$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json) Hash identifier: wVwsqr9lli9Sem+68Vn4nuPGpbihQr2xgVhBT8L6OHY= Subject key identifier: 8A:D7:B8:DC:59:DA:D5:0A:D9:85:40:D9:62:48:E6:88:3B:79:C9:A8 Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft Manifest number: 01A0 Signing time: Thu 05 Nov 2026 05:06:50 +0000 Manifest this update: Thu 05 Nov 2026 05:06:49 +0000 Manifest next update: Thu 12 Nov 2026 05:06:49 +0000 Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: kaZ/7XE7yoETQ6FgUE3mN24KEUmeMy5/ZurZedlU+nE=) 2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: RVbj01Du1WKFasCmwg1jqLFxFljVV487kT8U/4ZCdZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 05:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Nov 5 05:06:49 2026 GMT Not After : Nov 12 05:06:49 2026 GMT Subject: CN=6aec0eea-ad35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:c9:18:ce:f0:dc:89:3f:57:26:59:ef:b1: b6:70:31:10:3f:d6:0e:f2:31:ef:43:4d:20:4c:b5: 07:1e:3d:44:ea:37:f4:64:1d:71:dc:3b:14:05:80: cf:03:62:7f:26:48:42:ee:1b:98:dd:b0:64:91:b5: ee:f8:42:91:61:f6:b4:ba:8b:2a:3a:95:11:ff:3a: fd:25:ab:d6:9a:62:56:28:2d:aa:b7:1a:68:94:ef: 4c:c9:c4:05:85:ab:77:da:09:3a:ac:1f:9f:16:38: 4a:51:13:11:5b:8e:25:dc:f6:14:a8:c6:f1:32:71: f2:7f:74:f4:fc:fd:ce:44:79:02:bb:52:23:c0:cd: 85:47:ca:fd:50:bc:de:7a:98:d6:cc:7e:4a:7a:b6: c9:7e:ad:d7:52:b2:1f:d5:20:96:59:ac:3f:ec:4f: 57:f9:19:1e:98:89:01:a0:1a:81:8c:82:9f:16:ef: 22:61:2b:79:03:28:96:ca:8e:40:73:69:c8:1a:2c: 4a:05:b8:9c:62:53:46:08:00:43:3f:7e:f7:17:9b: 05:4b:99:87:5d:13:a0:78:c6:cb:dc:03:5c:bf:c6: 32:9f:ea:d8:bd:c2:60:01:43:81:64:7a:c6:fa:86: e3:80:0f:30:e8:c3:6d:6f:b0:eb:4e:82:bd:51:93: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:B8:DC:59:DA:D5:0A:D9:85:40:D9:62:48:E6:88:3B:79:C9:A8 X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:09:94:03:2d:7f:38:df:a6:41:32:2e:e3:2b:6b:22:f1:ec: 4a:e3:09:a4:cd:2b:3f:29:f5:5e:59:17:0a:cc:d1:65:e1:c8: 73:17:c3:0e:91:78:46:a5:5b:ed:01:d6:aa:8e:a6:b7:4f:b1: af:a1:47:6f:ea:9c:15:a0:fb:c9:ca:31:3b:55:0e:1f:3d:07: 99:26:12:a4:79:cb:1d:55:59:a7:f7:e3:6a:78:42:dc:47:dd: 77:05:c8:67:60:83:29:f1:a2:df:80:d2:b4:5c:6f:e1:05:e8: be:08:4d:9a:00:57:75:13:c7:be:9c:18:12:a0:cc:16:22:6c: 87:2c:b1:4b:1b:07:c1:48:50:0d:89:6a:a8:7c:27:6c:da:ae: 7e:f6:ae:9e:fb:a5:a8:df:3d:85:c5:35:78:d1:6f:1a:0f:29: 59:a1:c9:73:c4:68:61:25:da:85:14:b8:b3:c1:a8:37:66:ba: 2a:12:ac:8b:f8:91:78:19:f2:4a:8b:09:75:4b:ff:55:d3:85: 8e:fe:27:80:84:f8:d3:84:21:ba:ee:26:e3:39:3b:2a:71:13: 89:eb:a9:ab:e2:b2:96:7a:fd:07:4f:fe:b2:95:b6:26:d8:41: e4:c8:92:6b:f3:2d:32:a7:eb:71:4f:b9:38:df:b3:ad:32:ff: d9:93:ce:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMEExMTAvBgNVBAUTKDA5OTUwNkVDOTg3QzhCMTk0MDU4NTNCMDhDNzE4QjVC QkU0QUM2OTIwHhcNMjYxMTA1MDUwNjQ5WhcNMjYxMTEyMDUwNjQ5WjAYMRYwFAYD VQQDEw02YWVjMGVlYS1hZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcHJGM7w3Ik/VyZZ77G2cDEQP9YO8jHvQ00gTLUHHj1E6jf0ZB1x3DsUBYDP A2J/JkhC7huY3bBkkbXu+EKRYfa0uosqOpUR/zr9JavWmmJWKC2qtxpolO9MycQF hat32gk6rB+fFjhKURMRW44l3PYUqMbxMnHyf3T0/P3ORHkCu1IjwM2FR8r9ULze epjWzH5KerbJfq3XUrIf1SCWWaw/7E9X+RkemIkBoBqBjIKfFu8iYSt5AyiWyo5A c2nIGixKBbicYlNGCABDP373F5sFS5mHXROgeMbL3ANcv8Yyn+rYvcJgAUOBZHrG +objgA8w6MNtb7DrToK9UZM/FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrXuNxZ 2tUK2YVA2WJI5og7ecmoMB8GA1UdIwQYMBaAFAmVBuyYfIsZQFhTsIxxi1u+SsaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwQS9ENURCNkRGNjYw N0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4bEFXRk93akhHTFc3NUt4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwQS9ENURCNkRGNjYwN0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4 bEFXRk93akhHTFc3NUt4cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQmUAy1/ON+mQTIu4ytrIvHsSuMJpM0rPyn1XlkXCszRZeHIcxfDDpF4RqVb 7QHWqo6mt0+xr6FHb+qcFaD7ycoxO1UOHz0HmSYSpHnLHVVZp/fjanhC3EfddwXI Z2CDKfGi34DStFxv4QXovghNmgBXdRPHvpwYEqDMFiJshyyxSxsHwUhQDYlqqHwn bNqufvaunvulqN89hcU1eNFvGg8pWaHJc8RoYSXahRS4s8GoN2a6KhKsi/iReBny SosJdUv/VdOFjv4ngIT404Qhuu4m4zk7KnETieupq+Kylnr9B0/+spW2JthB5MiS a/MtMqfrcU+5ON+zrTL/2ZPOOg== -----END CERTIFICATE-----Generated at Thu Nov 5 17:26:24 2026 by rpki-client