$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json) Hash identifier: 3IARewmUYbGvcUcgsTu/kSPNE8/RQZuwGepsmM+oVGA= Subject key identifier: 34:2D:E8:79:7E:0C:4B:49:BD:F0:8D:06:3D:FB:47:19:90:99:B0:49 Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft Manifest number: 0168 Signing time: Thu 23 Jul 2026 06:25:54 +0000 Manifest this update: Thu 23 Jul 2026 06:25:54 +0000 Manifest next update: Thu 30 Jul 2026 06:25:54 +0000 Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: FozirsJQvUfWSzY50hs+6Mun5eXsjQ3f4XnGGIAFmZ4=) 2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: bidCbRFTgDxHMdqmXAGHrBwGv+QM4m7c3Q2wG1dxBaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Jul 23 06:25:54 2026 GMT Not After : Jul 30 06:25:54 2026 GMT Subject: CN=6a61b3f2-ca1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:60:df:d5:f0:e3:34:91:bf:66:b5:89:a7:96: fb:b0:57:41:5d:e9:ce:55:b9:ee:d1:0d:c1:f1:b4: c4:76:dc:37:e5:52:a2:6e:1b:b3:03:86:de:20:8b: 43:f9:76:40:cd:a3:f2:73:65:1b:8c:d7:3b:27:eb: 4e:b1:10:de:37:6e:3f:d5:08:86:54:05:f7:d8:99: 95:b0:01:38:f7:d2:ae:3a:33:8e:5e:48:27:68:3a: f0:00:a1:d9:da:a3:af:e1:6d:01:b3:02:f4:ab:f4: df:72:4e:7c:32:10:96:fc:a5:0d:7f:41:31:6b:c8: cf:c9:c0:6f:0e:2c:8c:52:85:5a:4a:18:13:76:da: c6:23:18:05:d7:5c:f5:af:4b:5c:3b:a9:9a:5a:e4: a5:97:bd:49:8a:ab:69:6a:ee:f7:3f:bb:57:d4:10: da:01:52:d2:34:f7:37:60:9b:4b:0b:71:9c:0a:f8: 85:22:58:8e:8e:85:d8:a4:86:0f:fb:38:c0:02:88: a7:d0:ec:85:86:ae:f8:0b:df:ee:35:5f:5f:dc:11: 26:01:c9:82:81:1b:b7:02:5b:de:ae:c5:bb:3b:3d: fd:2a:b8:24:a9:41:4e:db:8b:9c:76:f0:ea:ca:00: ef:2b:dc:72:b6:3e:82:2f:36:3f:08:c8:30:ce:a1: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:E8:79:7E:0C:4B:49:BD:F0:8D:06:3D:FB:47:19:90:99:B0:49 X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:57:c2:7f:aa:be:d4:83:88:11:df:19:6c:a0:22:22:1d:54: 48:30:9c:1f:b8:7e:c8:51:d3:ff:ef:91:0a:91:ff:c0:ae:e0: 6e:ed:8f:3e:4d:ee:5a:01:4e:b6:54:b9:e0:82:34:b1:0e:c4: f6:46:04:ff:4e:2b:19:36:19:13:94:6d:1f:82:96:96:c6:53: ee:db:01:cb:82:2a:05:6b:81:56:bf:cd:d0:e8:9b:ae:cf:21: 7b:80:2d:11:42:2a:a3:9d:58:4c:4b:4a:69:be:7c:1c:67:b4: b1:42:20:2d:2d:a8:8b:75:89:5a:99:73:88:c8:2b:38:76:7f: 2f:00:ba:79:da:0b:81:70:6e:48:eb:f4:8f:3b:53:de:04:52: 3e:ec:1f:db:2a:43:ea:e0:ba:c1:71:e5:51:89:ed:c5:6b:b1: b8:80:b6:8e:fa:be:0c:a3:05:7a:a7:2b:c3:83:a2:2a:39:dc: aa:b7:6b:aa:eb:02:d2:38:a3:26:95:7a:d9:d3:21:c3:b6:a2: 18:77:98:fc:63:31:a5:97:1b:8b:d4:93:98:12:23:fb:3c:b1: d5:c9:75:28:66:3f:47:7d:73:63:7f:72:6a:df:03:33:36:66: 1d:0e:c1:0c:f6:31:f1:ef:f5:07:c9:9c:94:0d:fa:f9:c6:d9: 28:07:b7:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMEExMTAvBgNVBAUTKDA5OTUwNkVDOTg3QzhCMTk0MDU4NTNCMDhDNzE4QjVC QkU0QUM2OTIwHhcNMjYwNzIzMDYyNTU0WhcNMjYwNzMwMDYyNTU0WjAYMRYwFAYD VQQDEw02YTYxYjNmMi1jYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mDf1fDjNJG/ZrWJp5b7sFdBXenOVbnu0Q3B8bTEdtw35VKibhuzA4beIItD +XZAzaPyc2UbjNc7J+tOsRDeN24/1QiGVAX32JmVsAE499KuOjOOXkgnaDrwAKHZ 2qOv4W0BswL0q/Tfck58MhCW/KUNf0Exa8jPycBvDiyMUoVaShgTdtrGIxgF11z1 r0tcO6maWuSll71Jiqtpau73P7tX1BDaAVLSNPc3YJtLC3GcCviFIliOjoXYpIYP +zjAAoin0OyFhq74C9/uNV9f3BEmAcmCgRu3AlversW7Oz39KrgkqUFO24ucdvDq ygDvK9xytj6CLzY/CMgwzqEJQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQt6Hl+ DEtJvfCNBj37RxmQmbBJMB8GA1UdIwQYMBaAFAmVBuyYfIsZQFhTsIxxi1u+SsaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwQS9ENURCNkRGNjYw N0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4bEFXRk93akhHTFc3NUt4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwQS9ENURCNkRGNjYwN0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4 bEFXRk93akhHTFc3NUt4cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1fCf6q+1IOIEd8ZbKAiIh1USDCcH7h+yFHT/++RCpH/wK7gbu2PPk3uWgFO tlS54II0sQ7E9kYE/04rGTYZE5RtH4KWlsZT7tsBy4IqBWuBVr/N0Oibrs8he4At EUIqo51YTEtKab58HGe0sUIgLS2oi3WJWplziMgrOHZ/LwC6edoLgXBuSOv0jztT 3gRSPuwf2ypD6uC6wXHlUYntxWuxuIC2jvq+DKMFeqcrw4OiKjncqrdrqusC0jij JpV62dMhw7aiGHeY/GMxpZcbi9STmBIj+zyx1cl1KGY/R31zY39yat8DMzZmHQ7B DPYx8e/1B8mclA36+cbZKAe36Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:49:23 2026 by rpki-client