$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: aY/bwf0ut5EA1iZnx4yVWArnotuqvjtQn14jjyJXalQ= Subject key identifier: DA:76:9D:01:E3:49:0E:44:66:F1:EA:70:48:DF:CE:28:30:D8:8F:D1 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0649 Signing time: Fri 02 Oct 2026 22:57:45 +0000 Manifest this update: Fri 02 Oct 2026 22:57:44 +0000 Manifest next update: Fri 09 Oct 2026 22:57:44 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: 8HnBVTU1glzrFLEUc2EDIMNi7gZn4qKyryhvT4rT1lU=) 2: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=) 3: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Oct 2 22:57:44 2026 GMT Not After : Oct 9 22:57:44 2026 GMT Subject: CN=6ac036e9-b8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:86:b6:7b:8f:f8:1a:4a:fa:88:fe:4f:c1: 9f:b0:ba:dc:c6:38:36:ed:7c:05:a3:99:f1:cf:91: 48:98:c7:9e:e0:ac:ed:2b:7e:2e:b6:b2:3a:bd:a7: 93:89:ec:c6:7f:d3:86:d5:6b:b0:78:40:1f:5d:32: 73:0c:3a:bd:32:64:aa:89:00:59:a6:57:f5:04:3d: 16:fa:d4:41:2e:c1:0a:81:45:f2:5d:b8:c0:00:6e: 7a:07:1e:05:90:23:5c:9c:2d:15:fd:bb:f9:e2:bf: da:24:57:5e:b6:17:d7:91:d2:18:4e:82:ab:f1:25: f0:3b:f3:bb:92:04:1f:ed:70:8b:6a:03:9a:7e:fe: 00:e9:42:2b:03:54:15:ae:75:9e:4e:49:d8:cf:70: e0:97:9b:9f:1e:20:47:06:3a:f8:21:91:f8:03:ed: 6f:3e:ed:d8:e8:bf:2e:a3:17:40:7b:e0:52:80:1d: a4:19:43:28:ab:31:4c:5a:b2:47:41:5c:5d:98:4c: ea:11:37:78:7e:fb:ef:a3:11:33:5a:8d:d0:a3:23: e1:e4:db:4a:c0:9b:9d:db:c1:af:0c:a6:bf:05:82: f7:81:f1:cb:a8:a9:7a:2d:fe:2d:9a:81:33:61:83: f1:30:2e:49:7b:4a:2f:81:e4:5d:12:04:3c:b3:53: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:9D:01:E3:49:0E:44:66:F1:EA:70:48:DF:CE:28:30:D8:8F:D1 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:14:7d:0b:1d:76:db:c4:ec:c7:bc:84:09:89:a0:54:6a: d4:49:e1:2a:d8:f4:a5:92:b7:27:68:ec:8a:5c:4a:e1:ec:29: 9b:99:d1:41:43:6d:bd:c1:ae:06:a0:f5:7a:52:e2:25:ea:c9: 47:15:14:a2:53:2f:b9:cf:b0:8c:8b:f0:f4:b1:e2:e8:b4:59: 81:46:42:6e:88:ed:17:82:e0:f1:0b:f0:15:73:10:4a:ca:cc: 61:9e:0a:7a:1d:d3:cf:e5:2c:13:ec:9c:09:08:19:9f:b1:c4: a8:01:0a:8a:9a:b8:2c:7d:65:07:7f:34:ff:37:f4:32:24:31: d0:07:69:ef:71:8f:36:9a:17:b1:c5:6f:ec:5f:14:53:fb:60: be:ad:b4:af:2f:d8:44:53:37:70:17:62:4e:0c:c8:69:fa:74: 33:35:d2:18:10:f4:32:13:08:55:3c:fe:ff:ed:80:64:54:90: b4:29:08:c4:2f:99:a5:03:20:34:b0:fb:f4:25:b2:37:ec:e8: e3:4c:c4:b3:82:dd:b8:d0:71:0a:1f:28:ea:7f:20:8a:be:45: 5f:6c:b9:e8:5c:65:d9:8e:a8:52:5f:cf:7c:ee:7a:9e:86:8c: d9:35:bb:45:3d:fa:7d:0c:8c:aa:88:28:ea:39:be:d3:c2:7c: cc:10:01:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjYxMDAyMjI1NzQ0WhcNMjYxMDA5MjI1NzQ0WjAYMRYwFAYD VQQDEw02YWMwMzZlOS1iOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rWGtnuP+BpK+oj+T8GfsLrcxjg27XwFo5nxz5FImMee4KztK34utrI6vaeT iezGf9OG1WuweEAfXTJzDDq9MmSqiQBZplf1BD0W+tRBLsEKgUXyXbjAAG56Bx4F kCNcnC0V/bv54r/aJFdethfXkdIYToKr8SXwO/O7kgQf7XCLagOafv4A6UIrA1QV rnWeTknYz3Dgl5ufHiBHBjr4IZH4A+1vPu3Y6L8uoxdAe+BSgB2kGUMoqzFMWrJH QVxdmEzqETd4fvvvoxEzWo3QoyPh5NtKwJud28GvDKa/BYL3gfHLqKl6Lf4tmoEz YYPxMC5Je0ovgeRdEgQ8s1PBpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNp2nQHj SQ5EZvHqcEjfzigw2I/RMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADLQUfQsddtvE7Me8hAmJoFRq1EnhKtj0pZK3J2jsilxK4ewpm5nRQUNtvcGu BqD1elLiJerJRxUUolMvuc+wjIvw9LHi6LRZgUZCbojtF4Lg8QvwFXMQSsrMYZ4K eh3Tz+UsE+ycCQgZn7HEqAEKipq4LH1lB380/zf0MiQx0Adp73GPNpoXscVv7F8U U/tgvq20ry/YRFM3cBdiTgzIafp0MzXSGBD0MhMIVTz+/+2AZFSQtCkIxC+ZpQMg NLD79CWyN+zo40zEs4LduNBxCh8o6n8gir5FX2y56Fxl2Y6oUl/PfO56noaM2TW7 RT36fQyMqogo6jm+08J8zBABAg== -----END CERTIFICATE-----Generated at Sun Oct 4 01:23:57 2026 by rpki-client