$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: xY1Pd0wUzcZKsKaM1CYycZZy8KhBxt6A5YQysF7V+Ns= Subject key identifier: 6D:85:1E:E0:30:B5:38:ED:2E:AD:63:46:84:97:D4:85:D6:9B:42:6A Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 02A7 Signing time: Fri 25 Sep 2026 01:38:53 +0000 Manifest this update: Fri 25 Sep 2026 01:38:53 +0000 Manifest next update: Fri 02 Oct 2026 01:38:53 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: Q1VcCdTMIdBbnOdvE8ejPgD79yD2xe0VGHzpW4pfw74=) 2: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ=) 3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=) 4: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: 9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Sep 25 01:38:53 2026 GMT Not After : Oct 2 01:38:53 2026 GMT Subject: CN=6ab5d0ad-d129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:ea:74:77:d7:fd:33:1b:98:48:0a:ce:9c: 4e:22:63:50:86:ab:66:23:01:cb:08:8e:7e:77:6e: 0c:0d:cd:91:75:6a:be:16:c3:05:e0:d9:d2:5d:36: db:8e:75:96:b6:fb:14:ce:f8:37:f6:76:f3:d1:5c: 46:67:67:c4:7e:5b:3d:be:4c:ec:f9:f9:bc:5c:a3: df:8e:d6:92:c1:3b:5e:e6:a1:da:df:a4:66:b3:2c: 5c:cb:8a:78:2a:6f:b1:d6:fe:df:d5:a9:e2:52:be: 27:53:d9:4f:cb:a7:ee:e7:05:48:51:3f:57:50:ff: a8:71:3e:1d:97:90:cf:19:23:5a:c5:d8:8f:5b:45: 92:fa:2f:d1:88:76:7c:28:4d:b3:27:81:4b:9b:3d: 39:ee:95:14:44:50:9d:94:ec:91:8e:82:2e:e2:f5: d0:d4:6c:24:53:a9:70:b7:85:b1:f6:c0:0c:17:5b: fb:cf:53:12:a7:45:c1:c5:97:f5:19:64:e6:6b:90: b9:04:42:59:b1:9e:66:a7:c8:01:12:58:7d:9c:47: d5:4d:f7:ca:91:0c:ca:27:85:58:3a:c5:c4:c3:90: 7b:ae:0e:ee:04:01:1d:9a:90:36:7d:dd:5f:35:91: 99:dc:82:f9:c7:3b:17:ef:68:4d:05:57:47:42:3b: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:85:1E:E0:30:B5:38:ED:2E:AD:63:46:84:97:D4:85:D6:9B:42:6A X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:56:96:65:83:ac:4d:4d:9c:08:73:39:3c:f2:3e:21:cb:92: 71:21:fa:6b:91:7c:08:c5:b6:30:05:9b:8f:1e:31:6a:fc:58: 19:e7:3b:00:9f:a1:58:24:a4:2c:2a:0f:6d:09:60:4f:a9:fd: fb:4b:55:41:82:1a:b5:de:bd:96:56:f9:64:2d:cd:ae:a9:1e: eb:bc:d0:15:fb:86:71:0c:bb:44:c9:fe:77:5c:72:f0:5e:b1: bc:39:48:ba:a0:d0:8a:1c:d4:89:c1:eb:30:67:b0:fe:a5:eb: 61:9b:db:db:b2:62:81:41:82:87:6c:9d:20:5d:8e:9d:bd:39: 76:49:4b:37:a2:aa:83:1b:92:d5:b4:55:44:e8:62:0b:46:22: 69:a1:48:04:53:0d:08:38:f6:31:d4:28:db:86:50:1f:d6:fc: d3:9e:e8:b8:bf:62:75:6f:21:2b:57:46:8b:8b:a4:06:5c:7b: f6:04:2c:a3:c5:d5:d2:7e:c9:2a:c4:1e:67:4a:a0:68:8a:4b: 77:03:21:eb:e0:fe:52:cb:b1:14:73:9e:98:ef:1e:e1:d2:aa: 89:71:58:10:dd:8c:3a:fb:9c:a9:74:b5:18:1a:47:94:d4:3d: c2:3c:8b:9a:b9:d7:a6:58:06:89:00:e8:bb:92:07:be:4b:d4: b9:57:b2:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwOTI1MDEzODUzWhcNMjYxMDAyMDEzODUzWjAYMRYwFAYD VQQDEw02YWI1ZDBhZC1kMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo/qdHfX/TMbmEgKzpxOImNQhqtmIwHLCI5+d24MDc2RdWq+FsMF4NnSXTbb jnWWtvsUzvg39nbz0VxGZ2fEfls9vkzs+fm8XKPfjtaSwTte5qHa36Rmsyxcy4p4 Km+x1v7f1aniUr4nU9lPy6fu5wVIUT9XUP+ocT4dl5DPGSNaxdiPW0WS+i/RiHZ8 KE2zJ4FLmz057pUURFCdlOyRjoIu4vXQ1GwkU6lwt4Wx9sAMF1v7z1MSp0XBxZf1 GWTma5C5BEJZsZ5mp8gBElh9nEfVTffKkQzKJ4VYOsXEw5B7rg7uBAEdmpA2fd1f NZGZ3IL5xzsX72hNBVdHQjsjlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2FHuAw tTjtLq1jRoSX1IXWm0JqMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVaWZYOsTU2cCHM5PPI+IcuScSH6a5F8CMW2MAWbjx4xavxYGec7AJ+hWCSk LCoPbQlgT6n9+0tVQYIatd69llb5ZC3Nrqke67zQFfuGcQy7RMn+d1xy8F6xvDlI uqDQihzUicHrMGew/qXrYZvb27JigUGCh2ydIF2Onb05dklLN6KqgxuS1bRVROhi C0YiaaFIBFMNCDj2MdQo24ZQH9b8057ouL9idW8hK1dGi4ukBlx79gQso8XV0n7J KsQeZ0qgaIpLdwMh6+D+UsuxFHOemO8e4dKqiXFYEN2MOvucqXS1GBpHlNQ9wjyL mrnXplgGiQDou5IHvkvUuVeyPA== -----END CERTIFICATE-----Generated at Fri Sep 25 13:30:26 2026 by rpki-client