$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft File: CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json) Hash identifier: dwB5QbI9lOlqQVh+Zrs5tUQ0EACgv/Gvk6TarosotRg= Subject key identifier: B9:E8:67:D4:EF:AA:C8:A9:6B:F0:65:40:04:BA:AB:E5:2F:66:45:1E Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft Manifest number: 0154 Signing time: Sat 13 Jun 2026 05:06:10 +0000 Manifest this update: Sat 13 Jun 2026 05:06:10 +0000 Manifest next update: Sat 20 Jun 2026 05:06:10 +0000 Files and hashes: 1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: gdEUxakV6Q3DHUGeItPwh5aoAcIs/kqDnNl24dJJppk=) 2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: bidCbRFTgDxHMdqmXAGHrBwGv+QM4m7c3Q2wG1dxBaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Jun 13 05:06:10 2026 GMT Not After : Jun 20 05:06:10 2026 GMT Subject: CN=6a2ce542-939d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:3c:4d:16:5a:3f:36:37:6f:ba:38:28:1d: cb:49:c4:09:27:9e:2c:af:bd:fc:2f:d6:43:0c:c5: 4a:7d:61:da:a8:52:72:0d:82:88:41:1b:0a:3e:19: 88:0b:99:af:3e:84:2f:51:dc:b1:1c:34:18:5f:99: 57:b1:1f:19:49:bb:39:5f:67:95:fe:61:cb:59:76: 8b:16:83:2f:5d:0a:1c:2c:f1:2d:15:71:fa:b3:8b: 77:f6:39:36:92:fc:39:db:0b:f1:a7:31:16:a7:8b: 21:60:c3:8d:2a:58:0a:0e:b8:72:b6:1f:9a:ea:30: 1f:cf:5a:cc:da:77:84:22:fc:cd:fa:89:b6:85:80: a8:9b:b0:2d:82:9e:ed:0b:71:d3:9b:03:b0:46:70: 4d:da:f6:72:15:1d:db:8d:72:8a:30:95:4b:91:37: ab:38:e6:68:11:9a:8e:65:de:9a:9d:30:12:c2:51: f3:c1:26:97:e5:d1:37:b3:37:f6:85:8e:73:a9:64: c4:4d:75:98:61:68:7d:ad:3f:ba:f3:49:01:d8:13: 9a:7e:6e:a3:c4:df:8a:4d:44:cf:05:c7:99:ac:b0: 6b:4f:f6:4b:b3:7b:f3:d2:a9:40:0d:03:58:5b:e3: a6:a9:e8:2b:d8:73:3f:04:db:0c:39:32:4c:34:57: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:67:D4:EF:AA:C8:A9:6B:F0:65:40:04:BA:AB:E5:2F:66:45:1E X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:30:31:21:9e:97:60:66:11:0b:f7:c2:ef:b2:9a:6d:06: 7d:d2:72:fc:55:aa:d8:8d:4e:84:04:5f:65:94:99:ec:4f:36: 05:6f:e3:ef:93:68:19:b1:18:30:72:66:b9:5d:3c:ec:3a:31: e0:a4:5a:74:ee:27:92:9e:2f:78:ad:56:7e:dd:26:d4:2e:a6: a3:09:e9:cd:07:2d:f0:2d:b5:9a:c7:96:5f:08:71:b6:b3:6d: e4:35:4d:fc:d5:c3:8c:af:97:fa:94:2b:e6:96:2f:10:0f:cd: bc:4d:b7:10:b7:c5:d0:36:4b:de:6f:28:1c:ab:bd:16:08:e3: f2:78:b7:6d:b7:af:5e:6f:e9:01:29:82:54:97:d9:0d:42:77: 82:de:0f:36:e3:06:b6:6c:95:27:3c:90:f6:fa:fa:a0:df:81: d3:16:91:ed:5a:c4:49:0f:fb:07:88:bf:1c:ae:42:4a:5b:6e: 6e:3f:0e:66:83:c8:50:dc:9c:92:aa:e1:98:34:c3:88:e5:d5: f7:9b:47:3d:6e:56:f7:21:a1:8c:d6:f5:d3:3b:46:74:d4:95: 5b:12:7b:f1:11:9d:c5:59:fa:ac:0d:ce:43:1b:4b:a9:26:29: fc:34:58:85:5a:fd:9e:51:65:7e:0a:bc:81:1d:7e:eb:18:4a: 61:8e:fe:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMEExMTAvBgNVBAUTKDA5OTUwNkVDOTg3QzhCMTk0MDU4NTNCMDhDNzE4QjVC QkU0QUM2OTIwHhcNMjYwNjEzMDUwNjEwWhcNMjYwNjIwMDUwNjEwWjAYMRYwFAYD VQQDEw02YTJjZTU0Mi05MzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMs8TRZaPzY3b7o4KB3LScQJJ54sr738L9ZDDMVKfWHaqFJyDYKIQRsKPhmI C5mvPoQvUdyxHDQYX5lXsR8ZSbs5X2eV/mHLWXaLFoMvXQocLPEtFXH6s4t39jk2 kvw52wvxpzEWp4shYMONKlgKDrhyth+a6jAfz1rM2neEIvzN+om2hYCom7Atgp7t C3HTmwOwRnBN2vZyFR3bjXKKMJVLkTerOOZoEZqOZd6anTASwlHzwSaX5dE3szf2 hY5zqWTETXWYYWh9rT+680kB2BOafm6jxN+KTUTPBceZrLBrT/ZLs3vz0qlADQNY W+Omqegr2HM/BNsMOTJMNFdURwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnoZ9Tv qsipa/BlQAS6q+UvZkUeMB8GA1UdIwQYMBaAFAmVBuyYfIsZQFhTsIxxi1u+SsaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwQS9ENURCNkRGNjYw N0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4bEFXRk93akhHTFc3NUt4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwQS9ENURCNkRGNjYwN0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4 bEFXRk93akhHTFc3NUt4cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQIwMSGel2BmEQv3wu+ymm0GfdJy/FWq2I1OhARfZZSZ7E82BW/j75NoGbEY MHJmuV087Dox4KRadO4nkp4veK1Wft0m1C6mownpzQct8C21mseWXwhxtrNt5DVN /NXDjK+X+pQr5pYvEA/NvE23ELfF0DZL3m8oHKu9Fgjj8ni3bbevXm/pASmCVJfZ DUJ3gt4PNuMGtmyVJzyQ9vr6oN+B0xaR7VrESQ/7B4i/HK5CSltubj8OZoPIUNyc kqrhmDTDiOXV95tHPW5W9yGhjNb10ztGdNSVWxJ78RGdxVn6rA3OQxtLqSYp/DRY hVr9nlFlfgq8gR1+6xhKYY7+rg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:31:44 2026 by rpki-client