$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft File: DrTZlhk2pChD3fXs8MjF2eSwD3w.mft (raw, json) Hash identifier: vd/KZZZBbQzknH+UVQV4ZjmBNRmvx5vteTIgZsqvHf0= Subject key identifier: 3C:12:4D:43:25:3A:07:D7:1A:1E:9F:69:A6:DC:2A:D5:7A:D9:BF:8E Authority key identifier: 0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C Certificate issuer: /CN=A9119D80/serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft Manifest number: 11 Signing time: Wed 23 Sep 2026 08:50:55 +0000 Manifest this update: Wed 23 Sep 2026 08:50:55 +0000 Manifest next update: Wed 30 Sep 2026 08:50:55 +0000 Files and hashes: 1: DrTZlhk2pChD3fXs8MjF2eSwD3w.crl (hash: SRC1UsqYw9CSZt4UNOEMVSwAyqWCuZTZ8deibC1z7eg=) 2: 7F394E8EA03B11F1B3E7CFF43811F970.roa (hash: 9gozVmZi4OG/VKvp0JupB8Q4GsNsb+cTt45Qb53BBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D80, serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Validity Not Before: Sep 23 08:50:55 2026 GMT Not After : Sep 30 08:50:55 2026 GMT Subject: CN=6ab392ef-05c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:26:69:d8:f4:24:4b:7e:ca:9d:e6:7d:71: 4f:2e:83:c4:c9:2d:0d:00:2a:19:82:f6:f3:8e:6e: fd:41:b2:1a:36:c0:24:e7:2f:80:8e:61:ad:c5:e3: ff:5b:ca:3c:93:3c:8a:d2:27:b5:fc:49:3c:45:e7: 8b:8c:38:48:97:7f:f3:65:5c:02:e6:9a:35:98:24: c4:60:35:e7:17:94:c1:7e:f9:f0:42:ed:6d:37:5f: ab:0f:f5:d0:8e:31:4d:52:58:30:12:d9:ad:32:84: f4:23:2c:cf:10:2e:31:25:3b:e1:51:4b:06:7c:22: 97:0b:66:da:13:b7:00:43:2a:3f:8d:cd:66:cf:15: 16:a6:2a:e6:f6:c7:36:e3:f2:e8:a4:63:3b:4f:05: 0d:d6:e0:91:53:04:4b:0a:e7:19:ac:91:8e:11:42: a4:c9:3e:d8:b8:28:26:7b:59:35:26:58:2c:cf:ca: df:66:dd:7e:0a:35:5e:1c:e2:9b:1f:14:26:db:e0: b0:c5:04:b2:ec:08:a2:dc:7f:40:84:48:52:aa:64: db:04:7a:0c:43:ec:c2:33:69:1f:85:3d:28:49:27: 9d:af:a0:28:c5:85:96:e1:48:b6:2e:6b:da:bb:cf: db:56:84:69:f1:18:18:9b:85:4a:d4:e1:ff:2b:48: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:12:4D:43:25:3A:07:D7:1A:1E:9F:69:A6:DC:2A:D5:7A:D9:BF:8E X509v3 Authority Key Identifier: keyid:0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:29:0d:76:f9:4d:f3:13:e8:04:fd:e7:4e:4a:b8:23:5f:b0: 6b:af:82:8e:ef:e7:37:5c:68:45:58:64:08:88:8e:d7:85:7a: c8:03:1c:d5:5e:a3:38:ea:c8:62:e6:bf:f6:e0:ec:ea:c5:fe: b2:cb:49:81:26:00:c4:d8:85:fc:f5:46:e7:8b:42:3d:12:42: 34:fd:c0:4a:05:df:7f:33:a0:fc:77:e4:44:c9:d5:0e:66:11: bb:54:0c:a4:04:d0:0e:d0:9f:26:9e:bf:dd:53:81:37:ff:0a: 99:78:d2:41:06:50:6c:ad:41:b2:aa:7a:a3:7a:dd:91:42:af: 90:30:0f:8e:46:14:ff:0e:32:6c:d0:af:30:a4:ae:c3:6a:8c: 53:f4:23:66:e4:1e:e5:d0:2c:5e:f8:3e:81:a9:49:3a:ef:7e: 90:91:14:f2:ba:89:61:ca:1a:29:d0:8d:a7:ec:a9:5b:8f:21: 92:3c:9c:28:a3:f5:32:d9:0d:46:55:1a:9a:90:bc:10:80:c2: ff:bb:35:df:d6:ec:d0:10:75:85:58:83:2c:ec:59:4d:93:e9: 5f:20:26:da:75:53:4e:d1:d9:8e:22:a8:ae:0e:b0:c9:ff:b9: 3f:0e:49:99:b0:c0:d7:38:42:b0:61:83:92:5b:38:6e:ee:8d: 11:ff:f7:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUQ4MDExMC8GA1UEBRMoMEVCNEQ5OTYxOTM2QTQyODQzRERGNUVDRjBDOEM1RDlF NEIwMEY3QzAeFw0yNjA5MjMwODUwNTVaFw0yNjA5MzAwODUwNTVaMBgxFjAUBgNV BAMTDTZhYjM5MmVmLTA1YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKNyZp2PQkS37KneZ9cU8ug8TJLQ0AKhmC9vOObv1Bsho2wCTnL4COYa3F4/9b yjyTPIrSJ7X8STxF54uMOEiXf/NlXALmmjWYJMRgNecXlMF++fBC7W03X6sP9dCO MU1SWDAS2a0yhPQjLM8QLjElO+FRSwZ8IpcLZtoTtwBDKj+NzWbPFRamKub2xzbj 8uikYztPBQ3W4JFTBEsK5xmskY4RQqTJPti4KCZ7WTUmWCzPyt9m3X4KNV4c4psf FCbb4LDFBLLsCKLcf0CESFKqZNsEegxD7MIzaR+FPShJJ52voCjFhZbhSLYua9q7 z9tWhGnxGBibhUrU4f8rSDGvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPBJNQyU6 B9caHp9pptwq1XrZv44wHwYDVR0jBBgwFoAUDrTZlhk2pChD3fXs8MjF2eSwD3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDgwLzVDNEY5QjdDQTAz QTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENoRDNmWHM4TWpGMmVTd0Qz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHJUWmxoazJwQ2hEM2ZYczhNakYyZVN3RDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 RDgwLzVDNEY5QjdDQTAzQTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENo RDNmWHM4TWpGMmVTd0Qzdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGKQ12+U3zE+gE/edOSrgjX7Brr4KO7+c3XGhFWGQIiI7XhXrIAxzVXqM46shi 5r/24Ozqxf6yy0mBJgDE2IX89Ubni0I9EkI0/cBKBd9/M6D8d+REydUOZhG7VAyk BNAO0J8mnr/dU4E3/wqZeNJBBlBsrUGyqnqjet2RQq+QMA+ORhT/DjJs0K8wpK7D aoxT9CNm5B7l0Cxe+D6BqUk6736QkRTyuolhyhop0I2n7KlbjyGSPJwoo/Uy2Q1G VRqakLwQgML/uzXf1uzQEHWFWIMs7FlNk+lfICbadVNO0dmOIqiuDrDJ/7k/DkmZ sMDXOEKwYYOSWzhu7o0R//eW -----END CERTIFICATE-----Generated at Wed Sep 23 15:39:07 2026 by rpki-client