$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json) Hash identifier: VGxiEB5XbjpJ4opqzYmm38/ZD8KcglRdLAnhHakCiso= Subject key identifier: 1A:45:C6:52:1B:18:98:D3:3B:6B:4F:39:6B:62:C8:3E:3B:46:AC:F0 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft Manifest number: 034F Signing time: Wed 23 Sep 2026 00:36:59 +0000 Manifest this update: Wed 23 Sep 2026 00:36:59 +0000 Manifest next update: Wed 30 Sep 2026 00:36:59 +0000 Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: 8FdBlQdRNx81Ej5R4aZKIAIJLYDR4F8jNNeoDcuq5YY=) 2: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: TnTPauZII3K7TfOUqxleA9AY3NzIglaVPhckpoVW1/I=) 3: E1870478616C11F0A254E10BC4F9AE02.roa (hash: oq06Ek9BQj7PaMP2LtH4mjtGP4PZC7d3iMaw2jyoC9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Sep 23 00:36:59 2026 GMT Not After : Sep 30 00:36:59 2026 GMT Subject: CN=6ab31f2b-6599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:fc:e4:da:90:10:44:83:7c:80:41:0b:a0: 21:ae:51:f6:70:ca:1a:5d:3c:56:2f:35:b2:80:48: e9:1a:19:5f:57:fa:ca:09:65:4f:2d:90:12:36:c6: 2a:32:b7:57:53:a2:da:98:dc:d8:53:0a:2b:1b:5d: 54:86:da:ae:28:7f:5e:d7:8a:f9:a8:66:82:b8:7d: 08:24:8f:f6:e7:cd:a5:50:00:00:0e:02:3a:41:32: fb:a2:7a:56:41:ed:3a:7b:87:b3:e4:5a:eb:24:ab: 58:81:88:25:a0:d2:26:28:19:90:1a:0c:e5:0b:64: 4f:99:b0:13:45:6a:b0:79:99:f6:cd:17:fd:d5:f9: 67:78:2f:1a:9f:3b:b3:5e:4f:29:a6:4a:57:16:81: 75:16:8e:22:fe:a2:0f:12:58:fd:15:7b:39:07:40: 1e:bd:e3:3e:88:f3:70:5f:4a:22:66:59:1d:9a:13: 38:17:81:21:e9:ee:85:38:66:a2:c0:69:2e:75:bd: 49:18:4b:74:06:4b:4a:8e:45:43:93:9b:e7:71:ad: ab:b4:72:9f:92:cf:85:a7:27:36:eb:de:00:af:21: ef:77:d0:8f:50:57:f7:1c:e7:43:7f:c4:49:b3:13: 9e:ce:0c:07:5a:b1:27:4f:9f:50:15:36:9b:71:83: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:45:C6:52:1B:18:98:D3:3B:6B:4F:39:6B:62:C8:3E:3B:46:AC:F0 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c9:d1:54:f4:a2:96:42:76:14:a5:db:4c:df:c4:cc:2a:a1: a5:d7:34:e0:6d:98:57:10:66:84:20:aa:e7:11:62:c6:f0:4e: ec:20:ed:c9:9a:80:8d:e3:a7:5a:ea:17:3e:69:d8:ff:17:07: c8:cd:54:c4:f1:d2:70:0c:6e:49:06:cd:28:9c:d8:c3:49:8c: 6a:c3:74:9c:14:f5:0f:c7:07:a0:b8:e4:54:50:26:97:95:74: 93:74:e9:d3:92:46:90:96:f4:3c:8d:92:3c:27:5a:4f:22:8d: 13:a0:46:8b:12:46:fd:32:b8:b4:49:e8:2e:c8:5d:ca:aa:6e: 11:9d:a3:f7:73:5a:fa:4d:ce:a3:9a:f2:33:6f:2b:fe:c6:f7: 52:f4:37:70:9e:67:93:80:e8:34:7a:2b:c6:6b:bf:b0:8d:39: fe:c9:ce:72:f8:d2:78:07:04:cf:e4:e3:90:8a:d4:c3:80:0a: af:da:a6:ba:13:60:77:d8:11:99:d8:bf:fc:51:47:92:9e:b1: b0:d2:70:fa:cb:8a:bd:17:fd:1b:27:12:2e:e8:b2:4c:bb:ae: 74:cb:cc:50:6c:96:f8:14:a1:f5:17:16:81:6c:66:74:df:8e: 5b:af:a1:a3:3c:60:0d:5d:93:a2:d4:ac:15:bf:76:31:8b:a1: e3:a6:ed:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjYwOTIzMDAzNjU5WhcNMjYwOTMwMDAzNjU5WjAYMRYwFAYD VQQDEw02YWIzMWYyYi02NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWX85NqQEESDfIBBC6AhrlH2cMoaXTxWLzWygEjpGhlfV/rKCWVPLZASNsYq MrdXU6LamNzYUworG11UhtquKH9e14r5qGaCuH0IJI/2582lUAAADgI6QTL7onpW Qe06e4ez5FrrJKtYgYgloNImKBmQGgzlC2RPmbATRWqweZn2zRf91flneC8anzuz Xk8ppkpXFoF1Fo4i/qIPElj9FXs5B0AeveM+iPNwX0oiZlkdmhM4F4Eh6e6FOGai wGkudb1JGEt0BktKjkVDk5vnca2rtHKfks+Fpyc2694AryHvd9CPUFf3HOdDf8RJ sxOezgwHWrEnT59QFTabcYPplQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpFxlIb GJjTO2tPOWtiyD47RqzwMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o Y1JzQUp6SlFSR19odEpPTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtMnRVPSilkJ2FKXbTN/EzCqhpdc04G2YVxBmhCCq5xFixvBO7CDtyZqAjeOn WuoXPmnY/xcHyM1UxPHScAxuSQbNKJzYw0mMasN0nBT1D8cHoLjkVFAml5V0k3Tp 05JGkJb0PI2SPCdaTyKNE6BGixJG/TK4tEnoLshdyqpuEZ2j93Na+k3Oo5ryM28r /sb3UvQ3cJ5nk4DoNHorxmu/sI05/snOcvjSeAcEz+TjkIrUw4AKr9qmuhNgd9gR mdi//FFHkp6xsNJw+suKvRf9GycSLuiyTLuudMvMUGyW+BSh9RcWgWxmdN+OW6+h ozxgDV2TotSsFb92MYuh46btEg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:19:47 2026 by rpki-client