$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: riJuCEPiEo6jREIRVgAIKlkycqbSCBygjSanAgDRVkk= Subject key identifier: BC:81:A9:5B:6F:12:F4:B0:57:D5:BF:07:54:24:B8:45:AA:02:CE:43 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 35A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 358E Signing time: Sun 20 Sep 2026 14:36:40 +0000 Manifest this update: Sun 20 Sep 2026 14:36:40 +0000 Manifest next update: Sun 27 Sep 2026 14:36:40 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: 24j67T1Vg3l0s0cG9l+khZd/z11NiWI3fqeo0iLBU1U=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) 3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) 4: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13737 (0x35a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Sep 20 14:36:40 2026 GMT Not After : Sep 27 14:36:40 2026 GMT Subject: CN=6aafef78-6d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:18:70:76:0d:05:2c:09:77:2d:9c:87:85: 85:92:3f:22:a0:a0:42:51:e1:61:a8:95:2c:ef:b8: 1d:30:71:bb:58:20:66:42:64:7d:46:5a:3f:cf:cf: df:87:ee:db:3c:7c:b5:09:79:3c:4f:9f:26:ac:2f: 18:d3:e7:04:d1:ee:48:47:51:2f:35:0c:14:63:54: 78:43:c8:5d:3f:b2:e3:b0:0a:f9:33:af:16:5c:81: a2:ef:43:30:aa:05:cd:26:ee:53:99:58:5e:9a:5a: e3:e4:b5:ba:55:96:a9:de:9c:47:21:92:be:a5:52: 46:60:2a:ad:6d:26:62:02:a8:20:de:9d:d2:7d:ee: 3b:de:18:b6:65:32:19:0c:09:05:52:0d:7e:36:2a: 84:a7:c0:91:79:6d:dd:51:8e:66:aa:d9:2f:c5:19: 58:28:d5:9e:66:f2:e0:8b:24:03:13:44:f6:45:a5: 2d:c3:f3:b5:eb:20:8f:5c:22:bb:39:3e:e7:9b:3a: 2f:e9:72:55:25:4d:ee:40:58:2b:17:7c:c8:ea:2c: c8:f9:85:e0:fb:70:74:aa:15:e2:39:68:f3:09:3e: 2d:8d:88:9b:01:67:4b:69:fc:90:f0:44:c2:4d:0d: 5c:5f:ae:5e:a8:44:da:ec:52:bf:77:5a:bd:9d:3c: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:81:A9:5B:6F:12:F4:B0:57:D5:BF:07:54:24:B8:45:AA:02:CE:43 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0e:e7:72:00:8f:db:02:95:31:d8:50:6c:f6:c9:b9:d8:45: a0:bf:44:25:ea:ca:18:b4:57:aa:89:ef:ba:14:1a:c6:d5:64: f4:43:69:9e:69:95:24:d2:6f:b5:57:4d:14:74:da:9d:21:9e: 04:a2:63:5b:6f:ed:c7:b5:88:f8:2e:74:95:18:e1:74:cb:fd: 50:cc:42:dc:66:74:02:dc:6a:d9:09:94:03:a7:4e:2d:9f:51: 52:3b:4b:9a:17:44:5f:a9:e4:26:81:ab:4d:68:44:41:db:eb: b7:ce:f9:e5:0f:d2:4d:7f:e3:01:95:1b:ec:65:9b:4c:43:2c: c9:87:d1:ff:1e:9e:d9:a8:e1:36:50:6e:9e:dc:72:ba:4a:d3: dc:ba:31:d1:bd:3b:e6:d6:f7:46:d8:a3:41:80:70:48:c4:b8: 19:fc:21:dc:1c:ad:1d:48:06:ec:14:49:0f:af:8f:68:94:bf: 52:e5:fa:a7:f4:0d:d8:db:69:f1:c6:77:82:7e:d1:2d:fb:51: bd:f2:d2:5a:10:08:ce:1a:5e:11:72:be:ad:bc:6e:a9:52:5f: 21:26:ed:26:79:ca:bc:f1:ea:f1:d6:70:75:ba:b0:37:e0:2d: bc:2f:b2:4c:25:92:95:7e:98:4f:65:0b:d5:50:7b:f3:01:e7: 94:b0:35:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwOTIwMTQzNjQwWhcNMjYwOTI3MTQzNjQwWjAYMRYwFAYD VQQDEw02YWFmZWY3OC02ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C8YcHYNBSwJdy2ch4WFkj8ioKBCUeFhqJUs77gdMHG7WCBmQmR9Rlo/z8/f h+7bPHy1CXk8T58mrC8Y0+cE0e5IR1EvNQwUY1R4Q8hdP7LjsAr5M68WXIGi70Mw qgXNJu5TmVhemlrj5LW6VZap3pxHIZK+pVJGYCqtbSZiAqgg3p3Sfe473hi2ZTIZ DAkFUg1+NiqEp8CReW3dUY5mqtkvxRlYKNWeZvLgiyQDE0T2RaUtw/O16yCPXCK7 OT7nmzov6XJVJU3uQFgrF3zI6izI+YXg+3B0qhXiOWjzCT4tjYibAWdLafyQ8ETC TQ1cX65eqETa7FK/d1q9nTzI2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyBqVtv EvSwV9W/B1QkuEWqAs5DMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsw7ncgCP2wKVMdhQbPbJudhFoL9EJerKGLRXqonvuhQaxtVk9ENpnmmVJNJv tVdNFHTanSGeBKJjW2/tx7WI+C50lRjhdMv9UMxC3GZ0Atxq2QmUA6dOLZ9RUjtL mhdEX6nkJoGrTWhEQdvrt8755Q/STX/jAZUb7GWbTEMsyYfR/x6e2ajhNlBuntxy ukrT3Lox0b075tb3RtijQYBwSMS4Gfwh3BytHUgG7BRJD6+PaJS/UuX6p/QN2Ntp 8cZ3gn7RLftRvfLSWhAIzhpeEXK+rbxuqVJfISbtJnnKvPHq8dZwdbqwN+AtvC+y TCWSlX6YT2UL1VB78wHnlLA1dA== -----END CERTIFICATE-----Generated at Mon Sep 21 04:55:19 2026 by rpki-client