$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json) Hash identifier: BQEnxzSn1B1By+C2Vik24oNdGZqeacu5AyYHGZq70gI= Subject key identifier: 96:C1:67:4A:4F:20:5A:C6:AE:2E:3A:87:93:24:89:50:7E:A8:F2:DD Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft Manifest number: 07 Signing time: Wed 25 Mar 2026 08:21:37 +0000 Manifest this update: Wed 25 Mar 2026 08:21:36 +0000 Manifest next update: Wed 01 Apr 2026 08:21:36 +0000 Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: wI4sOmemKCjzp2qkQJl86mM9NOmLeAuipX8nHd9uuIM=) 2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 6zoeGcCtP6FTiaINUWBwyZ7nVaRrhDbGgSD5PdYUKXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Validity Not Before: Mar 25 08:21:36 2026 GMT Not After : Apr 1 08:21:36 2026 GMT Subject: CN=69c39b11-2902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:1f:0e:7a:2a:ec:1f:fe:11:af:9b:71:b2: a0:6b:51:b9:83:46:99:25:c9:69:bd:7f:83:45:78: 60:84:76:d8:63:a3:24:58:3d:23:81:79:d3:3f:33: 60:01:dc:a2:25:14:0c:27:b9:6d:c4:39:23:55:65: 82:7c:9f:8e:2a:07:4a:e0:6b:a9:13:b9:61:d2:53: 0f:68:f2:ab:68:02:e4:9a:ab:c6:fb:ca:be:96:2b: 0e:2a:63:b3:e3:92:86:51:6b:7e:83:a8:12:3a:d4: eb:7d:ff:0e:36:9f:c2:4e:8c:e4:fc:d8:d9:86:0c: fe:99:78:2d:34:57:2f:cb:dc:97:b0:b7:3c:33:b9: 5d:a3:0a:d9:21:b1:6d:e6:38:80:90:09:b1:63:6f: fa:bd:6a:0b:ea:ba:84:10:0a:c5:71:a2:8d:55:34: ee:75:7c:ef:64:4e:1f:21:18:2c:3c:7c:eb:d4:61: 81:98:c1:6f:30:6f:11:9d:da:9d:0c:b1:24:57:17: a1:ba:a9:48:6f:e3:ba:7c:49:d0:a0:04:8b:6c:e2: 0c:11:99:2d:5f:88:5b:41:81:b4:0b:76:c5:f1:6d: e1:e1:01:53:22:a5:76:48:58:ce:f3:aa:a2:d0:31: 0f:4b:61:ab:d7:78:fc:d2:0f:52:c0:82:74:09:dd: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C1:67:4A:4F:20:5A:C6:AE:2E:3A:87:93:24:89:50:7E:A8:F2:DD X509v3 Authority Key Identifier: keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ec:a3:39:58:6d:b2:2f:6d:2f:6b:e6:e9:fc:63:ab:3e:6e: 85:e2:09:41:1c:c6:c7:c0:61:8f:bd:06:33:e5:65:fc:59:42: 0a:b6:5d:31:30:cf:cd:d6:53:5a:30:15:96:62:8e:7e:0f:47: f6:31:66:5f:8b:06:d9:84:5e:ca:c2:7c:26:1a:10:ef:39:d5: 8d:e7:73:e3:e0:86:fd:e3:07:89:d1:62:3c:57:29:c8:1f:cb: a0:4f:90:27:c1:8e:6e:1a:49:15:8e:eb:fb:bb:07:48:9b:a7: 1d:62:df:d2:b8:cb:c9:f2:7e:d2:3e:7f:cf:e6:a7:11:1f:be: b0:08:ed:08:38:31:6f:b2:ba:a4:25:3a:e4:2e:45:4e:f2:d4: a3:4f:b8:a1:40:2e:ae:5e:02:a8:49:9a:fc:3a:50:98:7a:09: 4b:cf:63:e2:d9:e3:60:f1:c3:80:63:ac:f1:1a:16:e5:97:82: a2:a8:12:42:73:00:f2:7e:46:ba:6c:26:9f:db:03:6e:cb:68: c6:ab:cf:14:37:7a:c8:9a:c5:2d:e3:7f:d8:ed:a6:99:32:44: 54:5e:5a:3a:d4:3d:31:3e:b6:92:e2:ab:c5:96:b2:6f:87:b9: 83:09:03:9e:8f:66:c9:b1:31:9b:40:f3:8a:8e:47:5a:a0:8c: c6:a1:65:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODAxOTExMC8GA1UEBRMoMEIzMENCQzczM0REQzQ2ODZCMzQ1NTRDRUU5NkUyN0Q2 MUVDOUMyRjAeFw0yNjAzMjUwODIxMzZaFw0yNjA0MDEwODIxMzZaMBgxFjAUBgNV BAMTDTY5YzM5YjExLTI5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkyB8OeirsH/4Rr5txsqBrUbmDRpklyWm9f4NFeGCEdthjoyRYPSOBedM/M2AB 3KIlFAwnuW3EOSNVZYJ8n44qB0rga6kTuWHSUw9o8qtoAuSaq8b7yr6WKw4qY7Pj koZRa36DqBI61Ot9/w42n8JOjOT82NmGDP6ZeC00Vy/L3JewtzwzuV2jCtkhsW3m OICQCbFjb/q9agvquoQQCsVxoo1VNO51fO9kTh8hGCw8fOvUYYGYwW8wbxGd2p0M sSRXF6G6qUhv47p8SdCgBIts4gwRmS1fiFtBgbQLdsXxbeHhAVMipXZIWM7zqqLQ MQ9LYavXePzSD1LAgnQJ3T5ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlsFnSk8g WsauLjqHkySJUH6o8t0wHwYDVR0jBBgwFoAUCzDLxzPdxGhrNFVM7pbifWHsnC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5L0ZGMjUzNTM4MjEx MzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdock5GVk03cGJpZldIc25D OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3pETHh6UGR4R2hyTkZWTTdwYmlmV0hzbkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MDE5L0ZGMjUzNTM4MjExMzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdo ck5GVk03cGJpZldIc25DOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBe7KM5WG2yL20va+bp/GOrPm6F4glBHMbHwGGPvQYz5WX8WUIKtl0xMM/N1lNa MBWWYo5+D0f2MWZfiwbZhF7KwnwmGhDvOdWN53Pj4Ib94weJ0WI8VynIH8ugT5An wY5uGkkVjuv7uwdIm6cdYt/SuMvJ8n7SPn/P5qcRH76wCO0IODFvsrqkJTrkLkVO 8tSjT7ihQC6uXgKoSZr8OlCYeglLz2Pi2eNg8cOAY6zxGhbll4KiqBJCcwDyfka6 bCaf2wNuy2jGq88UN3rImsUt43/Y7aaZMkRUXlo61D0xPraS4qvFlrJvh7mDCQOe j2bJsTGbQPOKjkdaoIzGoWW6 -----END CERTIFICATE-----Generated at Thu Mar 26 15:34:22 2026 by rpki-client