$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft File: tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft (raw, json) Hash identifier: Kv3SY9WkP1OOMzzONc2cNmQz8iOxPNasBF6qIIyAZzs= Subject key identifier: E6:12:8C:E7:FC:2E:A4:86:09:31:CB:D3:AF:48:36:00:84:88:DA:38 Authority key identifier: B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 Certificate issuer: /CN=A9143409/serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft Manifest number: 15 Signing time: Wed 23 Sep 2026 08:47:44 +0000 Manifest this update: Wed 23 Sep 2026 08:47:44 +0000 Manifest next update: Wed 30 Sep 2026 08:47:44 +0000 Files and hashes: 1: tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl (hash: dX1H+JQjMwtL2qvqKP2qAgutgg3Iq+Q3dgyuSPE7JvM=) 2: A6B52E529B7B11F1B6BF14144211F970.roa (hash: 4yziqtkYx1WlGKb88IiPWTlvQixYnW84rQvQyIqln4A=) 3: A7DB83269B7B11F1BC8E14144211F970.roa (hash: o6NEa576QOWu7wSaHMbprU6QbrwmUJcq9Rt1I8uW5/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143409, serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Validity Not Before: Sep 23 08:47:44 2026 GMT Not After : Sep 30 08:47:44 2026 GMT Subject: CN=6ab39230-1ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:4e:71:64:72:1b:47:7d:7b:ff:3e:69:1a: c7:0b:30:64:8a:a1:8c:03:9d:21:d4:c7:ab:96:e0: 8b:18:32:65:e6:4f:d7:8c:ff:0b:d8:53:b3:6c:6e: 6d:22:12:6c:53:fa:59:c0:d2:72:4c:96:63:8d:3d: 12:2b:ad:59:bb:2b:2a:51:ca:bf:b5:88:be:eb:f3: 9d:8e:a1:61:27:f6:7e:50:e9:2a:e0:9f:8d:65:37: df:76:f6:18:cb:b6:52:2a:88:dc:eb:11:e8:78:ba: 71:82:19:4a:2c:71:eb:a8:ae:ab:d7:25:41:79:39: f1:09:15:db:64:26:73:6b:55:39:fe:d5:b5:8e:ea: c1:77:bd:1a:55:60:bf:b3:4f:e0:31:ef:16:de:bd: eb:cf:79:14:07:66:09:5a:6f:1f:45:fd:16:c7:c2: fe:e6:64:81:db:9e:42:98:42:17:be:20:7a:4f:5c: 2d:f0:d3:d3:7c:f3:51:48:5a:e9:b1:3c:10:67:3c: 0c:cc:a1:6c:51:e0:11:e7:3c:27:ec:4e:98:b5:2c: a8:7b:07:72:b5:7a:45:d9:ad:29:98:87:01:b0:a0: 6d:dd:bf:2d:57:72:30:b3:f3:f0:4e:ec:40:b5:f5: cb:61:98:19:ed:79:c3:91:7a:6f:93:67:d2:4b:49: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:12:8C:E7:FC:2E:A4:86:09:31:CB:D3:AF:48:36:00:84:88:DA:38 X509v3 Authority Key Identifier: keyid:B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:06:55:51:eb:79:59:25:55:c6:b2:08:f6:aa:d9:d3:29:2f: d9:2d:4e:7e:e3:d0:86:18:a0:a6:07:0c:44:b7:74:6d:75:9b: 56:56:b4:f2:66:d3:5e:5c:f4:f9:f7:a6:3f:c0:db:f8:41:fe: 1d:36:85:36:4e:33:cd:d8:f4:ef:f9:b1:7c:75:1f:16:49:a3: 05:43:dc:8c:cf:4c:12:2e:cd:93:1e:95:e0:98:5c:8e:50:3e: 70:8a:f1:a8:b1:06:00:20:32:31:f5:a2:fa:a4:90:ac:65:ac: cb:c9:de:ac:b6:06:2b:fb:8b:bb:7f:bd:65:3c:1c:9d:72:a2: 45:51:2e:fd:eb:dc:54:5f:b9:37:eb:38:6e:0a:76:59:ca:15: 93:f6:b2:3a:df:04:6e:f5:d4:6b:73:e9:46:82:87:db:77:ed: 70:b5:9f:a8:5c:4d:d1:bb:00:4f:e8:3e:b6:8c:e0:72:bd:d1: 21:5f:99:76:92:94:ae:f7:48:d4:59:e9:80:f6:99:3e:5b:e1: 04:44:0a:c3:a9:8b:d3:50:9c:37:13:5d:9b:4d:14:21:48:27: af:29:2e:7e:58:fc:af:2b:ed:c6:d9:05:9b:c6:62:78:31:39: 5d:e4:58:7e:f9:03:c0:81:59:4b:31:27:26:22:ab:c1:5c:a5: 23:b0:5c:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzQwOTExMC8GA1UEBRMoQjczQ0NDMEMyRjY3NjEwQTUwOUFGN0I2MkI1NDFCRTVC NTFCRDUyMDAeFw0yNjA5MjMwODQ3NDRaFw0yNjA5MzAwODQ3NDRaMBgxFjAUBgNV BAMTDTZhYjM5MjMwLTFhZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5r05xZHIbR317/z5pGscLMGSKoYwDnSHUx6uW4IsYMmXmT9eM/wvYU7Nsbm0i EmxT+lnA0nJMlmONPRIrrVm7KypRyr+1iL7r852OoWEn9n5Q6Srgn41lN9929hjL tlIqiNzrEeh4unGCGUosceuorqvXJUF5OfEJFdtkJnNrVTn+1bWO6sF3vRpVYL+z T+Ax7xbevevPeRQHZglabx9F/RbHwv7mZIHbnkKYQhe+IHpPXC3w09N881FIWumx PBBnPAzMoWxR4BHnPCfsTpi1LKh7B3K1ekXZrSmYhwGwoG3dvy1XcjCz8/BO7EC1 9cthmBntecORem+TZ9JLSX1BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5hKM5/wu pIYJMcvTr0g2AISI2jgwHwYDVR0jBBgwFoAUtzzMDC9nYQpQmve2K1Qb5bUb1SAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNDA5Lzk4RjYyOEQ0OUI2 QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFwUW12ZTJLMVFiNWJVYjFT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHp6TURDOW5ZUXBRbXZlMksxUWI1YlViMVNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz NDA5Lzk4RjYyOEQ0OUI2QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFw UW12ZTJLMVFiNWJVYjFTQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdBlVR63lZJVXGsgj2qtnTKS/ZLU5+49CGGKCmBwxEt3RtdZtWVrTyZtNeXPT5 96Y/wNv4Qf4dNoU2TjPN2PTv+bF8dR8WSaMFQ9yMz0wSLs2THpXgmFyOUD5wivGo sQYAIDIx9aL6pJCsZazLyd6stgYr+4u7f71lPBydcqJFUS7969xUX7k36zhuCnZZ yhWT9rI63wRu9dRrc+lGgofbd+1wtZ+oXE3RuwBP6D62jOByvdEhX5l2kpSu90jU WemA9pk+W+EERArDqYvTUJw3E12bTRQhSCevKS5+WPyvK+3G2QWbxmJ4MTld5Fh+ +QPAgVlLMScmIqvBXKUjsFy6 -----END CERTIFICATE-----Generated at Thu Sep 24 08:48:02 2026 by rpki-client