$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft File: tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft (raw, json) Hash identifier: HXHROgVWiDl0vxaH9Gw2pYo1+ieQSxDlGX1OoiHj9pg= Subject key identifier: 70:CF:9A:FA:4E:55:61:0B:25:83:36:E1:E9:11:35:0E:69:B3:24:CA Authority key identifier: B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 Certificate issuer: /CN=A9143409/serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft Manifest number: 14 Signing time: Mon 21 Sep 2026 09:02:28 +0000 Manifest this update: Mon 21 Sep 2026 09:02:28 +0000 Manifest next update: Mon 28 Sep 2026 09:02:28 +0000 Files and hashes: 1: tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl (hash: vVs0K0uBUk/oo9OYkNUG42J15K0dtEbuL9VuAc1LGQ4=) 2: A7DB83269B7B11F1BC8E14144211F970.roa (hash: o6NEa576QOWu7wSaHMbprU6QbrwmUJcq9Rt1I8uW5/w=) 3: A6B52E529B7B11F1B6BF14144211F970.roa (hash: 4yziqtkYx1WlGKb88IiPWTlvQixYnW84rQvQyIqln4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143409, serialNumber=B73CCC0C2F67610A509AF7B62B541BE5B51BD520 Validity Not Before: Sep 21 09:02:28 2026 GMT Not After : Sep 28 09:02:28 2026 GMT Subject: CN=6ab0f2a4-f9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:7a:95:71:a1:9d:4c:70:33:1d:1a:9c:c8: 48:28:2e:2c:f7:d3:c4:e3:3a:0a:18:b7:61:e6:ad: 00:2e:67:dd:4d:ef:4c:41:0c:d1:44:28:62:66:41: be:29:fd:df:20:d7:92:f9:31:dc:47:6f:77:39:c4: 5e:03:57:b4:c5:dc:b4:f7:9f:2f:85:83:be:05:d4: 8e:9f:62:24:79:7b:cb:e9:af:9c:00:a1:8f:78:60: 8d:5d:47:4d:99:9f:e9:af:97:67:21:1b:91:11:d5: 93:28:6a:81:43:45:be:a7:d6:82:78:5b:23:d4:21: 90:17:66:60:32:f7:cb:1b:0d:7b:e5:a1:86:f2:3b: 2b:6f:fa:b7:83:c8:f5:e7:df:a0:d3:d6:be:64:09: 18:03:2b:28:90:bf:b9:78:a4:2a:1d:48:91:00:62: 9e:ef:70:5f:5f:fa:02:f3:57:f7:9c:e5:38:6d:dc: b1:04:a6:9e:ab:4c:80:c6:e4:e5:fe:d6:5e:ef:41: 88:0c:91:cd:f4:ef:67:e6:ad:93:6b:f1:b2:0f:a2: ff:3f:09:71:8b:6b:1a:d7:35:c2:e6:b0:0a:1a:bd: 81:8e:1a:ad:ad:d2:7d:05:80:3c:c5:2d:9f:08:5f: b8:47:1a:d7:d8:57:95:cd:a8:86:3c:72:d9:cc:4e: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:9A:FA:4E:55:61:0B:25:83:36:E1:E9:11:35:0E:69:B3:24:CA X509v3 Authority Key Identifier: keyid:B7:3C:CC:0C:2F:67:61:0A:50:9A:F7:B6:2B:54:1B:E5:B5:1B:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzzMDC9nYQpQmve2K1Qb5bUb1SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143409/98F628D49B6C11F1A822A9B53C11F970/tzzMDC9nYQpQmve2K1Qb5bUb1SA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3d:15:78:ba:1c:f4:60:c3:7f:65:39:30:7d:d9:88:0e:bd: 51:1c:1e:2a:a9:a2:2c:dc:00:b0:ab:00:d0:d1:5f:e1:f7:ce: d0:dc:cf:0e:05:3a:dc:65:ff:93:5c:33:09:f3:93:65:c0:13: 5a:f8:41:f3:54:00:0e:39:c7:ad:94:3b:4c:7e:e8:c7:c8:1a: 17:36:e7:ab:9c:66:ff:72:13:2b:b8:6a:a4:cc:e4:a3:03:26: 71:d2:c0:cf:76:14:ff:b2:b1:14:d2:85:b2:e0:ed:c1:92:37: df:6b:ff:b1:a6:b2:b3:fc:bc:2b:b7:ee:91:50:40:42:4a:98: fa:3f:0d:dd:fe:95:86:18:19:fb:59:ff:d9:fe:ef:bc:4d:6d: e5:1f:34:21:ce:7e:be:50:14:53:23:e4:d0:7b:8a:6d:a3:2b: 11:0f:93:5d:8f:10:af:3f:c8:57:e6:77:7e:6d:3f:45:9a:9e: 8f:9e:83:63:73:f4:29:0d:51:28:7a:d1:eb:44:ed:93:0d:dc: c8:21:89:d4:fb:0d:7c:13:9d:39:d5:78:d3:93:d3:20:8d:ba: 7b:a7:f7:9f:66:b0:83:1e:39:b8:1a:e9:1a:cb:5f:f2:f6:5d: c7:d1:dd:08:5e:fa:0c:8e:00:5d:82:42:c9:6f:fc:41:ba:07: cc:d9:78:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzQwOTExMC8GA1UEBRMoQjczQ0NDMEMyRjY3NjEwQTUwOUFGN0I2MkI1NDFCRTVC NTFCRDUyMDAeFw0yNjA5MjEwOTAyMjhaFw0yNjA5MjgwOTAyMjhaMBgxFjAUBgNV BAMTDTZhYjBmMmE0LWY5ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8B3qVcaGdTHAzHRqcyEgoLiz308TjOgoYt2HmrQAuZ91N70xBDNFEKGJmQb4p /d8g15L5MdxHb3c5xF4DV7TF3LT3ny+Fg74F1I6fYiR5e8vpr5wAoY94YI1dR02Z n+mvl2chG5ER1ZMoaoFDRb6n1oJ4WyPUIZAXZmAy98sbDXvloYbyOytv+reDyPXn 36DT1r5kCRgDKyiQv7l4pCodSJEAYp7vcF9f+gLzV/ec5Tht3LEEpp6rTIDG5OX+ 1l7vQYgMkc3072fmrZNr8bIPov8/CXGLaxrXNcLmsAoavYGOGq2t0n0FgDzFLZ8I X7hHGtfYV5XNqIY8ctnMTs0dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcM+a+k5V YQslgzbh6RE1DmmzJMowHwYDVR0jBBgwFoAUtzzMDC9nYQpQmve2K1Qb5bUb1SAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNDA5Lzk4RjYyOEQ0OUI2 QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFwUW12ZTJLMVFiNWJVYjFT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHp6TURDOW5ZUXBRbXZlMksxUWI1YlViMVNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz NDA5Lzk4RjYyOEQ0OUI2QzExRjFBODIyQTlCNTNDMTFGOTcwL3R6ek1EQzluWVFw UW12ZTJLMVFiNWJVYjFTQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdPRV4uhz0YMN/ZTkwfdmIDr1RHB4qqaIs3ACwqwDQ0V/h987Q3M8OBTrcZf+T XDMJ85NlwBNa+EHzVAAOOcetlDtMfujHyBoXNuernGb/chMruGqkzOSjAyZx0sDP dhT/srEU0oWy4O3Bkjffa/+xprKz/Lwrt+6RUEBCSpj6Pw3d/pWGGBn7Wf/Z/u+8 TW3lHzQhzn6+UBRTI+TQe4ptoysRD5NdjxCvP8hX5nd+bT9Fmp6PnoNjc/QpDVEo etHrRO2TDdzIIYnU+w18E5051XjTk9Mgjbp7p/efZrCDHjm4Gukay1/y9l3H0d0I XvoMjgBdgkLJb/xBugfM2Xj1 -----END CERTIFICATE-----Generated at Tue Sep 22 22:06:19 2026 by rpki-client