$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: OfDWov8kcHUlD8d+sgUfIxALGC88m/4E9+Z/D4qwSVw= Subject key identifier: 3F:7C:D4:BE:CC:5D:77:39:AB:8D:2E:B2:9E:66:3B:A5:22:FD:9F:18 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 019E Signing time: Fri 25 Sep 2026 04:19:54 +0000 Manifest this update: Fri 25 Sep 2026 04:19:54 +0000 Manifest next update: Fri 02 Oct 2026 04:19:54 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: zzJufOrSJVyMwLnHsEXcGVu8ARiZMIp3+osth1uyHsQ=) 2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ol6GVz47sRCGDVdpSbtKqXjVimVSYgLAgjn3lhayf1k=) 3: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: qUAsmwJrGNnZ4LMlEZRu5pS5wvgSSSd1+jpCN0g9BCk=) 4: CE2868C28F4C11F18259B4DA4511F970.roa (hash: cu7AnJ9TPxK2uGn4bkgIAX6kf4pKIeDeneOPNEPA89k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Sep 25 04:19:54 2026 GMT Not After : Oct 2 04:19:54 2026 GMT Subject: CN=6ab5f66a-e96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e2:13:a2:74:21:3d:ca:4a:cc:3b:56:ad:89: c2:1a:10:b8:71:aa:14:f4:19:9d:6d:1d:44:9d:80: bf:df:37:a2:54:76:88:60:f3:a5:11:46:d8:48:c4: 59:77:a8:a3:4d:d0:04:0d:36:0f:58:77:cd:fb:2f: e8:e5:b6:47:12:5b:df:63:5b:bd:c3:6e:78:db:9a: 3b:ed:9a:22:e0:d3:40:81:2a:05:2c:6e:ce:73:7c: f6:f4:54:d0:8f:94:56:a8:bf:a3:05:4d:cd:90:80: c8:48:ae:8b:b1:66:1b:d2:e8:df:73:ef:99:47:85: de:ed:6b:1f:ff:a0:60:55:3b:02:28:5a:8c:2a:c2: 50:5b:68:df:18:f4:cf:15:29:94:43:51:92:bf:7a: b4:c7:17:f6:b2:5b:57:77:c5:06:95:d8:cf:43:c0: 15:1b:35:58:cf:26:c4:14:b8:47:fd:96:65:01:d8: 14:e0:cc:46:10:11:ea:81:02:fc:32:fc:9c:c4:7b: 8e:6a:c6:71:d4:e1:3d:aa:db:c0:56:eb:b6:11:4a: f6:e2:7b:88:57:1d:d6:63:f3:1b:33:81:72:7b:84: d4:a7:39:81:f7:68:2b:87:8b:db:3d:3b:c3:4f:22: 49:2c:5d:d6:29:17:95:6f:61:0c:6c:7e:d1:c6:96: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:D4:BE:CC:5D:77:39:AB:8D:2E:B2:9E:66:3B:A5:22:FD:9F:18 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:cb:00:a7:0e:9f:17:ba:d5:db:8a:45:38:87:3d:18:7d: 0b:65:fe:57:8a:af:15:34:47:f3:1d:4a:9e:f5:19:6e:cd:59: 50:b3:fa:70:dc:af:9d:c7:60:2a:26:69:6b:23:45:a8:32:f1: 9b:79:14:f4:7e:31:02:8f:d3:9b:e8:d6:7a:ad:0b:1e:7d:99: 74:b9:f4:15:f7:e6:24:36:17:38:10:e7:63:4e:c5:04:1b:52: 2c:48:39:0d:46:d9:04:d0:c0:c3:96:16:f0:1e:39:cf:8b:0d: 33:a1:25:cf:8f:71:f7:17:57:04:b6:3c:14:53:79:3a:fb:4b: 1a:cb:f8:fa:a7:e5:4d:63:2c:fe:a0:0f:f7:9a:c2:c4:ff:08: bd:42:a6:52:f0:f7:e6:6a:82:50:73:9d:96:05:26:a2:a2:a0: a8:2a:4d:88:12:82:4d:00:83:fe:fa:ab:f4:32:5e:14:bc:93: 1b:5f:14:38:d0:74:58:c8:43:1d:58:0d:51:46:70:28:c9:1f: 09:c5:16:77:22:c5:9a:37:3c:50:97:6f:d3:96:da:a5:2f:d5: c4:b1:b5:2c:5b:84:1f:11:46:b6:ac:5c:d6:ae:1d:7e:a8:26: 3b:9b:b1:48:b3:67:f9:39:e7:55:a5:2b:4a:89:48:08:98:f9: 15:97:9e:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjYwOTI1MDQxOTU0WhcNMjYxMDAyMDQxOTU0WjAYMRYwFAYD VQQDEw02YWI1ZjY2YS1lOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eITonQhPcpKzDtWrYnCGhC4caoU9BmdbR1EnYC/3zeiVHaIYPOlEUbYSMRZ d6ijTdAEDTYPWHfN+y/o5bZHElvfY1u9w25425o77Zoi4NNAgSoFLG7Oc3z29FTQ j5RWqL+jBU3NkIDISK6LsWYb0ujfc++ZR4Xe7Wsf/6BgVTsCKFqMKsJQW2jfGPTP FSmUQ1GSv3q0xxf2sltXd8UGldjPQ8AVGzVYzybEFLhH/ZZlAdgU4MxGEBHqgQL8 MvycxHuOasZx1OE9qtvAVuu2EUr24nuIVx3WY/MbM4Fye4TUpzmB92grh4vbPTvD TyJJLF3WKReVb2EMbH7RxpYA7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD981L7M XXc5q40usp5mO6Ui/Z8YMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhfLAKcOnxe61duKRTiHPRh9C2X+V4qvFTRH8x1KnvUZbs1ZULP6cNyvncdg KiZpayNFqDLxm3kU9H4xAo/Tm+jWeq0LHn2ZdLn0FffmJDYXOBDnY07FBBtSLEg5 DUbZBNDAw5YW8B45z4sNM6Elz49x9xdXBLY8FFN5OvtLGsv4+qflTWMs/qAP95rC xP8IvUKmUvD35mqCUHOdlgUmoqKgqCpNiBKCTQCD/vqr9DJeFLyTG18UONB0WMhD HVgNUUZwKMkfCcUWdyLFmjc8UJdv05bapS/VxLG1LFuEHxFGtqxc1q4dfqgmO5ux SLNn+TnnVaUrSolICJj5FZee1g== -----END CERTIFICATE-----Generated at Sat Sep 26 05:17:02 2026 by rpki-client