$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json) Hash identifier: 8O4yHt72hVQDBdWxhtsb4e586GbO+3VkYim0UzirXIM= Subject key identifier: 03:B5:E0:88:9B:E4:70:46:D9:1D:82:C4:D8:0D:EB:01:60:3D:31:B6 Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft Manifest number: 1F Signing time: Mon 11 May 2026 09:04:14 +0000 Manifest this update: Mon 11 May 2026 09:04:14 +0000 Manifest next update: Mon 18 May 2026 09:04:14 +0000 Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: FhhJ7/mFfhCZ6zmyLhS0cmSxsYR9KPmY72XC2lQLIPI=) 2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 6zoeGcCtP6FTiaINUWBwyZ7nVaRrhDbGgSD5PdYUKXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F Validity Not Before: May 11 09:04:14 2026 GMT Not After : May 18 09:04:14 2026 GMT Subject: CN=6a019b8e-6d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:36:96:c4:87:b2:9c:34:f2:5e:9e:68:02:4b: e0:1b:79:15:a5:b7:6f:42:3a:a8:a1:48:60:a5:8c: c9:ba:08:4c:7c:d4:8a:c5:0a:24:ca:55:f1:52:ef: 62:14:f3:2d:a5:98:0c:07:4c:68:8c:46:f3:5b:92: 30:02:83:e1:b1:a5:6f:5d:d9:8c:2d:c9:32:0a:7b: f4:62:6b:c1:64:1b:ad:7e:35:cc:c6:eb:f8:14:be: c5:98:d0:62:4a:4f:ef:99:b6:12:25:26:a8:ae:ff: 81:13:77:bc:c6:b0:46:72:1f:6f:ad:21:b9:05:77: f3:0f:dd:c9:25:b7:3f:b1:5e:55:d2:2d:42:c2:1a: 2b:7f:29:d1:c5:21:e3:49:3d:36:0b:78:19:1f:1a: cb:69:49:dc:b2:96:ed:35:9e:97:1c:a2:cb:45:e3: 07:03:8e:d6:53:c4:93:20:9e:1c:0a:bf:aa:7b:4c: ad:8d:ab:1b:83:8e:b7:c9:7f:5f:e4:aa:64:59:09: 5e:c2:5b:56:d3:bf:bd:e3:2b:06:52:7b:33:f1:4a: f0:a3:70:54:4b:30:b5:25:f3:e6:6a:ed:28:76:fd: 91:78:6f:cf:93:c8:15:99:0a:fc:7a:9c:35:53:18: 15:9b:d4:d7:ea:e6:fe:c8:35:d8:fe:ea:91:fa:49: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B5:E0:88:9B:E4:70:46:D9:1D:82:C4:D8:0D:EB:01:60:3D:31:B6 X509v3 Authority Key Identifier: keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:ac:38:87:21:e2:79:51:f8:46:b5:08:cf:4a:e8:63:6d: 28:9f:f5:51:5c:c5:02:d6:8c:2f:dd:89:aa:24:c5:34:09:31: 90:c0:53:ba:fb:8d:5b:24:a2:f4:6b:20:36:24:f9:33:74:ce: 0b:ce:ae:e1:52:bc:7c:ec:cd:c1:86:6d:22:68:7e:8b:8f:43: ed:17:3b:25:e0:d2:18:c5:86:9f:a4:ff:91:63:69:77:bd:f4: db:d1:9d:9b:99:61:c3:f1:df:8f:96:50:98:95:96:f7:58:f8: 73:9c:1d:86:66:59:da:5d:67:d3:23:05:e5:a8:c8:e7:80:5a: 2c:9b:ba:be:78:6c:49:80:3e:7d:48:dd:30:d9:51:cb:4a:bc: ed:10:78:29:12:c3:25:b4:06:84:bd:f2:b1:d0:bf:dc:34:07: 34:ed:cd:d3:92:53:1e:48:e2:cb:c2:04:bf:2f:40:28:27:af: 3f:94:4a:db:73:4a:8b:0c:8e:36:a4:75:f5:0f:00:2a:76:f2: ee:ca:aa:04:4b:05:12:9d:2f:23:ad:75:42:d7:91:51:0e:02: b5:be:bb:69:a0:0a:8e:26:15:0d:4b:08:f6:b8:91:81:fa:c1: ab:a1:b7:ba:da:00:a4:7d:59:6a:19:16:ac:11:b6:83:a1:54: f8:ee:0f:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODAxOTExMC8GA1UEBRMoMEIzMENCQzczM0REQzQ2ODZCMzQ1NTRDRUU5NkUyN0Q2 MUVDOUMyRjAeFw0yNjA1MTEwOTA0MTRaFw0yNjA1MTgwOTA0MTRaMBgxFjAUBgNV BAMTDTZhMDE5YjhlLTZkODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtNpbEh7KcNPJenmgCS+AbeRWlt29COqihSGCljMm6CEx81IrFCiTKVfFS72IU 8y2lmAwHTGiMRvNbkjACg+GxpW9d2YwtyTIKe/Ria8FkG61+NczG6/gUvsWY0GJK T++ZthIlJqiu/4ETd7zGsEZyH2+tIbkFd/MP3ckltz+xXlXSLULCGit/KdHFIeNJ PTYLeBkfGstpSdyylu01npccostF4wcDjtZTxJMgnhwKv6p7TK2NqxuDjrfJf1/k qmRZCV7CW1bTv73jKwZSezPxSvCjcFRLMLUl8+Zq7Sh2/ZF4b8+TyBWZCvx6nDVT GBWb1Nfq5v7INdj+6pH6SR6lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA7XgiJvk cEbZHYLE2A3rAWA9MbYwHwYDVR0jBBgwFoAUCzDLxzPdxGhrNFVM7pbifWHsnC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5L0ZGMjUzNTM4MjEx MzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdock5GVk03cGJpZldIc25D OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3pETHh6UGR4R2hyTkZWTTdwYmlmV0hzbkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MDE5L0ZGMjUzNTM4MjExMzExRjFBODU5MDY4QjI1M0Q4QzY3L0N6REx4elBkeEdo ck5GVk03cGJpZldIc25DOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAL0Kw4hyHieVH4RrUIz0roY20on/VRXMUC1owv3YmqJMU0CTGQwFO6+41bJKL0 ayA2JPkzdM4Lzq7hUrx87M3Bhm0iaH6Lj0PtFzsl4NIYxYafpP+RY2l3vfTb0Z2b mWHD8d+PllCYlZb3WPhznB2GZlnaXWfTIwXlqMjngFosm7q+eGxJgD59SN0w2VHL SrztEHgpEsMltAaEvfKx0L/cNAc07c3TklMeSOLLwgS/L0AoJ68/lErbc0qLDI42 pHX1DwAqdvLuyqoESwUSnS8jrXVC15FRDgK1vrtpoAqOJhUNSwj2uJGB+sGrobe6 2gCkfVlqGRasEbaDoVT47g/h -----END CERTIFICATE-----Generated at Wed May 13 10:38:44 2026 by rpki-client