$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: gSDISXZq19xfi26CgVD/ezHu/xHMHl5cBhsfm/cBev4= Subject key identifier: 24:00:8A:51:63:58:F0:5D:69:27:FE:D8:EC:42:3F:BA:87:1D:50:8C Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: F5 Signing time: Wed 23 Sep 2026 06:06:05 +0000 Manifest this update: Wed 23 Sep 2026 06:06:04 +0000 Manifest next update: Wed 30 Sep 2026 06:06:04 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: Sf7TsumcLH5he2TEOwwftR9D7dRhePcLEjnwY6g1fNY=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Sep 23 06:06:04 2026 GMT Not After : Sep 30 06:06:04 2026 GMT Subject: CN=6ab36c4d-77ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:f4:c3:af:e6:60:d3:76:11:40:11:c8:aa: e9:24:d3:3b:e6:e2:2a:1f:ef:83:c4:e9:b8:92:51: 66:ca:e6:ae:d2:40:b4:fd:db:4a:d0:10:8a:fc:0e: 17:f2:a3:1f:3e:a0:5a:66:66:19:ca:bd:d7:48:75: ab:77:29:f5:2b:f4:1b:41:c2:30:19:b4:79:a9:ed: 0f:4d:48:6c:15:a1:98:ec:0f:62:67:b6:08:41:39: 1e:fe:05:ea:03:de:ad:96:07:0c:36:f6:11:a0:34: 2e:36:ed:86:89:41:7b:f8:3f:87:fc:9c:e9:e3:7b: e4:f2:77:51:f0:aa:ab:c7:cc:71:4d:66:36:f1:5d: 42:f2:39:ee:94:8b:f7:9f:06:8f:61:cf:d6:71:96: 76:f9:f9:e0:61:bd:fb:bd:78:66:59:4f:af:b5:8b: 46:fd:86:d4:19:f9:d1:7a:de:ca:a0:0f:48:5b:e8: 74:26:cd:26:69:49:df:fe:4c:bf:4f:10:41:b6:75: c4:ae:6f:ee:2f:3b:fa:61:e0:3e:ab:39:27:81:fe: 1f:96:5d:9c:38:55:13:15:e0:21:86:73:10:cf:45: 8a:50:32:27:7b:33:30:5d:1a:dc:b8:0f:3d:29:68: 29:ab:de:00:2f:85:94:d6:a4:f3:2a:2b:ca:72:79: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:8A:51:63:58:F0:5D:69:27:FE:D8:EC:42:3F:BA:87:1D:50:8C X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:3c:ef:89:36:30:a5:41:96:ec:a1:5d:93:bc:d3:97:cd: 98:41:34:6c:0c:90:c0:d5:09:2f:f4:34:a2:10:53:70:dc:f0: b1:3f:e1:f9:bb:6c:7c:41:24:38:1a:a4:bd:12:9b:47:4a:0e: a1:ae:42:52:74:2f:55:f5:9a:36:3b:40:d9:40:1f:9f:5c:b0: 02:b4:47:65:ca:9f:50:1f:d5:e1:c7:e1:4b:63:40:3d:b3:ec: 3d:2b:e8:93:44:8a:18:56:3a:7d:15:be:e7:99:e1:c1:26:f5: 99:ed:36:1a:71:cd:24:48:b3:e2:5a:fd:44:b8:8c:a9:e4:80: 92:3a:72:93:62:bc:f8:6b:a0:f8:48:88:f6:c9:06:22:35:ad: 64:cf:89:4c:e7:65:bd:72:5a:c1:f0:7e:aa:7e:86:22:13:f1: 14:1b:b2:e0:82:a1:c9:30:5d:36:a5:5d:92:f7:af:58:3d:ec: 3a:36:94:74:4f:4a:eb:2a:41:5f:97:cb:34:50:08:77:e6:de: 55:9f:72:64:a8:d2:9e:3d:67:7b:d5:94:48:51:57:68:84:a0: 19:40:23:2a:b9:d3:a9:6d:e8:07:51:43:05:9b:1f:9f:21:88: 58:c8:6a:f4:18:bc:e8:9a:08:a4:14:cb:44:ad:b5:29:4e:52: 5e:76:10:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRGMkIxMTAvBgNVBAUTKDhDRDE5MEExNDNBQTJFMUU0ODczMDNCMTNEQzA1M0VE MTdCQ0VCMUUwHhcNMjYwOTIzMDYwNjA0WhcNMjYwOTMwMDYwNjA0WjAYMRYwFAYD VQQDEw02YWIzNmM0ZC03N2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5/0w6/mYNN2EUARyKrpJNM75uIqH++DxOm4klFmyuau0kC0/dtK0BCK/A4X 8qMfPqBaZmYZyr3XSHWrdyn1K/QbQcIwGbR5qe0PTUhsFaGY7A9iZ7YIQTke/gXq A96tlgcMNvYRoDQuNu2GiUF7+D+H/Jzp43vk8ndR8Kqrx8xxTWY28V1C8jnulIv3 nwaPYc/WcZZ2+fngYb37vXhmWU+vtYtG/YbUGfnRet7KoA9IW+h0Js0maUnf/ky/ TxBBtnXErm/uLzv6YeA+qzkngf4fll2cOFUTFeAhhnMQz0WKUDInezMwXRrcuA89 KWgpq94AL4WU1qTzKivKcnmGwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQAilFj WPBdaSf+2OxCP7qHHVCMMB8GA1UdIwQYMBaAFIzRkKFDqi4eSHMDsT3AU+0XvOse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREYyQi82QzJCN0IxQzQx QkIxMUYwQjQ1NkQ4NTdDNEY5QUUwMi9qTkdRb1VPcUxoNUljd094UGNCVDdSZTg2 eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REYyQi82QzJCN0IxQzQxQkIxMUYwQjQ1NkQ4NTdDNEY5QUUwMi9qTkdRb1VPcUxo NUljd094UGNCVDdSZTg2eDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIfE874k2MKVBluyhXZO805fNmEE0bAyQwNUJL/Q0ohBTcNzwsT/h+btsfEEk OBqkvRKbR0oOoa5CUnQvVfWaNjtA2UAfn1ywArRHZcqfUB/V4cfhS2NAPbPsPSvo k0SKGFY6fRW+55nhwSb1me02GnHNJEiz4lr9RLiMqeSAkjpyk2K8+Gug+EiI9skG IjWtZM+JTOdlvXJawfB+qn6GIhPxFBuy4IKhyTBdNqVdkvevWD3sOjaUdE9K6ypB X5fLNFAId+beVZ9yZKjSnj1ne9WUSFFXaISgGUAjKrnTqW3oB1FDBZsfnyGIWMhq 9Bi86JoIpBTLRK21KU5SXnYQiQ== -----END CERTIFICATE-----Generated at Wed Sep 23 22:58:54 2026 by rpki-client