$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: wfdl/g7SvYFuWLaHwYwDVP7l/giyNo8lI6RMJ53uOjw= Subject key identifier: 7D:B2:28:0C:F2:15:FB:FC:9C:33:14:EC:61:FA:B4:44:5F:52:39:03 Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 15C4 Signing time: Wed 22 Jul 2026 18:12:49 +0000 Manifest this update: Wed 22 Jul 2026 18:12:48 +0000 Manifest next update: Wed 29 Jul 2026 18:12:48 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: e+BQvYEvl7/wuOlgP+Nj16SZoiaZal1nBIktY8Clnvo=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: HxB0HCgQPbOlmo96fIp6uk7AphF4jHP5wZ0nGph8yhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Jul 22 18:12:48 2026 GMT Not After : Jul 29 18:12:48 2026 GMT Subject: CN=6a610820-d234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:dd:01:89:c8:d2:f6:a4:34:a5:69:d6:bf: 11:e9:4e:74:82:48:34:de:d2:76:f2:bd:5f:43:82: a1:0c:a0:fb:6e:d9:31:72:a5:8d:27:1b:66:4a:b9: e0:63:c1:29:c3:51:df:dc:ed:71:bb:75:d3:27:eb: 60:c0:2d:b1:0a:7f:af:7a:65:32:d6:e9:8b:92:d1: 7d:5e:33:d3:dc:04:67:c3:4b:75:d9:38:c6:a4:8f: a9:35:6d:95:d3:38:ad:f8:b0:87:c2:22:3f:95:8f: 68:02:65:58:29:7b:4a:a0:e1:4d:93:3a:ef:d6:9e: bf:1a:a5:5f:d2:bc:a9:cb:51:f2:4b:aa:e4:c3:db: 86:54:5e:77:0a:d2:29:c6:b5:1c:14:25:ef:1e:52: 30:3b:20:03:a7:ed:ad:a2:7c:ef:90:d3:f9:f6:0b: 77:b4:42:d8:f3:00:f7:01:14:84:2e:fa:e5:78:96: 8b:1c:35:f4:bf:ea:3b:97:95:bc:38:00:ff:24:c8: f5:98:33:27:53:7e:da:16:4a:42:3b:a4:88:46:e8: 6a:8a:9b:71:37:ef:26:0b:d1:d1:d7:65:b2:c9:c7: bb:12:05:eb:03:34:ed:f4:e4:a0:df:8c:ba:8e:91: 45:8e:0f:b1:47:b0:ff:a9:d9:dc:9a:42:d1:7e:f1: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B2:28:0C:F2:15:FB:FC:9C:33:14:EC:61:FA:B4:44:5F:52:39:03 X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6b:e7:b6:23:8d:85:6d:79:a4:4c:66:62:e0:34:23:2b:13: 40:97:35:3b:66:0b:1d:8f:2d:e1:07:9d:d0:6d:e0:56:2c:48: ca:f2:ad:7e:fa:22:93:ac:f9:91:45:bf:63:d3:98:12:bc:1d: 3f:96:bb:26:18:c8:18:e1:b8:03:ae:f3:11:a5:31:3b:25:91: 1a:6a:5d:fd:1e:0f:ef:b0:15:13:e0:8f:b7:38:8d:17:77:9d: 81:78:bb:5f:93:da:34:53:75:e9:5a:d3:e6:bc:ba:b2:e0:2e: fb:eb:dc:8a:66:cd:52:96:3c:5f:fa:77:34:58:5f:b5:40:29: 2e:49:2f:a7:87:50:89:a1:2c:48:10:14:12:a4:fa:36:46:ff: 0e:b6:70:40:ab:4b:55:ae:90:df:4b:a2:df:1e:9d:47:9d:21: c5:46:79:ae:0a:fe:28:49:b6:eb:6b:1d:59:d0:3f:da:91:39: f8:54:e5:06:61:fd:01:52:90:9d:ba:dd:7a:f7:c5:ad:a6:75: 40:38:71:cc:72:90:21:44:6c:4d:be:65:7a:38:15:71:76:5c: 93:54:78:08:d6:ea:8f:19:f3:75:ca:f6:09:f0:7a:87:4f:5c: c6:fe:78:22:3d:5b:6c:20:70:9a:5a:01:c9:b4:74:b4:0e:8f: c3:28:4f:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjYwNzIyMTgxMjQ4WhcNMjYwNzI5MTgxMjQ4WjAYMRYwFAYD VQQDEw02YTYxMDgyMC1kMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk7dAYnI0vakNKVp1r8R6U50gkg03tJ28r1fQ4KhDKD7btkxcqWNJxtmSrng Y8Epw1Hf3O1xu3XTJ+tgwC2xCn+vemUy1umLktF9XjPT3ARnw0t12TjGpI+pNW2V 0zit+LCHwiI/lY9oAmVYKXtKoOFNkzrv1p6/GqVf0rypy1HyS6rkw9uGVF53CtIp xrUcFCXvHlIwOyADp+2tonzvkNP59gt3tELY8wD3ARSELvrleJaLHDX0v+o7l5W8 OAD/JMj1mDMnU37aFkpCO6SIRuhqiptxN+8mC9HR12Wyyce7EgXrAzTt9OSg34y6 jpFFjg+xR7D/qdncmkLRfvHM/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2yKAzy Ffv8nDMU7GH6tERfUjkDMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmvntiONhW15pExmYuA0IysTQJc1O2YLHY8t4Qed0G3gVixIyvKtfvoik6z5 kUW/Y9OYErwdP5a7JhjIGOG4A67zEaUxOyWRGmpd/R4P77AVE+CPtziNF3edgXi7 X5PaNFN16VrT5ry6suAu++vcimbNUpY8X/p3NFhftUApLkkvp4dQiaEsSBAUEqT6 Nkb/DrZwQKtLVa6Q30ui3x6dR50hxUZ5rgr+KEm262sdWdA/2pE5+FTlBmH9AVKQ nbrdevfFraZ1QDhxzHKQIURsTb5lejgVcXZck1R4CNbqjxnzdcr2CfB6h09cxv54 Ij1bbCBwmloBybR0tA6PwyhP3g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:02:58 2026 by rpki-client