:8c: 5b:20:0d:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JEODExMC8GA1UEBRMoOUIzOEM2ODk3QkZGNkVGMTU2OUQxNUI3NkRGQzNGMzdE QjYwRTQ4MTAeFw0yNjExMDMxMDIwNDRaFw0yNjExMTAxMDIwNDRaMBgxFjAUBgNV BAMTDTZhZTliNTdkLWJiMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEVAVPX2kvlsie5OzwLoKon4k/UWuo8sSa8LIH0T9dGH2QDbPCNBETakpP7o/v hEuRs2PfY/wnjpz20qQNRgKU+UMoQrjC/95ak8ePaQA5kSHW8zJFv7EPJC/TeBgk 0fbojY0MmCxGXT4/6d3bWt3peUEvLbcbV5HSwFEWqx1XXF34LbSFpF8YgikcwX2u rgRCS+xETZLSaDbChGe14CsfNfBkCEb6TXOgrZAnWZNTRXfeU69rMOB4fOMpGdsu 0bPkTVB6Q/WrLRqpL4xm/2/XvOab72j0upqv+9RdefI6TuWBjIFy0n7LeUKpN18+ z48K1Kxibi5leTX5Jb7/YRsNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU60jgR5e5 pbtY1/f84QCD3PWO124wHwYDVR0jBBgwFoAUmzjGiXv/bvFWnRW3bfw/N9tg5IEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkQ4L0VBMEJGMDZDRDJC NDExRjFCQ0Y0RDFEMEZGNjVDRUY5L216akdpWHZfYnZGV25SVzNiZndfTjl0ZzVJ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXpqR2lYdl9idkZXblJXM2Jmd19OOXRnNUlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkQ4L0VBMEJGMDZDRDJCNDExRjFCQ0Y0RDFEMEZGNjVDRUY5L216akdpWHZfYnZG V25SVzNiZndfTjl0ZzVJRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDFTOZMFgiJk4g9ejy2VdugnPDfxLH2z6kJ0EUp9Ae1S+/y/KjEQOmViWpwkFtH iS8qegikeysyD9FJkOs3B3H/EY//5dbEnfObxrdYadAtb4EmXJ1RXxaXOR/JRwui rbnVCWjcoiJQNrS2L1IciVgy5XqHtLI2mWK4vnrknAq/E+tXKTh1BiybQV5smSvs KElHrdetkC3x2B8aID7fk4ciQnQKDoin+NLxG+ZpDUoyWmMEof/RQprN39PuwGSn 6vd+mPWqPj4/qSye9r55ZhlZhD8/CKemoTp+z1q9zsqfGd9cNqbPrLkTo4aRbr+r mLxgfqJ+SYQCIQLt8oxbIA38 -----END CERTIFICATE-----Generated at Wed Nov 4 16:42:54 2026 by rpki-client