$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: sX7fsvxaZIh3IMb+RwGy5MaoQ32d8udA1xt1/lBQKqI= Subject key identifier: 04:01:E2:33:F8:67:D9:05:BD:4D:1A:D6:DE:5B:90:C0:76:9D:15:3C Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 35AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 358F Signing time: Tue 22 Sep 2026 14:37:11 +0000 Manifest this update: Tue 22 Sep 2026 14:37:11 +0000 Manifest next update: Tue 29 Sep 2026 14:37:11 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: GGWA1JpwPDDXIvTuJf2hnVwdBKHS1QDoQwFOTNoX/w0=) 2: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) 3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) 4: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Sep 22 14:37:11 2026 GMT Not After : Sep 29 14:37:11 2026 GMT Subject: CN=6ab29297-4c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:96:75:fb:b3:0a:e2:ca:d4:93:7c:2f:39: 2e:3d:42:5d:16:c3:0a:40:0f:47:d2:8a:d0:54:c8: 47:4d:be:45:1d:d0:45:cf:0e:db:49:7c:b0:cb:46: 14:a9:38:e5:1f:90:fc:67:b7:45:2a:c4:31:af:4e: b5:83:de:cd:07:b7:23:82:66:70:b1:91:69:ad:5b: bc:b7:d4:57:6b:37:4a:27:36:22:7c:b4:33:a4:fd: 15:20:fb:dd:6e:9d:65:e6:76:f3:72:df:2a:f1:05: 68:57:96:b6:14:c5:bd:c2:10:cd:8a:89:f0:c1:a0: 8c:cc:62:41:dc:ff:c1:3c:ce:84:fc:83:b7:53:68: e3:08:ef:e6:7d:db:fb:e5:4a:ae:c4:ed:86:b6:aa: 99:56:fc:af:fe:d9:21:16:bf:1d:1d:07:32:65:83: 2e:7e:80:61:48:cd:81:1d:9c:a6:41:44:3e:2f:9f: 23:f3:5a:f9:16:00:14:62:89:41:29:d7:9d:1d:04: 6e:c4:69:02:cd:6a:a4:c8:16:e0:a1:ab:45:af:61: 0b:8d:d3:60:0f:b0:ae:8e:ce:e9:44:99:a8:15:df: f1:44:2c:64:0a:2c:d9:1a:b2:d1:29:3c:53:bc:c4: 80:1b:90:2f:1b:9a:ae:fa:7a:0d:c4:1d:2b:5d:86: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:01:E2:33:F8:67:D9:05:BD:4D:1A:D6:DE:5B:90:C0:76:9D:15:3C X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9e:1f:b2:20:d7:32:21:92:1a:30:ee:c7:8e:f2:a2:92:c5: cd:bd:7b:d3:40:95:da:1b:c7:21:bd:c1:ca:f5:ac:24:41:b9: 6c:df:2e:af:87:60:40:21:62:cd:2a:b1:65:43:4f:e2:93:26: 05:bf:88:a5:de:48:26:ca:37:da:44:c5:b2:f0:0b:a3:bf:5c: a7:07:23:11:01:4b:38:d7:01:f7:20:d2:70:ea:ef:2e:2c:7a: c5:0a:d7:3c:12:a5:29:70:05:75:aa:56:1f:73:7e:75:09:31: c3:a7:8b:b6:43:6a:cf:f0:17:92:1f:f5:a2:c3:3a:ba:07:b6: 08:dd:52:ca:9a:4c:b2:5d:19:0a:9b:6f:56:fe:9c:72:7e:8f: 2b:25:2f:d6:1a:de:6f:24:e8:45:37:92:47:b7:4e:b6:15:1e: 23:12:d1:c0:9b:84:45:63:89:0d:d7:db:0b:2f:35:62:1c:dd: 42:0f:7f:18:1f:e8:b4:ad:64:d0:40:2f:59:2d:0a:ae:29:6f: 4d:ef:93:d5:41:5b:f0:70:cf:69:37:6d:02:1d:b0:8a:35:7a: 70:f2:bb:c3:b3:03:6e:41:7c:37:62:bd:1c:9f:68:71:77:9d: 14:73:f3:aa:8c:35:73:b3:9f:e7:e8:be:63:e1:8f:bf:f3:b0: 06:42:1d:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwOTIyMTQzNzExWhcNMjYwOTI5MTQzNzExWjAYMRYwFAYD VQQDEw02YWIyOTI5Ny00YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQeWdfuzCuLK1JN8LzkuPUJdFsMKQA9H0orQVMhHTb5FHdBFzw7bSXywy0YU qTjlH5D8Z7dFKsQxr061g97NB7cjgmZwsZFprVu8t9RXazdKJzYifLQzpP0VIPvd bp1l5nbzct8q8QVoV5a2FMW9whDNionwwaCMzGJB3P/BPM6E/IO3U2jjCO/mfdv7 5UquxO2GtqqZVvyv/tkhFr8dHQcyZYMufoBhSM2BHZymQUQ+L58j81r5FgAUYolB KdedHQRuxGkCzWqkyBbgoatFr2ELjdNgD7Cujs7pRJmoFd/xRCxkCizZGrLRKTxT vMSAG5AvG5qu+noNxB0rXYZpawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQB4jP4 Z9kFvU0a1t5bkMB2nRU8MB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeJ4fsiDXMiGSGjDux47yopLFzb1700CV2hvHIb3ByvWsJEG5bN8ur4dgQCFi zSqxZUNP4pMmBb+Ipd5IJso32kTFsvALo79cpwcjEQFLONcB9yDScOrvLix6xQrX PBKlKXAFdapWH3N+dQkxw6eLtkNqz/AXkh/1osM6uge2CN1SyppMsl0ZCptvVv6c cn6PKyUv1hrebyToRTeSR7dOthUeIxLRwJuERWOJDdfbCy81YhzdQg9/GB/otK1k 0EAvWS0KrilvTe+T1UFb8HDPaTdtAh2wijV6cPK7w7MDbkF8N2K9HJ9ocXedFHPz qow1c7Of5+i+Y+GPv/OwBkIdFA== -----END CERTIFICATE-----Generated at Wed Sep 23 12:30:20 2026 by rpki-client