$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: 4gulSQtQFPwqAdB60ejObRq+JD9mc3PJJIGO7K6FgEw= Subject key identifier: 31:56:2C:AE:C3:A1:8A:CF:37:CD:36:87:AF:0B:E0:A8:32:73:5F:10 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0587 Signing time: Sun 20 Sep 2026 23:07:11 +0000 Manifest this update: Sun 20 Sep 2026 23:07:10 +0000 Manifest next update: Sun 27 Sep 2026 23:07:10 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 7EKpSITLFYK4JmxtPhF+quH+x8u3ut8wpkxnInv4rQ0=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Sep 20 23:07:10 2026 GMT Not After : Sep 27 23:07:10 2026 GMT Subject: CN=6ab0671f-3c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:a9:1e:2e:ff:af:ef:1b:9c:2f:68:70:4a: ba:96:b2:27:b7:ec:8c:12:a0:64:91:c1:19:ad:27: 36:b2:80:21:9f:90:62:b4:ff:2c:e6:df:34:dc:f0: 7f:9e:39:e7:cf:b9:8d:2a:b6:dc:21:f6:f5:0a:8b: 09:67:17:72:2c:0f:d4:48:da:48:c0:59:a9:71:2b: 9d:d6:69:8d:fc:ec:f6:6a:6a:33:67:06:30:45:a2: 4c:0e:77:f1:5d:28:57:71:77:7d:cf:96:11:7a:44: 47:ec:8e:4b:31:c2:8a:c8:c7:c9:16:64:7f:55:4a: 24:95:46:25:31:71:4b:e8:c6:ac:1f:da:2a:8c:20: 21:1a:d1:21:b0:de:f5:c0:65:f5:7d:80:cd:f9:65: 74:1d:27:46:bc:e3:19:b9:ed:55:8d:45:16:c4:70: 61:d0:73:26:b8:97:38:d5:31:e9:e0:3b:9f:13:e9: 62:94:5c:4a:5c:dc:1a:30:97:cc:a8:70:ba:ac:c9: ef:8f:83:af:36:33:67:32:35:05:7e:9f:3a:cc:10: df:94:95:11:a3:85:d9:6a:b6:39:c7:ca:38:78:61: 7b:e2:25:b6:9d:40:62:61:7d:98:52:d5:c7:14:61: 11:cb:03:d4:10:9b:69:9f:44:8e:fc:7a:92:4e:f8: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:56:2C:AE:C3:A1:8A:CF:37:CD:36:87:AF:0B:E0:A8:32:73:5F:10 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:68:04:d3:57:ef:0d:fa:8d:91:88:9c:22:08:75:8f:f8:68: e5:6b:f6:7c:63:66:93:f5:21:e2:2b:7b:93:7f:6c:74:31:5f: 2a:ce:ed:11:26:f7:3a:7c:4d:cb:cc:eb:1a:0f:7d:bf:33:a6: 4f:4b:69:86:af:79:24:9d:f9:95:3e:2d:18:00:70:99:30:ad: 6b:bb:9d:8f:b5:44:78:78:50:db:01:18:73:0e:b5:cb:b9:e4: a1:4b:86:f6:ff:7e:7e:52:7e:bc:6a:8e:9d:97:37:16:e9:77: 4e:a1:09:56:cd:7d:ae:56:e5:ae:ed:bd:b0:e3:8d:3c:a9:4f: 97:ef:2e:df:1f:14:d0:46:c6:dd:f6:b8:bf:5d:f4:52:e1:9b: 5a:74:be:72:c5:d3:e1:1d:b8:eb:44:bf:ec:cf:86:ce:39:16: d3:f8:8d:d9:e6:32:74:8d:3c:53:04:35:fd:e5:1f:fd:28:41: a5:43:d6:7d:39:1c:e1:30:f6:be:49:ba:cb:b9:aa:2b:5b:3d: f2:00:fc:0a:87:8f:1c:e7:99:2f:70:9c:be:fb:1c:23:5c:0e: 7b:1b:7f:bc:5a:d6:53:95:e7:ba:7f:d0:f0:19:18:47:e5:46: ee:a1:6b:18:4d:25:73:15:e5:14:5f:3a:8a:57:7d:cf:57:b7: 12:6c:8a:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjYwOTIwMjMwNzEwWhcNMjYwOTI3MjMwNzEwWjAYMRYwFAYD VQQDEw02YWIwNjcxZi0zYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJapHi7/r+8bnC9ocEq6lrInt+yMEqBkkcEZrSc2soAhn5BitP8s5t803PB/ njnnz7mNKrbcIfb1CosJZxdyLA/USNpIwFmpcSud1mmN/Oz2amozZwYwRaJMDnfx XShXcXd9z5YRekRH7I5LMcKKyMfJFmR/VUoklUYlMXFL6MasH9oqjCAhGtEhsN71 wGX1fYDN+WV0HSdGvOMZue1VjUUWxHBh0HMmuJc41THp4DufE+lilFxKXNwaMJfM qHC6rMnvj4OvNjNnMjUFfp86zBDflJURo4XZarY5x8o4eGF74iW2nUBiYX2YUtXH FGERywPUEJtpn0SO/HqSTvh9dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFWLK7D oYrPN802h68L4Kgyc18QMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADGgE01fvDfqNkYicIgh1j/ho5Wv2fGNmk/Uh4it7k39sdDFfKs7tESb3OnxN y8zrGg99vzOmT0tphq95JJ35lT4tGABwmTCta7udj7VEeHhQ2wEYcw61y7nkoUuG 9v9+flJ+vGqOnZc3Ful3TqEJVs19rlblru29sOONPKlPl+8u3x8U0EbG3fa4v130 UuGbWnS+csXT4R2460S/7M+GzjkW0/iN2eYydI08UwQ1/eUf/ShBpUPWfTkc4TD2 vkm6y7mqK1s98gD8CoePHOeZL3CcvvscI1wOext/vFrWU5Xnun/Q8BkYR+VG7qFr GE0lcxXlFF86ild9z1e3EmyKZA== -----END CERTIFICATE-----Generated at Tue Sep 22 13:08:56 2026 by rpki-client