$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: 5/doh20ctM2jmv102rmI3i6tE9OvuwIPwTGCNru0ZTg= Subject key identifier: F4:D0:0F:52:EB:CD:B0:DA:BB:0D:73:DD:D2:4F:6C:36:BE:ED:B5:A4 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0381 Signing time: Fri 25 Sep 2026 00:35:47 +0000 Manifest this update: Fri 25 Sep 2026 00:35:47 +0000 Manifest next update: Fri 02 Oct 2026 00:35:47 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: Xu6UugLV46fM2E//Oy8FbqGQbtD2NEvG5Lr7At955cw=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Sep 25 00:35:47 2026 GMT Not After : Oct 2 00:35:47 2026 GMT Subject: CN=6ab5c1e3-acbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:4b:b0:e3:ce:b0:f5:b4:2e:39:c1:f8:d0: 83:68:df:96:fd:5f:a4:ca:f7:96:c6:6a:a1:de:a9: e7:dc:d9:02:e8:66:05:2a:c7:a3:ec:04:31:84:5c: 1c:16:fa:5c:e6:06:6d:1d:90:25:d2:87:d4:56:f0: fa:28:a7:fb:9a:e6:7b:1c:43:a2:66:b9:c0:6d:f9: 30:e7:b5:ee:89:12:8c:f2:bd:cc:00:86:e1:6a:ad: 1d:5c:ce:13:3d:00:b6:e7:fd:d1:87:f9:3a:20:fb: d0:75:82:12:65:8d:80:08:32:c0:d5:57:53:da:ba: d7:07:ce:cc:98:14:f2:3e:dc:04:84:fb:ca:70:9f: 8e:0f:59:6a:d9:30:39:96:68:4e:f7:25:bc:20:0c: 8e:08:87:0e:37:83:53:64:88:23:61:bd:83:f0:a3: 22:ee:b0:7d:b2:5d:2a:48:bf:9d:f6:31:55:eb:01: be:ba:2b:be:d7:b5:98:d5:25:4f:a0:b5:f9:0a:8a: 6a:e0:db:ef:14:d3:8a:1f:87:0a:f6:06:c2:78:d3: 29:87:04:50:60:fd:fc:ae:cd:e8:bb:8c:55:a9:1b: 91:a8:5e:4e:4f:ff:01:bf:1d:0d:6f:21:34:72:52: 71:60:e7:f7:5e:96:a0:6d:4e:9d:48:de:18:8b:04: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:0F:52:EB:CD:B0:DA:BB:0D:73:DD:D2:4F:6C:36:BE:ED:B5:A4 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:e1:20:29:d6:96:e8:8d:72:fe:bd:0c:cd:69:83:6e:a1:26: d0:79:e0:88:36:33:99:57:4d:35:02:50:61:b8:52:f9:9c:98: e7:72:b7:3a:9a:7a:d9:96:30:52:1c:4c:e8:f7:0a:5a:a5:bb: ec:7d:0a:8f:55:16:30:50:4d:b0:c7:ca:70:03:f7:e9:0a:00: eb:7b:ff:be:0b:f7:bb:46:f6:c5:3c:ff:f1:36:83:94:f3:85: a2:77:2b:42:96:67:0b:fb:99:2e:fe:74:69:c9:ba:e9:f3:ea: fa:68:ef:63:0c:c5:0b:fc:04:cd:6c:3b:55:54:72:a2:bc:cc: 2f:df:35:db:77:a4:bc:a6:90:67:8b:6e:6b:65:65:f7:28:34: 18:3a:95:12:b0:77:a7:a8:1c:a1:8a:da:e3:c7:3d:ae:3b:58: 61:40:ab:94:5e:d7:4b:4b:01:24:bf:7f:70:95:b9:f6:0e:dc: 4a:fa:eb:f6:88:f0:38:82:8a:87:ed:11:e6:e8:b4:ac:49:09: 83:bb:18:74:85:a0:63:29:11:46:ed:0e:3f:7f:a4:59:e9:43: f2:83:ed:ad:21:05:ca:c2:aa:76:b1:f7:39:d4:41:36:c0:50: 34:47:c3:67:a9:3f:61:86:6e:d0:38:71:40:88:83:a3:54:f8: 2e:bd:22:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwOTI1MDAzNTQ3WhcNMjYxMDAyMDAzNTQ3WjAYMRYwFAYD VQQDEw02YWI1YzFlMy1hY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKBLsOPOsPW0LjnB+NCDaN+W/V+kyveWxmqh3qnn3NkC6GYFKsej7AQxhFwc Fvpc5gZtHZAl0ofUVvD6KKf7muZ7HEOiZrnAbfkw57XuiRKM8r3MAIbhaq0dXM4T PQC25/3Rh/k6IPvQdYISZY2ACDLA1VdT2rrXB87MmBTyPtwEhPvKcJ+OD1lq2TA5 lmhO9yW8IAyOCIcON4NTZIgjYb2D8KMi7rB9sl0qSL+d9jFV6wG+uiu+17WY1SVP oLX5Copq4NvvFNOKH4cK9gbCeNMphwRQYP38rs3ou4xVqRuRqF5OT/8Bvx0NbyE0 clJxYOf3XpagbU6dSN4YiwT2nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTQD1Lr zbDauw1z3dJPbDa+7bWkMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA9uEgKdaW6I1y/r0MzWmDbqEm0HngiDYzmVdNNQJQYbhS+ZyY53K3Opp62ZYw UhxM6PcKWqW77H0Kj1UWMFBNsMfKcAP36QoA63v/vgv3u0b2xTz/8TaDlPOFoncr QpZnC/uZLv50acm66fPq+mjvYwzFC/wEzWw7VVRyorzML98123ekvKaQZ4tua2Vl 9yg0GDqVErB3p6gcoYra48c9rjtYYUCrlF7XS0sBJL9/cJW59g7cSvrr9ojwOIKK h+0R5ui0rEkJg7sYdIWgYykRRu0OP3+kWelD8oPtrSEFysKqdrH3OdRBNsBQNEfD Z6k/YYZu0DhxQIiDo1T4Lr0ihQ== -----END CERTIFICATE-----Generated at Fri Sep 25 09:10:53 2026 by rpki-client