$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: z4EnBOQ4XKQUxv7HVrOAjpr/Qk0rjGvbKDWjpgYacJ4= Subject key identifier: 4A:9C:5B:AE:A7:F6:B7:2E:63:2F:18:DB:3F:35:76:18:DD:4C:78:B3 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 020B Signing time: Fri 25 Sep 2026 03:09:11 +0000 Manifest this update: Fri 25 Sep 2026 03:09:11 +0000 Manifest next update: Fri 02 Oct 2026 03:09:11 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: GLZxInc8tcWmCmappVl7fnhbDvcQp7bARY35pnCed+w=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Sep 25 03:09:11 2026 GMT Not After : Oct 2 03:09:11 2026 GMT Subject: CN=6ab5e5d7-1243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:75:1c:f1:14:a7:89:3c:86:84:b2:11:6f: 95:2d:bf:4e:d0:d4:d7:94:e7:b6:62:fe:e3:35:6f: 20:b5:1d:c1:2e:5b:ed:d9:1e:e1:78:84:8e:b5:70: 39:d5:c8:ca:f6:b2:74:ac:08:d8:94:ca:d0:f5:77: a9:4a:11:8f:9c:06:49:22:17:55:0c:55:ef:7d:7a: db:34:d5:03:36:dd:b4:f0:69:c4:e7:e2:02:21:f1: 1f:5e:08:fe:98:f8:7d:ed:ea:2b:13:13:83:ee:b0: 44:03:1d:56:b7:27:a3:7f:f6:e3:4c:b7:3d:92:3f: d2:29:ad:6c:63:00:f8:ec:16:c9:3e:32:09:20:c3: 33:fe:b7:e6:88:e7:ca:3d:53:1b:f4:30:ec:db:6b: eb:1a:47:8b:1b:98:fb:da:40:ff:4b:bc:0e:e0:13: 8a:0a:bc:2a:e0:11:bf:47:b6:92:05:f4:7d:a9:61: 29:46:bc:2d:c1:4a:cb:6b:90:f5:29:b6:c5:64:6f: 52:70:4a:e3:e0:63:28:9b:23:e4:73:33:cf:c9:d4: 55:df:fb:e4:d5:c5:a7:27:9d:66:64:03:46:d9:2f: b9:b8:a0:f9:2d:c0:47:ab:f7:b3:be:33:85:bf:5f: e2:47:a8:5d:e3:5c:4e:f0:9d:83:ba:3a:77:b5:c8: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:5B:AE:A7:F6:B7:2E:63:2F:18:DB:3F:35:76:18:DD:4C:78:B3 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7d:2e:0d:ef:52:f3:65:05:65:59:27:50:dd:24:84:ad:63: 87:fa:f2:cb:da:80:59:fb:3c:b5:26:1f:fd:02:b7:62:57:40: b1:38:62:16:a4:32:c9:c2:f4:e5:6c:51:74:52:e7:1c:c6:75: b1:ae:1c:90:7b:8c:da:ac:cd:c4:0e:17:4d:a5:d6:92:95:12: 50:53:b6:7c:65:21:81:8a:ec:7c:22:f3:7a:23:1d:75:44:b5: f0:aa:e9:69:a5:7e:ab:66:6c:86:35:fc:49:0b:76:17:16:10: 83:a4:e5:87:0d:e3:d0:fd:67:28:f0:ea:a4:4e:c8:63:7c:70: 79:be:53:76:7a:34:c3:40:89:eb:3f:60:2c:c1:00:b6:a2:6a: be:c5:14:32:08:cb:4a:9c:ab:b5:3f:3b:5c:b4:05:6a:4e:94: 51:33:c8:03:8e:60:2f:c2:af:b0:f7:a7:fc:4e:ea:4c:3a:29: 4f:84:4d:0c:8c:d9:e7:3c:2e:6d:7f:1d:2f:e7:cb:3d:ad:ea: 11:e8:8f:2a:20:02:9f:b2:a9:de:ca:75:47:79:88:00:23:77: 22:d9:be:6e:a2:f5:7d:99:6b:d1:a4:bb:2a:d2:91:68:85:3b: 97:83:d8:e4:30:02:e2:5e:da:9e:da:32:ec:90:4a:20:ae:80: 54:f5:5b:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYwOTI1MDMwOTExWhcNMjYxMDAyMDMwOTExWjAYMRYwFAYD VQQDEw02YWI1ZTVkNy0xMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlJ1HPEUp4k8hoSyEW+VLb9O0NTXlOe2Yv7jNW8gtR3BLlvt2R7heISOtXA5 1cjK9rJ0rAjYlMrQ9XepShGPnAZJIhdVDFXvfXrbNNUDNt208GnE5+ICIfEfXgj+ mPh97eorExOD7rBEAx1Wtyejf/bjTLc9kj/SKa1sYwD47BbJPjIJIMMz/rfmiOfK PVMb9DDs22vrGkeLG5j72kD/S7wO4BOKCrwq4BG/R7aSBfR9qWEpRrwtwUrLa5D1 KbbFZG9ScErj4GMomyPkczPPydRV3/vk1cWnJ51mZANG2S+5uKD5LcBHq/ezvjOF v1/iR6hd41xO8J2Dujp3tcidpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqcW66n 9rcuYy8Y2z81dhjdTHizMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALH0uDe9S82UFZVknUN0khK1jh/ryy9qAWfs8tSYf/QK3YldAsThiFqQyycL0 5WxRdFLnHMZ1sa4ckHuM2qzNxA4XTaXWkpUSUFO2fGUhgYrsfCLzeiMddUS18Krp aaV+q2ZshjX8SQt2FxYQg6Tlhw3j0P1nKPDqpE7IY3xweb5Tdno0w0CJ6z9gLMEA tqJqvsUUMgjLSpyrtT87XLQFak6UUTPIA45gL8KvsPen/E7qTDopT4RNDIzZ5zwu bX8dL+fLPa3qEeiPKiACn7Kp3sp1R3mIACN3Itm+bqL1fZlr0aS7KtKRaIU7l4PY 5DAC4l7antoy7JBKIK6AVPVbwQ== -----END CERTIFICATE-----Generated at Sat Sep 26 09:59:48 2026 by rpki-client