$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: 7dypq1R07dl9qO3rph1N3CFcXShcknrr+/q9/5m1zg0= Subject key identifier: A9:E4:2C:46:1C:C0:6F:72:B1:9F:73:E3:CB:7B:E9:49:67:30:61:76 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 01FD Signing time: Fri 25 Sep 2026 03:17:47 +0000 Manifest this update: Fri 25 Sep 2026 03:17:47 +0000 Manifest next update: Fri 02 Oct 2026 03:17:47 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: gD2eR9FrZ3PpAWU1YSZoYObgfng0Z6K0vjVYgnSJtQ0=) 2: A5176822857711F1A76CF6B98AA30FBC.roa (hash: O/XAFsMoSkN7R/zuJmguUcR1phJvXalY/i9WhQwQI8g=) 3: BE42116AB76311EE81395B37C4F9AE02.roa (hash: WbVHpiD8F2T3FI/bwtUGHLi/kEkpiTlqVNo5rwJpXuA=) 4: 71FEBB84857711F18FAF10B98AA30FBC.roa (hash: NaP0K5S3pecUp/CUi1T5mH9PBjjPwLcXtf+dOiNICvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Sep 25 03:17:47 2026 GMT Not After : Oct 2 03:17:47 2026 GMT Subject: CN=6ab5e7db-b8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:08:3a:d2:51:f9:31:e9:7a:9d:8f:e9:4c: fa:00:54:6e:f6:37:49:0d:40:45:1c:f3:60:33:f1: 0a:ee:6f:9f:2d:30:c6:ef:b0:8a:7b:ab:72:5f:3e: 82:dd:69:aa:77:c9:92:d0:49:0d:03:96:1c:37:c8: 4f:15:80:4e:ff:89:06:17:4d:02:56:d7:5d:cc:3c: 9b:d9:93:3e:b4:aa:43:83:fc:91:a5:3c:35:d3:a9: 1d:33:58:9c:4b:33:37:90:d5:0c:6d:46:17:9e:40: 19:1c:e7:0c:ed:d9:9b:85:98:05:b8:6c:b5:a9:26: e5:f8:46:a2:ba:e2:ca:6c:ac:e7:cf:85:e4:3e:34: 7a:a8:df:80:a0:d1:47:a4:2f:3c:21:e2:bd:53:eb: 0c:dc:9c:b6:97:54:db:00:4d:24:16:02:fe:17:0c: b8:fd:cc:83:33:6c:65:4e:b1:79:eb:5b:c9:88:e6: ee:79:73:84:a2:ee:20:73:38:b5:86:2f:34:4a:a9: 60:1a:66:cb:8c:70:29:f6:d9:a3:f6:32:b8:b2:fd: 8a:b7:1a:60:ef:b8:e7:6a:89:1f:84:fb:c1:82:04: c1:bb:0a:4a:c0:05:9a:24:63:6d:ec:aa:35:37:b3: 4f:f3:14:5f:92:61:44:cd:9c:de:3e:f9:9f:f4:84: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:2C:46:1C:C0:6F:72:B1:9F:73:E3:CB:7B:E9:49:67:30:61:76 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:8a:73:9c:e1:ba:01:fb:ef:6a:64:b8:23:c5:8d:7f:6c: a9:25:63:70:5b:e8:8b:67:6e:fa:b3:a0:9f:7f:e7:71:64:6b: bb:fc:80:e7:ef:be:bf:39:8d:6e:0e:61:5e:02:55:9b:38:47: 8b:3e:6c:28:96:f3:e3:b6:e2:3d:3b:b3:6c:94:08:62:de:85: c0:bb:5a:90:5e:a3:12:61:3c:67:12:11:6e:52:e1:46:1a:d2: 9a:c1:37:60:37:75:95:63:22:1f:f4:87:e6:ae:57:de:59:07: b3:61:ac:25:0a:c9:6c:37:78:0e:f1:5f:7b:24:62:58:b7:f1: bf:1e:a9:24:e7:1f:37:c4:a4:02:20:6c:40:31:99:c8:45:9a: 9b:38:3e:a4:26:5a:94:d4:f1:e0:e2:1f:45:e8:09:33:ab:af: 97:ad:24:1d:91:ab:ad:bd:e5:4d:4c:8b:ba:ea:f9:5b:91:3d: 1f:05:a4:27:7d:60:ea:0d:96:1c:0a:50:8b:81:e4:f2:5a:2a: 94:09:fc:66:86:4c:b3:5e:79:ce:13:f6:0a:66:78:d2:81:2a: 75:66:5e:ef:7c:11:d5:7e:c4:b9:80:3e:55:8a:74:fc:6a:d6: 9f:85:d7:61:7b:4c:6b:e7:0e:57:9c:1e:8d:83:85:fa:27:2f: d9:fb:e6:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjYwOTI1MDMxNzQ3WhcNMjYxMDAyMDMxNzQ3WjAYMRYwFAYD VQQDEw02YWI1ZTdkYi1iOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JIIOtJR+THpep2P6Uz6AFRu9jdJDUBFHPNgM/EK7m+fLTDG77CKe6tyXz6C 3Wmqd8mS0EkNA5YcN8hPFYBO/4kGF00CVtddzDyb2ZM+tKpDg/yRpTw106kdM1ic SzM3kNUMbUYXnkAZHOcM7dmbhZgFuGy1qSbl+EaiuuLKbKznz4XkPjR6qN+AoNFH pC88IeK9U+sM3Jy2l1TbAE0kFgL+Fwy4/cyDM2xlTrF561vJiObueXOEou4gczi1 hi80SqlgGmbLjHAp9tmj9jK4sv2Ktxpg77jnaokfhPvBggTBuwpKwAWaJGNt7Ko1 N7NP8xRfkmFEzZzePvmf9IRQtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnkLEYc wG9ysZ9z48t76UlnMGF2MB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdH6Kc5zhugH772pkuCPFjX9sqSVjcFvoi2du+rOgn3/ncWRru/yA5+++vzmN bg5hXgJVmzhHiz5sKJbz47biPTuzbJQIYt6FwLtakF6jEmE8ZxIRblLhRhrSmsE3 YDd1lWMiH/SH5q5X3lkHs2GsJQrJbDd4DvFfeyRiWLfxvx6pJOcfN8SkAiBsQDGZ yEWamzg+pCZalNTx4OIfRegJM6uvl60kHZGrrb3lTUyLuur5W5E9HwWkJ31g6g2W HApQi4Hk8loqlAn8ZoZMs155zhP2CmZ40oEqdWZe73wR1X7EuYA+VYp0/GrWn4XX YXtMa+cOV5wejYOF+icv2fvmBg== -----END CERTIFICATE-----Generated at Fri Sep 25 14:19:11 2026 by rpki-client