$ rpki-client -vvvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: tRIZWNh8FQv4rUZBXTsVcau+jSeLjVbwgahEynVJ6Uc= Subject key identifier: 04:19:53:45:8E:8B:2B:A1:B7:62:CD:F6:F8:F2:7F:54:D3:FB:2E:4A Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0D49 Signing time: Tue 22 Sep 2026 17:58:58 +0000 Manifest this update: Tue 22 Sep 2026 17:58:57 +0000 Manifest next update: Tue 29 Sep 2026 17:58:57 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: xDraaconO4U2MMLYG+Dm4ZpzxAfncm5jCBH3ltTE4Nk=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Sep 22 17:58:57 2026 GMT Not After : Sep 29 17:58:57 2026 GMT Subject: CN=6ab2c1e2-954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:1b:58:ce:b0:cf:51:41:70:86:2d:2f:ab: eb:c9:42:4c:6f:fc:19:83:ec:5d:f5:6d:4d:2c:ca: 81:2c:c3:cd:30:80:2f:14:50:5e:fd:21:76:29:2d: d5:05:4c:53:c9:af:16:f2:7d:9f:f6:51:49:aa:1d: 9d:09:43:76:a6:fe:b0:f5:0a:ba:89:b5:4e:5e:34: fd:5e:20:b7:1c:80:50:5d:22:2d:be:9f:83:33:f4: b0:a7:f9:ba:3b:f1:59:c8:71:0f:f3:73:ae:eb:99: 90:2a:0a:11:98:fd:16:77:f0:e0:e0:2e:ff:71:fc: 78:95:cd:7c:2f:b3:ed:17:01:f6:bc:56:80:f9:38: d5:9c:e3:66:7d:8d:4a:48:5b:41:35:a4:04:63:2a: 64:11:27:be:df:ce:36:23:0a:09:69:29:7e:1a:07: 49:3f:63:1e:fa:fc:2e:be:45:e6:fe:23:0f:a2:fa: d1:6d:d1:38:88:fe:25:da:f4:10:d0:f5:5c:ee:57: 7e:ce:61:cc:c9:18:fe:c5:a6:c8:08:3f:97:af:94: e4:41:8a:2f:f0:ba:99:92:c3:2d:47:e7:c6:87:63: 04:2e:e4:06:34:d4:0d:7d:2a:9f:ff:a9:86:e2:1b: e0:59:70:d9:40:b7:11:61:d1:c2:ce:9b:c6:56:b7: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:53:45:8E:8B:2B:A1:B7:62:CD:F6:F8:F2:7F:54:D3:FB:2E:4A X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:74:2b:44:9d:f8:85:a7:46:6b:0a:f8:1b:aa:44:83:2e:c0: e8:20:70:3a:e0:5d:1b:1d:99:66:9c:cf:45:c1:ff:ee:40:d8: 07:f5:06:b6:e8:47:c7:cc:96:3b:56:38:3a:7a:50:c6:bc:35: 69:6d:c4:55:2f:91:88:96:d7:f9:9d:8f:1b:1d:d8:4c:bf:98: ce:01:f1:aa:d7:0b:60:3b:fd:20:5a:8d:e9:0b:87:54:51:cd: 3b:1e:a4:16:4e:f8:fa:0c:5b:f6:66:9a:9a:f7:b7:bc:4e:d5: 6f:3f:b3:58:52:a0:f4:59:47:05:62:89:bc:45:52:a9:ee:c5: d4:70:ad:b7:48:3b:6a:34:2d:33:98:a1:ae:6a:38:d5:43:c1: 98:59:63:56:fa:54:6b:c4:b8:d4:fe:74:17:91:89:35:0c:c8: 24:9f:a5:b3:e5:19:97:0c:94:04:60:92:4f:6d:84:ba:3a:ff: 7d:78:0f:b9:f7:db:fc:42:66:25:de:9b:6d:3f:6e:53:f2:fd: b4:d8:e8:a2:a0:14:bf:50:2f:e7:39:a9:f0:bc:e2:c0:e2:9f: 4f:70:a0:69:ec:12:63:29:af:97:7b:b5:ca:e2:0d:c9:d9:b5: ee:c4:26:ad:28:f3:cf:32:0c:84:9c:ae:28:44:dd:bf:52:18: ec:9a:1e:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjYwOTIyMTc1ODU3WhcNMjYwOTI5MTc1ODU3WjAYMRYwFAYD VQQDEw02YWIyYzFlMi05NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtYbWM6wz1FBcIYtL6vryUJMb/wZg+xd9W1NLMqBLMPNMIAvFFBe/SF2KS3V BUxTya8W8n2f9lFJqh2dCUN2pv6w9Qq6ibVOXjT9XiC3HIBQXSItvp+DM/Swp/m6 O/FZyHEP83Ou65mQKgoRmP0Wd/Dg4C7/cfx4lc18L7PtFwH2vFaA+TjVnONmfY1K SFtBNaQEYypkESe+3842IwoJaSl+GgdJP2Me+vwuvkXm/iMPovrRbdE4iP4l2vQQ 0PVc7ld+zmHMyRj+xabICD+Xr5TkQYov8LqZksMtR+fGh2MELuQGNNQNfSqf/6mG 4hvgWXDZQLcRYdHCzpvGVre5JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQZU0WO iyuht2LN9vjyf1TT+y5KMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb3QrRJ34hadGawr4G6pEgy7A6CBwOuBdGx2ZZpzPRcH/7kDYB/UGtuhHx8yW O1Y4OnpQxrw1aW3EVS+RiJbX+Z2PGx3YTL+YzgHxqtcLYDv9IFqN6QuHVFHNOx6k Fk74+gxb9maamve3vE7Vbz+zWFKg9FlHBWKJvEVSqe7F1HCtt0g7ajQtM5ihrmo4 1UPBmFljVvpUa8S41P50F5GJNQzIJJ+ls+UZlwyUBGCST22Eujr/fXgPuffb/EJm Jd6bbT9uU/L9tNjooqAUv1Av5zmp8LziwOKfT3CgaewSYymvl3u1yuINydm17sQm rSjzzzIMhJyuKETdv1IY7Joe2Q== -----END CERTIFICATE-----Generated at Wed Sep 23 00:26:44 2026 by rpki-client