$ rpki-client -vvvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft File: JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json) Hash identifier: IFk5+hSEIZWiD1O7dFphaZivmxfk/XJfAMcByjL6b7s= Subject key identifier: 6D:DD:F6:16:E6:AD:60:34:FF:22:78:40:37:ED:05:3C:FA:0C:FB:4E Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft Manifest number: 011D Signing time: Fri 25 Sep 2026 05:59:47 +0000 Manifest this update: Fri 25 Sep 2026 05:59:47 +0000 Manifest next update: Fri 02 Oct 2026 05:59:47 +0000 Files and hashes: 1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: rNtr8ijcCfTPlCSB9fWwaBMpsabEfS3iVmxOMYvWsiY=) 2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Validity Not Before: Sep 25 05:59:47 2026 GMT Not After : Oct 2 05:59:47 2026 GMT Subject: CN=6ab60dd3-2a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:68:9b:09:93:c8:43:8a:73:30:dd:aa:39: 31:d5:d1:cf:7e:8d:cc:37:c7:9e:d0:b8:05:f6:68: e9:2b:f8:cb:ce:67:c3:73:4e:96:45:a7:58:e8:09: 22:2a:56:2e:e4:14:e9:4f:42:b2:05:7a:6b:79:f1: 2c:be:ff:7b:c1:13:c3:3b:21:38:4a:a3:6a:52:21: f5:8e:68:d2:f6:4e:6f:3b:02:31:a1:6f:c7:95:7b: 38:77:ea:43:e5:c7:76:07:fb:a1:91:40:ca:80:d8: 5d:d6:66:9b:b6:b1:16:70:97:89:91:04:43:2d:b9: 7b:48:20:a4:79:74:92:0d:2e:78:c4:32:8a:e5:29: 7d:b2:c9:d6:a2:ae:77:33:b6:4f:0a:78:c8:8d:e4: 4f:5a:f9:7a:2a:2a:82:c9:8b:32:6f:79:41:3a:43: 99:e2:af:3b:7a:3c:e6:23:ef:42:5f:f5:93:a4:bf: 85:ad:b2:a1:b4:27:45:2a:ed:6e:ce:a5:25:ac:7e: 13:4e:1c:86:c4:f8:cf:7d:b8:4a:7a:9f:91:9e:3b: f2:b8:8b:00:8a:3d:f6:04:48:f9:cd:4e:2f:6b:b3: 7d:0c:f3:ef:b4:c1:28:22:bb:b4:df:97:ab:de:73: d2:46:74:d2:7e:ed:3c:d7:e5:65:4c:98:42:0b:90: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:F6:16:E6:AD:60:34:FF:22:78:40:37:ED:05:3C:FA:0C:FB:4E X509v3 Authority Key Identifier: keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:27:ae:0d:e1:cf:cc:ad:5f:e6:2e:61:8a:13:22:b0:00: 12:25:11:bd:f2:9d:17:2c:66:b4:ff:57:87:a5:69:6a:da:4e: 12:a1:cb:a1:da:a3:86:7a:99:67:b9:c2:08:71:f3:63:ba:f7: 85:42:b3:5f:ba:39:8f:ad:ef:da:ae:81:25:2b:9e:f5:fa:fb: 57:0b:67:7f:9a:7a:07:d0:24:64:c5:35:81:6c:12:9c:ee:2e: 3f:16:19:65:d6:f7:07:02:ab:2b:8d:d2:12:9f:05:68:b6:99: 54:47:68:b4:db:a5:e1:f4:f2:d5:f7:32:ab:88:0a:9a:8b:8e: 15:04:f2:df:9c:48:d0:59:db:72:ca:72:7d:c0:d2:bc:f5:ef: 69:46:ab:f0:ea:08:78:d7:c5:0a:ce:23:ec:5f:9e:3f:97:74: 43:7b:51:74:66:40:77:4b:24:c0:39:e7:ec:6f:a4:52:e2:2e: f2:11:b5:9c:e0:1a:73:ee:bc:c0:39:90:0f:86:7b:76:7d:9a: a8:a5:0c:6f:ba:48:3c:c6:6e:f8:7c:cb:a4:a0:7f:52:75:8a: ec:3f:25:33:4c:8d:6a:69:a7:80:ed:3a:f4:5e:5e:9b:1d:8b: 25:fb:d0:2d:79:06:08:56:48:d3:7a:7d:4c:5f:7e:53:69:d7: 59:99:f6:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1 RjUzQzVEMDkwHhcNMjYwOTI1MDU1OTQ3WhcNMjYxMDAyMDU1OTQ3WjAYMRYwFAYD VQQDEw02YWI2MGRkMy0yYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9pomwmTyEOKczDdqjkx1dHPfo3MN8ee0LgF9mjpK/jLzmfDc06WRadY6Aki KlYu5BTpT0KyBXprefEsvv97wRPDOyE4SqNqUiH1jmjS9k5vOwIxoW/HlXs4d+pD 5cd2B/uhkUDKgNhd1mabtrEWcJeJkQRDLbl7SCCkeXSSDS54xDKK5Sl9ssnWoq53 M7ZPCnjIjeRPWvl6KiqCyYsyb3lBOkOZ4q87ejzmI+9CX/WTpL+FrbKhtCdFKu1u zqUlrH4TThyGxPjPfbhKep+RnjvyuIsAij32BEj5zU4va7N9DPPvtMEoIru035er 3nPSRnTSfu081+VlTJhCC5Ce9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3d9hbm rWA0/yJ4QDftBTz6DPtOMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDQy9CREQ0QUYzQzBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3 TEhyRDBwQVQ2UTFmVThYUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFknrg3hz8ytX+YuYYoTIrAAEiURvfKdFyxmtP9Xh6VpatpOEqHLodqjhnqZ Z7nCCHHzY7r3hUKzX7o5j63v2q6BJSue9fr7Vwtnf5p6B9AkZMU1gWwSnO4uPxYZ Zdb3BwKrK43SEp8FaLaZVEdotNul4fTy1fcyq4gKmouOFQTy35xI0FnbcspyfcDS vPXvaUar8OoIeNfFCs4j7F+eP5d0Q3tRdGZAd0skwDnn7G+kUuIu8hG1nOAac+68 wDmQD4Z7dn2aqKUMb7pIPMZu+HzLpKB/UnWK7D8lM0yNammngO069F5emx2LJfvQ LXkGCFZI03p9TF9+U2nXWZn2/g== -----END CERTIFICATE-----Generated at Sat Sep 26 02:42:56 2026 by rpki-client