$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: GrKNk68EMSuF0HzM/Y5Jflq8awctGHKB0L6NNvjqBs8= Subject key identifier: 0B:7A:09:92:DE:B8:B3:12:4C:E9:53:F8:6E:AB:47:27:B5:5D:FB:9E Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 01A9 Signing time: Tue 13 Oct 2026 04:43:53 +0000 Manifest this update: Tue 13 Oct 2026 04:43:52 +0000 Manifest next update: Tue 20 Oct 2026 04:43:52 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: B0iurAWkN4ylfTLztt+Q+MFqCTD7oQrYYVeRG1mo85A=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: sr4Cah733B97dhkxeL+rixTREcZ+VoyvCGgZsHawZaY=) 3: 863F0DD25A7111F1AAD3157ABD833773.roa (hash: XX+jIToyo9IFnK0I5bFVzqEt6Lm2ccIcYxfwAnhOJ78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 04:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Oct 13 04:43:52 2026 GMT Not After : Oct 20 04:43:52 2026 GMT Subject: CN=6acdb709-cb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:b2:c4:f7:7d:85:b9:cd:a4:5e:b9:41:82: 60:26:d7:d7:46:a1:b0:ae:7b:e1:76:bc:dd:ff:f6: e9:9f:4a:39:db:76:ff:6b:cf:71:fc:1e:45:1c:e9: 1f:d1:8e:0d:09:0a:14:d2:47:52:5c:12:c2:46:c4: 2c:4a:31:df:25:43:5d:4e:44:3b:45:ad:a3:c5:01: 92:91:aa:e9:6a:32:7e:ce:ba:db:a0:90:5a:8e:89: 1c:dd:2a:76:29:c1:69:46:2e:3e:a3:ad:bb:fe:96: 7d:f4:22:69:b6:62:9e:f5:8e:94:09:04:ed:7e:dd: 70:50:99:65:93:fa:4a:b9:90:68:be:29:85:25:c2: b2:1f:13:2a:86:53:20:91:1d:f6:ba:3c:78:f8:d1: 76:7c:68:7a:99:90:19:60:fc:3f:f1:45:16:ce:c2: 35:1c:17:33:a9:fc:ab:cc:f6:03:c6:b2:7c:1b:1a: c5:3d:5a:9f:a7:d6:33:9f:b3:5f:67:f0:5e:31:dd: 7f:85:b8:69:20:b3:cc:72:13:d3:5d:aa:2c:ba:60: b3:6f:33:b7:a7:37:11:2d:6b:d5:40:7c:7e:13:5a: 36:cb:80:5e:97:5d:74:fe:10:dc:41:85:7d:ab:40: 73:1b:35:37:ef:e0:0f:ce:e7:ed:3a:c2:8a:ce:43: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7A:09:92:DE:B8:B3:12:4C:E9:53:F8:6E:AB:47:27:B5:5D:FB:9E X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:ed:ab:41:86:33:0d:c1:8a:22:70:f3:f2:ce:00:a5:1c: cc:c5:05:74:d5:94:7d:79:b5:61:2c:21:79:d2:a0:a1:5f:e7: 73:46:a1:c1:97:ff:38:e2:52:18:cf:91:b8:8c:1e:99:0b:d7: dd:83:a4:26:79:fe:11:e9:2d:ce:70:26:76:06:8b:4c:72:08: 48:fb:1e:20:4f:b2:1a:3f:9a:fa:6a:89:c8:a8:5b:fa:e1:0f: 15:7a:b3:e6:e0:32:b7:6b:b5:9f:33:ec:6a:d6:91:2f:15:94: 42:d6:5f:28:b6:7b:61:2b:c6:f2:8f:8b:ed:ad:f5:df:35:c2: ba:3e:43:f4:b8:10:28:83:19:3c:8a:6e:c3:92:a3:74:57:ba: 7b:1e:a0:e2:e5:f6:e5:9d:07:f0:6a:ba:4b:cb:e7:87:0c:fa: c0:14:4d:ec:b6:d9:2a:7f:9b:47:98:b3:f0:9f:b4:0b:f1:e2: 00:88:2d:05:04:49:c2:8a:ee:01:b8:7c:1b:65:d5:65:27:9f: 57:55:61:dd:7d:cd:37:98:79:7d:bb:98:ed:f2:80:d7:8b:da: 18:19:b0:4c:09:ea:2b:8a:35:06:f2:89:2c:3d:d2:36:b2:61: 18:c7:63:e4:e0:2d:51:70:ca:e5:89:dc:b4:c6:eb:be:85:a8: 55:67:c8:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjYxMDEzMDQ0MzUyWhcNMjYxMDIwMDQ0MzUyWjAYMRYwFAYD VQQDEw02YWNkYjcwOS1jYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcqyxPd9hbnNpF65QYJgJtfXRqGwrnvhdrzd//bpn0o523b/a89x/B5FHOkf 0Y4NCQoU0kdSXBLCRsQsSjHfJUNdTkQ7Ra2jxQGSkarpajJ+zrrboJBajokc3Sp2 KcFpRi4+o627/pZ99CJptmKe9Y6UCQTtft1wUJllk/pKuZBovimFJcKyHxMqhlMg kR32ujx4+NF2fGh6mZAZYPw/8UUWzsI1HBczqfyrzPYDxrJ8GxrFPVqfp9Yzn7Nf Z/BeMd1/hbhpILPMchPTXaosumCzbzO3pzcRLWvVQHx+E1o2y4Bel110/hDcQYV9 q0BzGzU37+APzuftOsKKzkO0swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAt6CZLe uLMSTOlT+G6rRye1XfueMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmq7tq0GGMw3BiiJw8/LOAKUczMUFdNWUfXm1YSwhedKgoV/nc0ahwZf/OOJS GM+RuIwemQvX3YOkJnn+EektznAmdgaLTHIISPseIE+yGj+a+mqJyKhb+uEPFXqz 5uAyt2u1nzPsataRLxWUQtZfKLZ7YSvG8o+L7a313zXCuj5D9LgQKIMZPIpuw5Kj dFe6ex6g4uX25Z0H8Gq6S8vnhwz6wBRN7LbZKn+bR5iz8J+0C/HiAIgtBQRJworu Abh8G2XVZSefV1Vh3X3NN5h5fbuY7fKA14vaGBmwTAnqK4o1BvKJLD3SNrJhGMdj 5OAtUXDK5YnctMbrvoWoVWfIkA== -----END CERTIFICATE-----Generated at Wed Oct 14 04:43:44 2026 by rpki-client