$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: xnM6z65zk+a4m5fcRyhbGK9B0cPsMP3wXqvGuEY8+CI= Subject key identifier: 4B:CD:77:8C:65:46:44:14:7F:4F:88:9A:69:47:3C:24:AC:AF:6A:0A Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0BB5 Signing time: Sat 10 Oct 2026 16:35:58 +0000 Manifest this update: Sat 10 Oct 2026 16:35:57 +0000 Manifest next update: Sat 17 Oct 2026 16:35:57 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: FqJlyiu7AcL1JhXkM6E8LJI3c8F0yiULjH57ajxpyIg=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Oct 10 16:35:57 2026 GMT Not After : Oct 17 16:35:57 2026 GMT Subject: CN=6aca696e-4f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:9a:21:30:df:8c:27:9c:f4:ae:85:5d:dc: a3:b4:c9:10:c6:23:9e:c0:49:50:8e:6a:3a:e0:a8: cc:b5:ba:4a:ff:66:8b:66:d4:af:01:32:98:84:2c: ef:e5:7f:fa:ca:b3:5d:4f:04:91:d5:f7:1e:3f:52: 45:8e:1d:e8:04:36:af:56:07:5a:2e:04:5b:79:8c: 6a:b6:20:f6:e0:18:2b:e3:e5:9e:95:27:39:78:40: 51:33:55:0c:24:d9:1a:db:3d:fc:21:d2:03:ba:c2: 50:73:2b:a2:5f:61:f6:e0:c5:36:6d:78:26:2c:2c: 04:e0:7b:19:09:6b:8e:d0:ed:e5:e0:ae:37:3c:a1: bd:e9:ea:7a:77:40:47:ad:38:c1:1d:da:be:b1:cb: 7c:56:1e:8e:84:72:42:8d:57:39:b0:08:ce:ca:cd: df:2d:46:d3:1d:b5:dc:5e:ed:a0:ed:58:78:25:83: c6:80:c9:e2:19:83:3a:59:da:30:d0:88:1f:8f:7c: 1c:3f:2e:0e:26:8e:84:4c:4a:a4:26:06:5c:0e:59: d3:3d:82:2a:38:b0:a2:13:c3:8d:72:ba:1e:b0:11: 6a:e9:bb:94:b2:24:10:43:53:6e:a9:a7:8a:cc:88: 9b:66:76:6b:99:f7:68:4e:c2:33:52:53:1c:6d:04: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:77:8C:65:46:44:14:7F:4F:88:9A:69:47:3C:24:AC:AF:6A:0A X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d3:1d:5f:2b:b9:76:53:ba:c6:3e:7a:26:6b:a8:b8:01:d4: 63:6d:26:4a:27:55:2c:5f:23:79:5d:99:ef:c7:b9:37:d2:95: 56:ca:e7:36:fb:ba:4e:f2:e8:66:55:b7:8a:67:ed:40:f1:ac: 82:20:d5:f4:a2:7a:55:59:4b:fa:d9:3c:9a:d2:f5:f5:da:7b: cb:20:bf:c2:f3:b1:b9:0d:42:dd:98:f9:f8:d3:1a:57:7e:31: 3f:06:dc:ca:c5:33:8e:68:9a:53:d2:8f:81:f8:35:a5:79:37: cd:cf:ad:38:38:48:68:58:c1:fa:18:83:e1:97:9b:56:41:e5: 16:8d:9e:7e:cd:1e:f3:3a:e2:36:88:be:5d:88:2a:f4:65:21: 60:b1:2a:ce:cf:a5:69:5e:e8:b5:e6:c8:2d:d0:dc:76:6f:10: de:40:37:1c:12:43:7f:83:dd:4c:d2:49:e3:01:f7:e0:90:ab: 08:30:d8:c6:14:b6:c7:f6:19:34:c8:1b:ad:00:38:94:31:45: 4e:7c:7d:67:3d:97:db:8a:8c:31:77:cf:71:01:c6:28:be:17: 44:4c:2d:0d:53:7c:47:b5:61:9e:44:5f:25:80:16:f3:92:f3: a8:17:71:6d:0f:1e:a0:ba:36:70:7c:f3:53:68:6b:44:71:10: 5e:0a:38:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYxMDEwMTYzNTU3WhcNMjYxMDE3MTYzNTU3WjAYMRYwFAYD VQQDEw02YWNhNjk2ZS00ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyWaITDfjCec9K6FXdyjtMkQxiOewElQjmo64KjMtbpK/2aLZtSvATKYhCzv 5X/6yrNdTwSR1fceP1JFjh3oBDavVgdaLgRbeYxqtiD24Bgr4+WelSc5eEBRM1UM JNka2z38IdIDusJQcyuiX2H24MU2bXgmLCwE4HsZCWuO0O3l4K43PKG96ep6d0BH rTjBHdq+sct8Vh6OhHJCjVc5sAjOys3fLUbTHbXcXu2g7Vh4JYPGgMniGYM6Wdow 0Igfj3wcPy4OJo6ETEqkJgZcDlnTPYIqOLCiE8ONcroesBFq6buUsiQQQ1NuqaeK zIibZnZrmfdoTsIzUlMcbQSnXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvNd4xl RkQUf0+ImmlHPCSsr2oKMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs9MdXyu5dlO6xj56JmuouAHUY20mSidVLF8jeV2Z78e5N9KVVsrnNvu6TvLo ZlW3imftQPGsgiDV9KJ6VVlL+tk8mtL19dp7yyC/wvOxuQ1C3Zj5+NMaV34xPwbc ysUzjmiaU9KPgfg1pXk3zc+tODhIaFjB+hiD4ZebVkHlFo2efs0e8zriNoi+XYgq 9GUhYLEqzs+laV7otebILdDcdm8Q3kA3HBJDf4PdTNJJ4wH34JCrCDDYxhS2x/YZ NMgbrQA4lDFFTnx9Zz2X24qMMXfPcQHGKL4XREwtDVN8R7VhnkRfJYAW85LzqBdx bQ8eoLo2cHzzU2hrRHEQXgo4MA== -----END CERTIFICATE-----Generated at Mon Oct 12 15:24:54 2026 by rpki-client