$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: Bgj5Clbkuf8uBpbgoSp8M/tjQgkUHw9cslVztZBAILU= Subject key identifier: A5:0C:8E:3A:55:76:41:97:27:93:65:1C:B7:8B:61:B5:F7:16:37:03 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 6F Signing time: Fri 25 Sep 2026 08:05:13 +0000 Manifest this update: Fri 25 Sep 2026 08:05:12 +0000 Manifest next update: Fri 02 Oct 2026 08:05:12 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: c60QNsZZxgG27JncUjiRz4AQ8EtkbP/rt9d10QDyASA=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Sep 25 08:05:12 2026 GMT Not After : Oct 2 08:05:12 2026 GMT Subject: CN=6ab62b39-7aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:24:d6:98:22:b1:06:a6:ed:79:87:5a:e3: 71:5a:09:fb:26:86:6c:92:f9:f7:c6:9e:b7:28:bc: a5:14:66:4b:68:68:3c:fd:7b:9d:65:b2:12:2b:08: 3a:d2:e1:8d:cb:f8:8f:cf:1a:86:85:a4:03:f5:4c: 63:5f:02:94:73:8c:de:de:14:31:b6:97:f3:2b:e2: 2e:14:c6:2d:6a:22:52:5b:66:86:61:96:e0:8f:d0: 8e:65:08:72:6b:73:ae:39:e3:cf:f8:f3:82:5b:d6: be:e4:3d:74:61:67:a2:71:4c:1d:b4:cf:92:db:f3: 8e:25:c0:70:bc:0f:6e:15:0a:12:f0:9b:aa:c5:7b: cb:a6:6f:cf:f4:53:6b:0b:f1:95:8d:44:d6:97:ba: 45:05:d1:15:32:1c:a1:4c:60:ba:e6:b3:87:5f:8f: 1f:82:17:b7:52:e9:0b:ef:35:99:52:22:74:96:43: 0a:db:54:73:d5:d2:43:4a:44:cf:7d:de:14:b8:31: ab:e9:b2:99:cb:8e:f9:f2:90:ef:d9:f4:09:bd:ba: e4:94:c4:6a:3b:eb:6a:0e:85:da:a6:61:d4:3f:d2: 98:86:ca:12:34:0d:c0:f4:29:fe:14:24:46:db:9a: f8:2d:16:cf:70:6a:fe:64:2f:45:2e:cf:e4:0a:37: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:8E:3A:55:76:41:97:27:93:65:1C:B7:8B:61:B5:F7:16:37:03 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:dd:d0:db:71:c1:5f:f9:e6:88:a6:4d:00:84:8c:62:09: e7:92:ff:34:30:9a:e8:fd:c5:6a:6f:60:77:25:f7:43:97:05: 5e:d8:9a:b4:e3:d6:0b:34:9b:60:74:b7:73:db:97:d2:1d:fa: bc:b6:28:36:0c:f9:6f:0c:7f:9d:2c:73:9a:e9:b1:4e:50:2d: 6f:2d:32:cd:2d:17:fc:a8:22:07:74:f0:dd:c8:90:eb:21:8c: 3d:96:ef:f5:c2:f8:4a:aa:89:8e:f9:d0:c2:aa:0d:bc:b9:bc: fd:3b:5f:33:70:6f:5d:fa:1b:f4:e5:af:b2:f7:58:3f:59:3e: 62:48:b5:a6:8d:77:e3:bd:ae:8f:df:7e:72:a1:d0:0c:d4:46: 7b:9e:fc:d9:38:10:c1:e3:0a:68:6b:8c:4d:60:6f:69:81:a0: 88:3e:14:7a:dc:80:41:46:5c:00:68:8e:e8:ea:9d:b4:12:73: 78:04:7a:74:51:87:e0:3d:fe:23:ac:ea:4f:2b:b1:e1:a0:95: 11:fa:66:06:e6:e7:68:bb:5e:7f:0e:5d:72:89:ab:a5:b4:89: 01:c3:ce:e3:0d:be:dc:47:13:8b:e3:55:cb:05:11:5b:74:d7: b9:48:99:00:41:28:3d:84:7e:00:8f:d8:3d:71:67:ac:18:a8: ad:31:12:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjA5MjUwODA1MTJaFw0yNjEwMDIwODA1MTJaMBgxFjAUBgNV BAMTDTZhYjYyYjM5LTdhYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFiiTWmCKxBqbteYda43FaCfsmhmyS+ffGnrcovKUUZktoaDz9e51lshIrCDrS 4Y3L+I/PGoaFpAP1TGNfApRzjN7eFDG2l/Mr4i4Uxi1qIlJbZoZhluCP0I5lCHJr c64548/484Jb1r7kPXRhZ6JxTB20z5Lb844lwHC8D24VChLwm6rFe8umb8/0U2sL 8ZWNRNaXukUF0RUyHKFMYLrms4dfjx+CF7dS6QvvNZlSInSWQwrbVHPV0kNKRM99 3hS4MavpspnLjvnykO/Z9Am9uuSUxGo762oOhdqmYdQ/0piGyhI0DcD0Kf4UJEbb mvgtFs9wav5kL0Uuz+QKN4CVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpQyOOlV2 QZcnk2Uct4thtfcWNwMwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnL93Q23HBX/nmiKZNAISMYgnnkv80MJro/cVqb2B3JfdDlwVe2Jq049YLNJtg dLdz25fSHfq8tig2DPlvDH+dLHOa6bFOUC1vLTLNLRf8qCIHdPDdyJDrIYw9lu/1 wvhKqomO+dDCqg28ubz9O18zcG9d+hv05a+y91g/WT5iSLWmjXfjva6P335yodAM 1EZ7nvzZOBDB4wpoa4xNYG9pgaCIPhR63IBBRlwAaI7o6p20EnN4BHp0UYfgPf4j rOpPK7HhoJUR+mYG5udou15/Dl1yiaultIkBw87jDb7cRxOL41XLBRFbdNe5SJkA QSg9hH4Aj9g9cWesGKitMRKx -----END CERTIFICATE-----Generated at Sun Sep 27 08:01:52 2026 by rpki-client