$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft File: DrTZlhk2pChD3fXs8MjF2eSwD3w.mft (raw, json) Hash identifier: 0Rae+pkZbG1fcLOCit3ouwDoU1woQsDEfmucFbTE/EU= Subject key identifier: 72:D9:5F:6F:BE:E0:4E:D1:BB:BF:F6:88:6C:A7:3F:5B:0B:70:4E:C8 Authority key identifier: 0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C Certificate issuer: /CN=A9119D80/serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft Manifest number: 0F Signing time: Sat 19 Sep 2026 09:08:48 +0000 Manifest this update: Sat 19 Sep 2026 09:08:47 +0000 Manifest next update: Sat 26 Sep 2026 09:08:47 +0000 Files and hashes: 1: DrTZlhk2pChD3fXs8MjF2eSwD3w.crl (hash: /vTFlvgoPRXlyeXDLAsrVBvNhSq1pCZ2nmGV62Ecxp4=) 2: 7F394E8EA03B11F1B3E7CFF43811F970.roa (hash: 9gozVmZi4OG/VKvp0JupB8Q4GsNsb+cTt45Qb53BBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D80, serialNumber=0EB4D9961936A42843DDF5ECF0C8C5D9E4B00F7C Validity Not Before: Sep 19 09:08:47 2026 GMT Not After : Sep 26 09:08:47 2026 GMT Subject: CN=6aae511f-fe59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:c0:36:48:4d:2d:db:c1:f0:92:51:c1:cc: f6:8e:78:bc:47:55:31:aa:ee:fc:08:c5:66:e1:d2: c2:fe:8f:be:dd:af:d3:2d:af:ff:cc:bc:31:29:b5: 11:2c:ca:c9:12:bf:c5:b2:80:2b:9a:ce:6f:be:9e: a4:83:f9:ee:34:71:0e:48:07:44:24:f6:12:f2:47: 89:f0:1e:18:0a:74:0d:76:dc:28:a4:e4:6e:ab:61: 1d:14:cc:75:ce:4d:75:b8:ac:35:1f:87:a6:e1:7e: f9:69:0f:01:1e:c3:27:c3:73:4e:c5:23:5c:23:ea: 95:eb:43:17:c0:1f:d5:e7:8a:22:ef:ff:16:c7:07: 59:c6:62:85:ae:79:dc:c5:05:e3:dd:00:98:8d:d2: fe:d1:d3:76:0f:da:f2:06:66:29:aa:d5:9d:58:3d: 22:8c:8b:d8:d6:35:48:c5:25:07:8d:ad:3e:ef:07: 89:b6:9a:91:70:3d:c6:33:ad:38:32:c0:a9:6e:d2: a6:5f:76:9f:e5:8c:f9:ac:99:db:f7:4c:a3:bb:a2: d0:3c:4e:88:7a:3c:e5:e8:4d:f6:0d:e4:b5:fa:55: 61:22:51:d9:c8:af:d9:e7:b1:97:e6:30:58:97:78: e6:36:83:c5:8b:83:d9:2a:92:60:32:db:57:7d:9e: d1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:5F:6F:BE:E0:4E:D1:BB:BF:F6:88:6C:A7:3F:5B:0B:70:4E:C8 X509v3 Authority Key Identifier: keyid:0E:B4:D9:96:19:36:A4:28:43:DD:F5:EC:F0:C8:C5:D9:E4:B0:0F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DrTZlhk2pChD3fXs8MjF2eSwD3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D80/5C4F9B7CA03A11F18901E4F93711F970/DrTZlhk2pChD3fXs8MjF2eSwD3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d0:fb:6b:b8:03:14:5a:3e:55:65:71:04:37:6e:5e:4d:e3: f5:d6:4f:96:3d:26:fa:c0:97:d2:ef:5d:7a:2e:d1:58:8f:41: 48:dc:1f:b3:d4:44:b9:e6:1c:c1:dd:47:63:43:41:af:68:14: 0e:c5:6d:a1:1b:57:ab:82:0f:55:e8:c7:6e:bc:78:ff:5e:ed: 09:69:04:81:7b:db:c7:c8:73:63:f5:59:ae:fd:3e:02:54:df: e3:bc:b6:06:b4:53:f1:35:33:8c:34:41:b1:e5:b0:d6:57:e4: 96:ef:ec:0e:78:67:73:c4:a5:53:52:43:f5:65:10:ff:d3:68: d2:82:d3:90:e2:0b:f3:a8:c0:41:38:a3:85:8c:e1:dd:49:43: de:40:21:bf:46:b4:1f:02:17:c0:0e:97:be:08:00:f5:18:b4: ad:cd:70:a1:3d:35:01:15:7e:b3:03:da:b7:58:03:09:c0:aa: c8:a8:bc:37:09:23:0d:7c:ec:64:47:3d:3f:1c:00:53:05:11: 54:5d:ae:6b:3a:df:be:e5:d7:c7:c7:d5:b7:c9:d6:6d:d7:ff: 2b:bc:85:83:7d:5c:1a:e5:63:96:6a:73:f4:4a:6a:ae:8a:87: 60:4e:80:d1:ac:d3:ba:10:15:55:f2:cb:a3:d3:e4:60:6b:56: bd:52:45:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUQ4MDExMC8GA1UEBRMoMEVCNEQ5OTYxOTM2QTQyODQzRERGNUVDRjBDOEM1RDlF NEIwMEY3QzAeFw0yNjA5MTkwOTA4NDdaFw0yNjA5MjYwOTA4NDdaMBgxFjAUBgNV BAMTDTZhYWU1MTFmLWZlNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjnMA2SE0t28HwklHBzPaOeLxHVTGq7vwIxWbh0sL+j77dr9Mtr//MvDEptREs yskSv8WygCuazm++nqSD+e40cQ5IB0Qk9hLyR4nwHhgKdA123Cik5G6rYR0UzHXO TXW4rDUfh6bhfvlpDwEewyfDc07FI1wj6pXrQxfAH9XniiLv/xbHB1nGYoWuedzF BePdAJiN0v7R03YP2vIGZimq1Z1YPSKMi9jWNUjFJQeNrT7vB4m2mpFwPcYzrTgy wKlu0qZfdp/ljPmsmdv3TKO7otA8Toh6POXoTfYN5LX6VWEiUdnIr9nnsZfmMFiX eOY2g8WLg9kqkmAy21d9ntEnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUctlfb77g TtG7v/aIbKc/WwtwTsgwHwYDVR0jBBgwFoAUDrTZlhk2pChD3fXs8MjF2eSwD3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDgwLzVDNEY5QjdDQTAz QTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENoRDNmWHM4TWpGMmVTd0Qz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHJUWmxoazJwQ2hEM2ZYczhNakYyZVN3RDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 RDgwLzVDNEY5QjdDQTAzQTExRjE4OTAxRTRGOTM3MTFGOTcwL0RyVFpsaGsycENo RDNmWHM4TWpGMmVTd0Qzdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB70PtruAMUWj5VZXEEN25eTeP11k+WPSb6wJfS7116LtFYj0FI3B+z1ES55hzB 3UdjQ0GvaBQOxW2hG1ergg9V6MduvHj/Xu0JaQSBe9vHyHNj9Vmu/T4CVN/jvLYG tFPxNTOMNEGx5bDWV+SW7+wOeGdzxKVTUkP1ZRD/02jSgtOQ4gvzqMBBOKOFjOHd SUPeQCG/RrQfAhfADpe+CAD1GLStzXChPTUBFX6zA9q3WAMJwKrIqLw3CSMNfOxk Rz0/HABTBRFUXa5rOt++5dfHx9W3ydZt1/8rvIWDfVwa5WOWanP0SmquiodgToDR rNO6EBVV8suj0+Rga1a9UkVn -----END CERTIFICATE-----Generated at Mon Sep 21 10:52:38 2026 by rpki-client