$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: M2hydhJBpY/YHQxFbd5GEHfKVTEBJiCrkpzk72HxuEg= Subject key identifier: C2:AF:67:5D:38:1E:EA:60:EA:5A:5F:37:25:21:68:B7:C9:84:F3:50 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0642 Signing time: Fri 18 Sep 2026 22:36:02 +0000 Manifest this update: Fri 18 Sep 2026 22:36:01 +0000 Manifest next update: Fri 25 Sep 2026 22:36:01 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: WXND5MPNijvUeugKijcYJwSoKeH6z47ZiZAi4LvAAfk=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Sep 18 22:36:01 2026 GMT Not After : Sep 25 22:36:01 2026 GMT Subject: CN=6aadbcd2-9590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:f4:1a:e8:92:21:6b:58:d2:f9:2f:1e:1b: 4b:40:fd:19:77:bb:f0:93:a0:43:ad:95:32:95:1b: 3b:af:a3:85:4d:67:4d:07:21:60:b2:f6:2d:e9:96: fd:66:7c:73:00:b3:21:71:6d:28:3a:c3:7a:ac:32: 9d:95:96:67:38:ac:a8:42:be:49:bd:c8:0c:13:e7: 64:0e:8b:7b:06:7b:8a:71:be:1c:16:d4:80:cf:94: bd:e0:fa:24:54:0a:4e:17:0e:b6:af:5f:87:c8:3c: 94:92:6e:12:d1:98:27:89:5a:ff:63:4b:00:d8:c8: ce:c2:1f:40:91:d9:ec:cf:98:a3:e5:70:49:3b:3c: 99:b9:92:0a:e6:cc:bc:d5:3f:2c:64:42:25:72:f5: b4:76:b0:e4:24:6c:3f:03:ba:43:1d:cc:2f:81:94: a0:93:6f:14:89:ff:c3:d4:6c:eb:0a:04:3d:4e:07: b5:06:98:20:68:cc:3a:44:55:05:36:12:6f:bf:26: 3b:ab:19:6d:aa:7f:b5:1c:df:40:37:8c:13:6f:cd: 7a:93:15:76:4b:db:17:85:cb:9b:e0:dc:49:85:a6: 50:04:24:4a:77:8d:21:79:ce:f1:83:c1:62:25:04: 25:9e:7a:84:49:4f:de:61:c3:cc:19:cf:fc:3b:39: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:67:5D:38:1E:EA:60:EA:5A:5F:37:25:21:68:B7:C9:84:F3:50 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:26:6b:37:10:6e:70:e5:08:62:d7:c7:76:8f:a0:fb:a6: fb:26:f8:6b:c1:9f:9e:73:dd:e6:aa:a7:0b:b2:73:bd:b8:1c: 63:db:d1:2f:d5:63:a7:75:69:2e:76:a9:0b:27:82:df:46:3f: 66:3e:55:f9:99:c9:7e:6f:e1:75:86:14:53:f2:23:b2:ab:b6: d2:f9:28:c9:02:a0:17:c8:25:39:28:6f:06:69:7e:66:a7:37: fd:c9:52:64:92:58:a7:2b:58:bb:c0:ef:55:5f:78:38:41:96: 27:d5:93:de:88:c3:06:71:b4:96:68:2e:88:96:f7:29:58:b5: 7d:e6:93:e6:e8:e5:80:30:6d:61:90:4b:f6:36:0a:04:4a:89: d9:f1:b6:da:04:19:bf:30:99:63:56:3c:aa:76:6e:8a:97:fd: 02:90:c7:d2:b3:58:db:42:4b:1d:5c:31:79:5c:66:6f:71:7b: 68:3d:ff:e5:3b:c6:a4:45:0c:12:fd:9d:d2:7a:99:de:b7:86: d4:c6:24:68:54:f3:34:4c:19:c5:82:5f:31:af:b8:0a:fc:55: 2a:65:b5:20:22:ff:90:d3:36:f2:f4:35:43:aa:42:c6:0d:72: 3a:3f:80:06:2f:bf:90:e8:cf:d9:33:c3:c9:d0:14:07:ee:c3: ef:08:54:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjYwOTE4MjIzNjAxWhcNMjYwOTI1MjIzNjAxWjAYMRYwFAYD VQQDEw02YWFkYmNkMi05NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XL0GuiSIWtY0vkvHhtLQP0Zd7vwk6BDrZUylRs7r6OFTWdNByFgsvYt6Zb9 ZnxzALMhcW0oOsN6rDKdlZZnOKyoQr5JvcgME+dkDot7BnuKcb4cFtSAz5S94Pok VApOFw62r1+HyDyUkm4S0ZgniVr/Y0sA2MjOwh9Akdnsz5ij5XBJOzyZuZIK5sy8 1T8sZEIlcvW0drDkJGw/A7pDHcwvgZSgk28Uif/D1GzrCgQ9Tge1BpggaMw6RFUF NhJvvyY7qxltqn+1HN9AN4wTb816kxV2S9sXhcub4NxJhaZQBCRKd40hec7xg8Fi JQQlnnqESU/eYcPMGc/8OznniwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKvZ104 Hupg6lpfNyUhaLfJhPNQMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmT0mazcQbnDlCGLXx3aPoPum+yb4a8GfnnPd5qqnC7JzvbgcY9vRL9Vjp3Vp LnapCyeC30Y/Zj5V+ZnJfm/hdYYUU/Ijsqu20vkoyQKgF8glOShvBml+Zqc3/clS ZJJYpytYu8DvVV94OEGWJ9WT3ojDBnG0lmguiJb3KVi1feaT5ujlgDBtYZBL9jYK BEqJ2fG22gQZvzCZY1Y8qnZuipf9ApDH0rNY20JLHVwxeVxmb3F7aD3/5TvGpEUM Ev2d0nqZ3reG1MYkaFTzNEwZxYJfMa+4CvxVKmW1ICL/kNM28vQ1Q6pCxg1yOj+A Bi+/kOjP2TPDydAUB+7D7whU/Q== -----END CERTIFICATE-----Generated at Sat Sep 19 06:13:51 2026 by rpki-client