$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft File: mazcDOVaSyEFtBOmoQ28JJggYPI.mft (raw, json) Hash identifier: iONQZ7Xhc2aG56U/LCCmw6j5F102YS1cbOBNg1HE/Qg= Subject key identifier: 73:0F:7B:89:BF:C5:11:F5:5C:CC:F2:20:07:64:CE:FD:CC:A0:C4:44 Authority key identifier: 99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2 Certificate issuer: /CN=A9123194/serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft Manifest number: 08 Signing time: Wed 23 Sep 2026 09:03:01 +0000 Manifest this update: Wed 23 Sep 2026 09:03:00 +0000 Manifest next update: Wed 30 Sep 2026 09:03:00 +0000 Files and hashes: 1: mazcDOVaSyEFtBOmoQ28JJggYPI.crl (hash: ug/WetXXmuaPlJJzK+K4Z+cwRWhFb32tabxTs5QsJnM=) 2: 1F518440B5DB11F189029FF54811F970.roa (hash: 7QspwJnTwPU8SYRoP8fOtF6hyWUPrM9LdiMlnY0MmsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123194, serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2 Validity Not Before: Sep 23 09:03:00 2026 GMT Not After : Sep 30 09:03:00 2026 GMT Subject: CN=6ab395c5-4bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:f4:9a:61:5b:3e:65:2a:d5:7e:7a:4c:b6: df:22:0e:93:4b:b6:6c:e1:cf:7a:19:b4:90:44:dc: bd:d6:bf:ee:93:68:8c:98:e4:e4:20:16:b0:0e:54: f5:33:a6:68:93:08:ed:c3:fa:f8:64:29:6b:d4:cb: 1f:18:56:c9:22:ee:cc:0c:03:55:fe:e0:f9:a8:46: cb:7b:bc:28:0a:9a:13:54:47:ae:47:00:56:c1:15: be:2b:18:fd:d8:85:88:3d:22:13:c5:f2:0d:a0:99: 6f:46:79:85:7d:f6:f2:b6:96:39:a6:e0:59:8f:36: 80:03:f1:01:5b:c6:9c:6f:5f:56:1c:68:5a:d5:9a: e0:60:76:37:30:be:08:8d:62:6a:64:34:0d:cf:4b: 0c:7f:0d:db:4b:a7:06:eb:42:01:62:54:1e:70:de: 1a:c6:35:e9:0f:f0:3f:8a:ca:3f:94:57:d3:1a:de: 6c:e3:8b:a5:62:1a:db:d2:7f:35:65:2b:12:b8:55: cb:89:62:72:2f:a7:d0:af:8c:97:a8:53:dc:22:17: 3b:34:89:5b:1a:f0:21:cd:c0:6c:af:7d:52:db:d2: 6f:50:80:12:51:06:ea:0d:5f:44:f6:0a:de:9a:ae: 62:4e:77:c5:21:9b:d0:d2:47:62:1c:62:c4:42:bc: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:7B:89:BF:C5:11:F5:5C:CC:F2:20:07:64:CE:FD:CC:A0:C4:44 X509v3 Authority Key Identifier: keyid:99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5d:90:05:00:1a:43:98:dc:63:bb:8f:25:6a:75:28:83:2d: 13:45:93:79:3e:4f:3c:fd:d5:d5:b7:68:9d:ca:18:41:f9:6a: ef:e7:9e:d8:f1:8e:f7:69:8f:c9:f2:ba:c9:fb:90:eb:13:bf: dc:07:0f:41:03:9f:d3:fe:34:c5:2a:d9:41:74:35:3c:30:f3: 0f:8a:5b:b4:25:e8:e6:57:e4:e1:8a:d6:35:02:c0:0b:37:31: dc:ae:a9:da:5e:b0:11:34:ef:00:27:41:18:cf:08:2c:50:70: 81:36:9f:df:9b:7f:86:61:0e:16:94:9f:b5:9d:5f:52:1c:3a: e5:1b:64:65:95:4f:41:90:1f:f1:4a:c2:9f:cb:af:b8:3d:76: 46:9a:d7:24:3c:10:9e:82:17:12:c1:a9:fe:4b:80:8b:f0:6f: 5e:1f:d3:4f:cf:06:95:cf:f3:92:73:69:b5:07:1d:26:14:2b: 6e:02:86:0b:e2:21:27:70:7b:a0:b2:5e:85:f3:a5:06:4b:9b: 99:50:22:d0:3c:29:45:96:c2:fc:8f:50:32:84:34:58:18:83: be:fb:9a:50:bc:20:24:53:3a:be:ad:7e:1d:c6:85:9f:e2:2c: be:64:cb:b8:b7:6f:8d:7a:ad:85:09:99:d1:0a:ca:40:21:7d: d7:10:b6:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzE5NDExMC8GA1UEBRMoOTlBQ0RDMENFNTVBNEIyMTA1QjQxM0E2QTEwREJDMjQ5 ODIwNjBGMjAeFw0yNjA5MjMwOTAzMDBaFw0yNjA5MzAwOTAzMDBaMBgxFjAUBgNV BAMTDTZhYjM5NWM1LTRiYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7OvSaYVs+ZSrVfnpMtt8iDpNLtmzhz3oZtJBE3L3Wv+6TaIyY5OQgFrAOVPUz pmiTCO3D+vhkKWvUyx8YVski7swMA1X+4PmoRst7vCgKmhNUR65HAFbBFb4rGP3Y hYg9IhPF8g2gmW9GeYV99vK2ljmm4FmPNoAD8QFbxpxvX1YcaFrVmuBgdjcwvgiN YmpkNA3PSwx/DdtLpwbrQgFiVB5w3hrGNekP8D+Kyj+UV9Ma3mzji6ViGtvSfzVl KxK4VcuJYnIvp9CvjJeoU9wiFzs0iVsa8CHNwGyvfVLb0m9QgBJRBuoNX0T2Ct6a rmJOd8Uhm9DSR2IcYsRCvIKHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcw97ib/F EfVczPIgB2TO/cygxEQwHwYDVR0jBBgwFoAUmazcDOVaSyEFtBOmoQ28JJggYPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMTk0LzEzNkFEMjlBQjVE QTExRjE4M0E2MjQ4NjQ4MTFGOTcwL21hemNET1ZhU3lFRnRCT21vUTI4SkpnZ1lQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWF6Y0RPVmFTeUVGdEJPbW9RMjhKSmdnWVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MTk0LzEzNkFEMjlBQjVEQTExRjE4M0E2MjQ4NjQ4MTFGOTcwL21hemNET1ZhU3lF RnRCT21vUTI4SkpnZ1lQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeXZAFABpDmNxju48lanUogy0TRZN5Pk88/dXVt2idyhhB+Wrv557Y8Y73aY/J 8rrJ+5DrE7/cBw9BA5/T/jTFKtlBdDU8MPMPilu0JejmV+ThitY1AsALNzHcrqna XrARNO8AJ0EYzwgsUHCBNp/fm3+GYQ4WlJ+1nV9SHDrlG2RllU9BkB/xSsKfy6+4 PXZGmtckPBCeghcSwan+S4CL8G9eH9NPzwaVz/OSc2m1Bx0mFCtuAoYL4iEncHug sl6F86UGS5uZUCLQPClFlsL8j1AyhDRYGIO++5pQvCAkUzq+rX4dxoWf4iy+ZMu4 t2+Neq2FCZnRCspAIX3XELbA -----END CERTIFICATE-----Generated at Thu Sep 24 09:51:28 2026 by rpki-client