$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json) Hash identifier: LzQxqA0wllELMcmYg8gxRMymL+/fJcCHSMPJ+i9nkCU= Subject key identifier: A2:36:4A:78:1D:86:EA:8C:B8:2E:10:28:88:CD:10:D4:D6:B9:53:70 Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 10:26:55 +0000 Manifest this update: Thu 23 Jul 2026 10:26:54 +0000 Manifest next update: Thu 30 Jul 2026 10:26:54 +0000 Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: KtZ2bB+hLB7+BcTb3QVKgbLNQsT66r8/7snAk5D9gsM=) 2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Validity Not Before: Jul 23 10:26:54 2026 GMT Not After : Jul 30 10:26:54 2026 GMT Subject: CN=6a61ec6f-2ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:38:ba:74:ab:3c:0d:1c:98:53:f0:45:46:81: 7e:39:97:c3:6f:48:86:21:d0:22:d7:70:4c:59:17: f5:bd:a5:0b:ed:bd:08:74:3a:be:3e:d0:87:c9:50: b7:21:e9:a1:bf:fd:2f:e4:5c:2d:0a:c0:98:47:db: b9:0e:8e:dd:de:e0:47:a3:8c:60:8a:60:4e:4b:b3: 50:13:f7:1e:9a:34:84:c8:dd:88:5d:fc:10:ed:46: 8d:5a:b2:7a:cc:18:a4:4e:8d:d3:24:f4:67:a6:a7: 1b:09:21:5e:9c:e9:89:f2:b8:88:77:c3:b2:db:00: 33:c1:d0:1e:3b:41:f4:d6:36:9c:10:e2:9b:7d:82: 7f:0e:c0:ba:28:63:1d:c3:7b:ab:ca:e9:b4:b5:03: 1b:28:a4:86:2a:0f:05:9b:42:64:29:ad:96:85:a8: 07:cd:92:40:9f:6b:4d:b6:f8:0b:81:77:ff:18:ca: 50:f2:7f:48:d0:7f:1e:32:ae:9f:25:7d:fc:24:c8: 1f:8a:c1:3c:f5:e3:2d:e3:35:29:ae:e0:aa:25:51: db:2d:bf:28:73:f4:ac:b8:d7:2f:d0:dd:2e:82:c6: 63:22:07:35:21:f3:3e:28:74:ec:83:97:fc:a6:82: 3c:6a:3d:ad:25:4b:d0:ef:22:05:43:89:a2:a0:5f: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:4A:78:1D:86:EA:8C:B8:2E:10:28:88:CD:10:D4:D6:B9:53:70 X509v3 Authority Key Identifier: keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:ee:34:d5:f5:28:f9:33:fb:c2:89:1b:15:4b:b7:70:ef: b1:56:50:6e:df:40:78:af:88:8c:64:93:0b:3a:47:ff:61:02: f1:90:47:0c:bf:2a:ba:55:18:08:7b:2b:e5:16:52:e4:3f:fe: 87:f0:21:c2:4f:cb:c4:28:f4:4e:c8:3a:07:1a:74:f3:9f:22: ca:22:21:4d:38:b3:5c:42:be:d4:76:67:d6:fe:ad:bd:81:68: da:8f:6a:d7:75:ee:b3:06:b8:36:fc:f3:51:a3:3d:13:49:2e: 33:03:54:18:c8:00:10:7c:c1:ea:37:09:dc:2a:e3:8e:cf:73: e3:ca:bf:b9:df:f4:59:2d:b3:e3:c7:cc:b4:be:8d:ee:ee:6f: 84:23:01:75:2d:7e:29:d1:de:7f:2e:6d:a0:51:9a:6a:7d:53: ac:83:c3:f5:24:18:fc:96:80:ac:a1:c0:be:c6:3e:da:ce:ab: bf:42:61:45:eb:23:65:3f:e3:11:0c:22:c9:9b:12:61:87:e3: 46:85:46:26:e5:a2:d0:ae:2e:aa:78:14:68:c2:a4:a3:fe:5b: 8d:47:35:c6:9c:69:e2:4b:a3:f9:cb:a7:41:e3:f7:46:06:67: 9b:fe:d7:a8:66:9b:51:fe:e3:6c:c7:3c:6b:21:ea:69:af:7d: df:19:22:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODAxOTExMC8GA1UEBRMoMEIzMENCQzczM0REQzQ2ODZCMzQ1NTRDRUU5NkUyN0Q2 MUVDOUMyRjAeFw0yNjA3MjMxMDI2NTRaFw0yNjA3MzAxMDI2NTRaMBgxFjAUBgNV BAMTDTZhNjFlYzZmLTJlZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCEOLp0qzwNHJhT8EVGgX45l8NvSIYh0CLXcExZF/W9pQvtvQh0Or4+0IfJULch 6aG//S/kXC0KwJhH27kOjt3e4EejjGCKYE5Ls1AT9x6aNITI3Yhd/BDtRo1asnrM GKROjdMk9GempxsJIV6c6YnyuIh3w7LbADPB0B47QfTWNpwQ4pt9gn8OwLooYx3D e6vK6bS1AxsopIYqDwWbQmQprZaFqAfNkkCfa022+AuBd/8YylDyf0jQfx4yrp8l ffwkyB+KwTz14y3jNSmu4KolUdstvyhz9Ky41y/Q3S6CxmMiBzUh8z4odOyDl/ym gjxqPa0lS9DvIgVDiaKgX069AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUojZKeB2G 6oy4LhAoiM0Q1Na5U3AwHwYDVR0jBBgwFoAUCzDLxzPdxGhrNFVM7pbifWHsnC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5L0ZGMjUzNTM4MjEx MzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdock5GVk03cGJpZldIc25D OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3pETHh6UGR4R2hyTkZWTTdwYmlmV0hzbkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MDE5L0ZGMjUzNTM4MjExMzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdo ck5GVk03cGJpZldIc25DOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADHO401fUo+TP7wokbFUu3cO+xVlBu30B4r4iMZJMLOkf/YQLxkEcMvyq6VRgI eyvlFlLkP/6H8CHCT8vEKPROyDoHGnTznyLKIiFNOLNcQr7UdmfW/q29gWjaj2rX de6zBrg2/PNRoz0TSS4zA1QYyAAQfMHqNwncKuOOz3Pjyr+53/RZLbPjx8y0vo3u 7m+EIwF1LX4p0d5/Lm2gUZpqfVOsg8P1JBj8loCsocC+xj7azqu/QmFF6yNlP+MR DCLJmxJhh+NGhUYm5aLQri6qeBRowqSj/luNRzXGnGniS6P5y6dB4/dGBmeb/teo ZptR/uNsxzxrIeppr33fGSJO -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:05 2026 by rpki-client