$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: 3t9xUAahrKTaoZnaMUl1ojf8fDxunL87kO/hEdLhNFc= Subject key identifier: B3:31:11:AE:E4:0C:D2:F4:E3:CA:A8:04:88:27:0C:91:CD:C7:A5:F2 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 17D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 17A8 Signing time: Tue 22 Sep 2026 16:31:08 +0000 Manifest this update: Tue 22 Sep 2026 16:31:08 +0000 Manifest next update: Tue 29 Sep 2026 16:31:08 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: M/TVqW0Nh0TeRqcuhewlvxjyQj2ZDzGcKUZ7w+u1Uek=) 2: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=) 3: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=) 4: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6100 (0x17d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Sep 22 16:31:08 2026 GMT Not After : Sep 29 16:31:08 2026 GMT Subject: CN=6ab2ad4c-b3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:5f:8c:bd:79:67:da:a7:a4:4e:77:dd:a3: aa:e0:e5:4a:85:16:ed:c2:5b:16:19:a3:fe:ab:a2: a8:a9:16:8f:47:a3:7d:dc:23:10:11:5f:9e:1e:cf: 69:cd:d1:80:29:97:e5:62:39:a3:52:c6:e7:8f:01: bf:c3:5f:e6:6d:72:56:29:8f:e3:e3:27:93:c6:47: 7b:f2:be:b4:24:4d:c4:dc:6a:47:46:b1:8b:db:e3: 81:3a:bb:23:75:dd:d2:69:8d:12:cd:eb:88:51:82: a2:70:bc:d4:27:c5:a5:3a:59:8e:5e:79:01:83:80: a8:b0:82:34:61:2b:16:d1:ea:b2:03:f3:f2:7b:af: 0a:88:2e:f7:a8:f3:f3:9e:a8:5d:ef:8c:65:4e:7f: 60:ff:a8:b5:68:9e:94:2f:d6:9e:cd:ba:ed:96:43: d1:91:f7:7c:69:78:f4:4c:d6:46:30:f5:84:a6:ab: 14:1a:c7:66:da:78:95:33:5f:c7:16:67:43:8a:98: 0c:e7:a8:05:5f:7b:3a:b2:18:6d:58:b1:2e:79:29: c7:e3:c7:25:07:ed:e2:c5:ad:b1:7a:85:42:ee:6a: 56:56:b8:73:e7:a8:38:f5:c3:c8:0f:3c:e1:17:28: 8a:5d:f4:c3:af:93:aa:ec:ed:a2:08:65:6e:6f:6c: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:31:11:AE:E4:0C:D2:F4:E3:CA:A8:04:88:27:0C:91:CD:C7:A5:F2 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:24:bf:ec:1a:ce:f3:1c:65:a3:4c:01:b8:d1:2c:58:64:6f: 51:e4:4d:65:a9:d1:2e:b7:f3:08:86:d2:a6:b9:d0:7c:63:43: d3:26:24:a5:bf:6c:3c:c2:e0:b3:36:40:c9:3d:c4:fd:6c:c3: 9b:c7:69:33:4b:b7:f6:c4:9a:03:14:81:bb:ee:1d:63:30:0d: d1:a3:cd:41:69:b8:30:7b:ad:5b:52:4b:1a:e5:74:db:0c:13: 72:8a:24:cf:ee:a8:30:02:8b:28:9b:64:f1:73:be:42:db:1d: 7c:70:1d:d9:84:c6:5b:3a:b0:10:48:96:d3:0b:77:60:48:6d: 42:da:fc:1d:ec:1a:52:fe:70:00:79:d0:e7:c4:58:e2:6b:0d: d5:08:78:f6:44:b2:da:e7:cf:4c:ce:85:d9:78:46:ce:f6:e1: 4d:54:ec:5e:65:8d:61:63:2b:73:f2:b3:3d:e0:74:0d:a0:72: 25:86:97:78:40:ea:2b:ab:2c:0f:a0:11:a5:a6:f1:44:9f:9b: f6:a0:f9:33:44:7c:e1:68:3a:8e:f1:4e:3d:e3:f6:13:f4:cb: 81:22:ad:63:bc:26:ae:92:1d:58:75:ed:96:30:7f:96:c9:cf: fc:5a:be:71:90:8d:f8:ba:14:10:c4:a0:6c:0b:31:28:77:99: b3:ab:78:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjYwOTIyMTYzMTA4WhcNMjYwOTI5MTYzMTA4WjAYMRYwFAYD VQQDEw02YWIyYWQ0Yy1iM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryJfjL15Z9qnpE533aOq4OVKhRbtwlsWGaP+q6KoqRaPR6N93CMQEV+eHs9p zdGAKZflYjmjUsbnjwG/w1/mbXJWKY/j4yeTxkd78r60JE3E3GpHRrGL2+OBOrsj dd3SaY0SzeuIUYKicLzUJ8WlOlmOXnkBg4CosII0YSsW0eqyA/Pye68KiC73qPPz nqhd74xlTn9g/6i1aJ6UL9aezbrtlkPRkfd8aXj0TNZGMPWEpqsUGsdm2niVM1/H FmdDipgM56gFX3s6shhtWLEueSnH48clB+3ixa2xeoVC7mpWVrhz56g49cPIDzzh FyiKXfTDr5Oq7O2iCGVub2x9lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMxEa7k DNL048qoBIgnDJHNx6XyMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkiS/7BrO8xxlo0wBuNEsWGRvUeRNZanRLrfzCIbSprnQfGND0yYkpb9sPMLg szZAyT3E/WzDm8dpM0u39sSaAxSBu+4dYzAN0aPNQWm4MHutW1JLGuV02wwTcook z+6oMAKLKJtk8XO+QtsdfHAd2YTGWzqwEEiW0wt3YEhtQtr8HewaUv5wAHnQ58RY 4msN1Qh49kSy2ufPTM6F2XhGzvbhTVTsXmWNYWMrc/KzPeB0DaByJYaXeEDqK6ss D6ARpabxRJ+b9qD5M0R84Wg6jvFOPeP2E/TLgSKtY7wmrpIdWHXtljB/lsnP/Fq+ cZCN+LoUEMSgbAsxKHeZs6t4Sg== -----END CERTIFICATE-----Generated at Thu Sep 24 11:29:03 2026 by rpki-client