$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: tdIqfdDxK8Cwul0ou4OM0N2SAO92jW5Khi7OZ22Mt38= Subject key identifier: 68:13:8A:27:CF:E9:12:0E:13:CD:5B:A9:D4:4E:FE:32:99:77:38:AB Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 0254 Signing time: Sun 15 Nov 2026 02:27:41 +0000 Manifest this update: Sun 15 Nov 2026 02:27:40 +0000 Manifest next update: Sun 22 Nov 2026 02:27:40 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: i1BWAubgDQ+r/QH7CpRJCywKCQFdtJnqiOHItMNq91M=) 2: 22GMXwPNWWWzvWsUIcJ7UEVwvEA.asa (hash: qJkMKj8/jMHzRiV86dGH+6E0TVSHRHDhc7jDUHlYwCc=) 3: F13C8D4EBACA11F1883A41384E11F970.roa (hash: zPxKN0NM2huvpF0Ch+rRISwETJ08pGI3uOhgIhjtSNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Nov 15 02:27:40 2026 GMT Not After : Nov 22 02:27:40 2026 GMT Subject: CN=6af9189d-f2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:30:ed:66:f5:80:b3:42:39:17:c0:b1:15: 28:9b:fa:2b:fb:d5:dc:82:cf:a0:0b:33:68:57:78: 35:db:23:f9:70:78:12:bd:a4:cc:d6:0c:78:39:91: 17:ef:04:ba:08:13:21:23:a3:47:d6:9b:87:35:0f: 4b:89:fc:45:92:fa:ba:83:58:73:70:14:15:5c:4b: 57:95:3a:00:21:3e:92:36:bb:c9:0a:ec:88:11:a9: 8c:73:10:18:59:d9:0b:b6:ce:1c:d7:13:83:bd:5b: 02:fe:a4:7e:d4:4d:15:43:3d:c2:89:33:eb:a4:48: 77:b7:f0:7b:83:38:9d:ec:2e:30:67:51:f4:10:a2: bf:f3:9d:67:d7:8f:88:96:6d:87:27:54:f7:02:51: b7:b3:6a:f2:aa:d5:13:c5:06:eb:16:f8:0c:e9:aa: ad:74:f4:ce:b7:0a:46:5c:ab:3b:61:56:68:cd:19: 0c:0a:75:d5:28:27:e1:44:4d:87:32:01:f3:77:92: 82:a9:a3:6b:ce:7f:48:17:56:da:3f:16:c5:65:ce: 2c:6f:46:12:cd:ff:2f:b0:c3:52:a2:47:2e:0a:2b: 5e:86:58:49:a8:48:93:2d:6f:cd:7f:1f:67:22:45: ce:6f:c2:30:56:0d:86:bf:91:f6:d2:87:44:62:68: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:13:8A:27:CF:E9:12:0E:13:CD:5B:A9:D4:4E:FE:32:99:77:38:AB X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9b:e2:72:96:92:13:5a:70:71:8f:5e:7c:83:c6:ee:d4:1f: a0:ca:85:3d:a2:7e:3b:e0:6c:e8:17:bf:89:a6:bf:2a:56:73: ed:20:37:0e:91:76:e6:8e:51:06:1f:fc:a1:68:d1:46:8a:cd: 0a:bf:e2:1e:1e:5c:7d:1c:52:7f:e2:3f:45:3c:97:b8:6c:e4: 67:bf:69:50:1c:ff:7a:0a:40:18:f7:4d:87:d9:53:24:d7:de: 67:b7:65:2b:ce:00:50:23:2f:b0:97:38:f1:be:6d:18:9a:fc: d7:a5:43:61:a2:a6:b5:fd:0d:6e:e0:b1:f5:af:e0:7c:13:f2: ac:96:f4:d7:ad:5d:b1:9e:27:e0:8f:5c:ec:cc:05:99:7f:dd: 7a:11:5b:0e:36:93:0e:a0:0c:77:8b:9a:04:e1:81:ca:ec:a0: 3b:e1:08:ac:74:ed:33:a6:b4:91:a1:b6:90:60:b0:73:46:46: be:0a:cd:be:0a:08:39:c5:f7:eb:49:cd:3a:ac:22:a5:59:85: 8b:99:c9:e0:d0:c6:b1:7c:06:66:55:2e:21:8b:2d:e0:be:4e: 26:63:7b:11:08:0f:c7:c5:e4:85:d7:f1:1e:7e:b2:2c:3b:8f: 13:c6:10:97:3c:0d:6d:df:20:1e:7a:f7:b3:a9:c1:f6:e2:56: 89:ad:a5:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjYxMTE1MDIyNzQwWhcNMjYxMTIyMDIyNzQwWjAYMRYwFAYD VQQDEw02YWY5MTg5ZC1mMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwsw7Wb1gLNCORfAsRUom/or+9Xcgs+gCzNoV3g12yP5cHgSvaTM1gx4OZEX 7wS6CBMhI6NH1puHNQ9LifxFkvq6g1hzcBQVXEtXlToAIT6SNrvJCuyIEamMcxAY WdkLts4c1xODvVsC/qR+1E0VQz3CiTPrpEh3t/B7gzid7C4wZ1H0EKK/851n14+I lm2HJ1T3AlG3s2ryqtUTxQbrFvgM6aqtdPTOtwpGXKs7YVZozRkMCnXVKCfhRE2H MgHzd5KCqaNrzn9IF1baPxbFZc4sb0YSzf8vsMNSokcuCitehlhJqEiTLW/Nfx9n IkXOb8IwVg2Gv5H20odEYmgEBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgTiifP 6RIOE81bqdRO/jKZdzirMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx5vicpaSE1pwcY9efIPG7tQfoMqFPaJ+O+Bs6Be/iaa/KlZz7SA3DpF25o5R Bh/8oWjRRorNCr/iHh5cfRxSf+I/RTyXuGzkZ79pUBz/egpAGPdNh9lTJNfeZ7dl K84AUCMvsJc48b5tGJr816VDYaKmtf0NbuCx9a/gfBPyrJb0161dsZ4n4I9c7MwF mX/dehFbDjaTDqAMd4uaBOGByuygO+EIrHTtM6a0kaG2kGCwc0ZGvgrNvgoIOcX3 60nNOqwipVmFi5nJ4NDGsXwGZlUuIYst4L5OJmN7EQgPx8XkhdfxHn6yLDuPE8YQ lzwNbd8gHnr3s6nB9uJWia2l0w== -----END CERTIFICATE-----Generated at Sun Nov 15 20:50:39 2026 by rpki-client