$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: r4VR6MVuSAUuIag4ZG9fTqc8ZkPpDDZb3qFhMoZksgo= Subject key identifier: DA:5C:D1:67:1E:E7:A4:EE:88:FA:4B:2A:D1:99:F1:56:8A:11:24:88 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 13CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 13B9 Signing time: Tue 22 Sep 2026 16:51:57 +0000 Manifest this update: Tue 22 Sep 2026 16:51:56 +0000 Manifest next update: Tue 29 Sep 2026 16:51:56 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: FdAUzzUVJeVMVBdhLXwjxq+TFd2QGPSO8KlDL1vVa7I=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: JG3g9iT9w5QR/B1gPw603a4JI5sRtUQE35PEFNou9hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5066 (0x13ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Sep 22 16:51:56 2026 GMT Not After : Sep 29 16:51:56 2026 GMT Subject: CN=6ab2b22d-9648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:98:b1:aa:db:68:7e:83:a5:68:8b:27:93: d0:33:f0:de:17:9a:fc:60:01:cf:18:b4:df:e3:5a: c3:f3:b5:e3:3f:c2:b9:c1:ba:95:f8:7f:33:06:2a: 20:93:ab:ed:b9:50:dc:2c:d2:f8:3f:5e:4e:29:ee: 05:bc:69:2e:42:1b:1a:6b:93:d9:bf:c1:bd:80:13: 14:5d:71:4c:2f:e9:fd:c2:c1:ec:58:32:38:a6:58: 91:3f:33:e6:d2:3b:cf:2a:4d:a1:10:03:e7:c3:15: 95:ed:ea:94:9c:e9:66:4e:19:73:86:78:c0:2a:3b: f5:5f:46:9f:0b:67:f5:20:da:d8:0c:42:f5:71:c6: af:15:7f:c2:ba:72:dc:eb:1c:49:66:4b:52:d7:3f: b3:2d:67:61:0e:42:9d:a0:0f:06:51:82:0b:a8:c6: 86:27:2a:24:0c:d3:30:ee:6d:40:b4:71:b2:7b:15: 0a:b2:6f:f3:8e:ba:30:71:5d:6f:5e:8d:1a:94:0b: 7a:c9:40:a6:ef:cc:32:61:d9:81:8f:e2:07:0c:74: 41:42:5b:f3:72:e2:06:98:f7:7c:7f:90:9a:2e:47: 05:d3:5e:39:84:73:95:a4:08:1e:6b:4e:8c:b9:7b: 00:f9:67:57:38:ef:20:8b:db:82:56:b9:ae:7f:00: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:D1:67:1E:E7:A4:EE:88:FA:4B:2A:D1:99:F1:56:8A:11:24:88 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:8f:83:61:12:f4:ec:db:cb:ed:2b:e9:c1:b9:97:0e:63: c3:b0:0c:d1:9b:58:5c:cb:1a:16:04:56:8f:4a:b7:0b:28:2d: 84:92:b8:33:15:6f:c5:15:ec:3a:8a:40:32:05:06:17:59:91: 20:87:1a:fe:e3:5b:5e:f2:34:5d:b8:34:21:f3:10:e3:9d:c9: 09:99:65:a7:78:66:2c:63:80:d8:ab:a3:e4:b2:39:81:a2:03: a5:9f:7c:35:82:49:19:75:ad:f9:cd:1e:f1:38:aa:ac:34:30: a3:c2:2f:fb:cf:41:6a:66:01:68:a8:cf:31:91:53:c7:10:d9: 56:09:7f:80:28:a5:fb:5d:14:e5:67:25:94:11:c3:46:75:c0: 85:02:1d:a2:d6:32:f5:28:9b:80:d8:83:84:69:5e:a4:dd:37: f5:d2:bc:f3:ce:e7:87:99:9f:fe:7f:f6:d5:70:f7:c7:ac:81: 37:ba:51:c7:f9:d2:fa:4e:be:ca:aa:49:b8:34:d4:10:92:54: 03:69:f2:a0:cc:9a:2b:0a:79:08:20:9a:ed:b8:6e:23:ad:a9: 75:0e:0a:46:0f:e4:a7:b0:2a:f4:bd:93:0f:bb:9f:44:ee:93: c1:39:5c:b2:de:78:73:cc:be:a8:2a:de:cc:42:4f:db:fa:ff: 2b:48:f8:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjYwOTIyMTY1MTU2WhcNMjYwOTI5MTY1MTU2WjAYMRYwFAYD VQQDEw02YWIyYjIyZC05NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKiYsarbaH6DpWiLJ5PQM/DeF5r8YAHPGLTf41rD87XjP8K5wbqV+H8zBiog k6vtuVDcLNL4P15OKe4FvGkuQhsaa5PZv8G9gBMUXXFML+n9wsHsWDI4pliRPzPm 0jvPKk2hEAPnwxWV7eqUnOlmThlzhnjAKjv1X0afC2f1INrYDEL1ccavFX/CunLc 6xxJZktS1z+zLWdhDkKdoA8GUYILqMaGJyokDNMw7m1AtHGyexUKsm/zjrowcV1v Xo0alAt6yUCm78wyYdmBj+IHDHRBQlvzcuIGmPd8f5CaLkcF0145hHOVpAgea06M uXsA+WdXOO8gi9uCVrmufwADqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpc0Wce 56TuiPpLKtGZ8VaKESSIMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkImPg2ES9Ozby+0r6cG5lw5jw7AM0ZtYXMsaFgRWj0q3CygthJK4MxVvxRXs OopAMgUGF1mRIIca/uNbXvI0Xbg0IfMQ453JCZllp3hmLGOA2Kuj5LI5gaIDpZ98 NYJJGXWt+c0e8TiqrDQwo8Iv+89BamYBaKjPMZFTxxDZVgl/gCil+10U5WcllBHD RnXAhQIdotYy9SibgNiDhGlepN039dK8887nh5mf/n/21XD3x6yBN7pRx/nS+k6+ yqpJuDTUEJJUA2nyoMyaKwp5CCCa7bhuI62pdQ4KRg/kp7Aq9L2TD7ufRO6TwTlc st54c8y+qCrezEJP2/r/K0j4Sg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:25:24 2026 by rpki-client