$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft File: j-7SDCRC6A2K21UYUyH566ymNRk.mft (raw, json) Hash identifier: TPqRmSwoz2nK1Bo03KHC0Kf6BocMkzSdcoiezRRSUGw= Subject key identifier: E6:CC:00:47:85:AC:BD:98:5C:55:AE:24:98:2B:09:8C:97:9B:0F:93 Authority key identifier: 8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19 Certificate issuer: /CN=A91C987A/serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft Manifest number: 25 Signing time: Mon 21 Sep 2026 08:52:26 +0000 Manifest this update: Mon 21 Sep 2026 08:52:25 +0000 Manifest next update: Mon 28 Sep 2026 08:52:25 +0000 Files and hashes: 1: j-7SDCRC6A2K21UYUyH566ymNRk.crl (hash: 1StPQLinTIZJW1Lm9KkytBpSdKq0kOIkdjGTNRqbIGE=) 2: BE253534915611F18490ADCA6911F970.roa (hash: caiLmjkO5oWnKKV5DBoQbkeqp1PZP9RJyWHBUbg7Qdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C987A, serialNumber=8FEED20C2442E80D8ADB55185321F9EBACA63519 Validity Not Before: Sep 21 08:52:25 2026 GMT Not After : Sep 28 08:52:25 2026 GMT Subject: CN=6ab0f04a-fd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:6f:25:83:e6:60:88:c8:19:cc:71:ed:a2: 35:4d:c2:bb:fc:d6:14:90:40:23:c1:0a:2c:77:97: 28:01:a2:8a:db:a5:78:d6:57:16:f4:27:3d:6c:f6: bf:a0:6a:7f:d2:42:c8:19:ee:cd:e6:42:bf:db:c7: bd:13:b7:a7:15:8e:a6:7c:4d:05:17:66:7d:a2:32: 00:b4:36:6a:90:78:20:fa:25:51:9f:41:14:3d:f6: 62:9f:48:0d:95:42:ac:80:72:67:57:8e:42:fb:0b: 94:55:dc:9b:6b:9d:ad:58:8a:6c:4a:38:a5:6d:fa: 74:69:6e:0a:75:4d:04:27:38:31:7e:16:70:0d:d2: 6c:9e:0c:d5:53:71:2e:18:44:38:f3:ce:ed:dd:72: bc:1f:26:b8:ec:82:4c:68:75:5b:5b:d9:dd:58:e1: 6e:37:16:26:d9:20:dd:60:47:a5:1b:54:15:eb:c0: 00:2d:ce:62:1b:c7:9b:0d:00:88:f4:b4:4b:4c:ee: fe:dc:8d:6e:38:cc:84:de:0f:92:09:4e:5f:4d:c2: da:94:be:1a:14:c5:cc:f2:c3:b5:b8:3f:1b:d6:78: 62:db:fd:96:9b:e0:ea:12:dc:9a:34:a1:7c:88:1d: d4:53:47:8f:69:c6:65:38:af:0d:80:ca:2f:0e:be: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CC:00:47:85:AC:BD:98:5C:55:AE:24:98:2B:09:8C:97:9B:0F:93 X509v3 Authority Key Identifier: keyid:8F:EE:D2:0C:24:42:E8:0D:8A:DB:55:18:53:21:F9:EB:AC:A6:35:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-7SDCRC6A2K21UYUyH566ymNRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/2B43DBD48B0811F1A43684C57011F970/j-7SDCRC6A2K21UYUyH566ymNRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:52:4f:67:36:d7:16:7d:88:21:29:5e:61:a1:2f:b5:0e:34: c4:68:80:53:2c:26:e4:fc:c2:20:df:2a:59:5f:0a:07:52:49: 9a:6f:78:f2:0f:f6:b3:c5:4b:f5:70:41:e2:42:5a:e0:3b:53: 66:55:c0:fd:fc:73:01:54:e4:11:fa:bb:71:cb:f3:c4:81:ee: ec:bf:a9:f4:4c:a7:2c:c1:c5:c5:a9:bc:79:87:7e:6b:c3:a3: 7a:3c:e3:69:9a:dc:fa:66:0c:f3:ed:b1:3e:97:29:b9:4f:e9: 3e:91:e0:c8:da:ff:81:02:a9:9a:94:d8:e3:22:7a:23:b1:6b: 1d:55:af:b2:ae:ed:03:28:50:fa:08:77:25:e5:9d:fd:c6:fc: 1f:3f:55:22:bb:8b:ac:44:66:95:1c:f4:7e:17:8a:82:76:69: a1:97:d7:75:5c:de:05:7c:72:16:66:3a:d8:c7:cc:1b:d6:ee: 7a:90:7c:a5:7b:b5:1c:59:d2:fa:de:56:50:fc:93:7e:43:a4: 74:d1:10:04:d9:47:f8:f3:13:10:94:06:9e:92:0a:23:83:4e: 4f:84:c0:60:8a:fc:7b:c9:70:9f:7a:14:eb:9f:62:a6:b1:e9: eb:a2:82:c2:3f:8d:ce:db:69:d3:e6:62:ca:da:9d:f3:ba:96: 5a:bd:50:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTg3QTExMC8GA1UEBRMoOEZFRUQyMEMyNDQyRTgwRDhBREI1NTE4NTMyMUY5RUJB Q0E2MzUxOTAeFw0yNjA5MjEwODUyMjVaFw0yNjA5MjgwODUyMjVaMBgxFjAUBgNV BAMTDTZhYjBmMDRhLWZkMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiAW8lg+ZgiMgZzHHtojVNwrv81hSQQCPBCix3lygBoorbpXjWVxb0Jz1s9r+g an/SQsgZ7s3mQr/bx70Tt6cVjqZ8TQUXZn2iMgC0NmqQeCD6JVGfQRQ99mKfSA2V QqyAcmdXjkL7C5RV3Jtrna1YimxKOKVt+nRpbgp1TQQnODF+FnAN0myeDNVTcS4Y RDjzzu3dcrwfJrjsgkxodVtb2d1Y4W43FibZIN1gR6UbVBXrwAAtzmIbx5sNAIj0 tEtM7v7cjW44zITeD5IJTl9NwtqUvhoUxczyw7W4PxvWeGLb/Zab4OoS3Jo0oXyI HdRTR49pxmU4rw2Ayi8OvjIfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5swAR4Ws vZhcVa4kmCsJjJebD5MwHwYDVR0jBBgwFoAUj+7SDCRC6A2K21UYUyH566ymNRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5ODdBLzJCNDNEQkQ0OEIw ODExRjFBNDM2ODRDNTcwMTFGOTcwL2otN1NEQ1JDNkEySzIxVVlVeUg1NjZ5bU5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvai03U0RDUkM2QTJLMjFVWVV5SDU2NnltTlJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 ODdBLzJCNDNEQkQ0OEIwODExRjFBNDM2ODRDNTcwMTFGOTcwL2otN1NEQ1JDNkEy SzIxVVlVeUg1NjZ5bU5Say5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVUk9nNtcWfYghKV5hoS+1DjTEaIBTLCbk/MIg3ypZXwoHUkmab3jyD/azxUv1 cEHiQlrgO1NmVcD9/HMBVOQR+rtxy/PEge7sv6n0TKcswcXFqbx5h35rw6N6PONp mtz6Zgzz7bE+lym5T+k+keDI2v+BAqmalNjjInojsWsdVa+yru0DKFD6CHcl5Z39 xvwfP1Uiu4usRGaVHPR+F4qCdmmhl9d1XN4FfHIWZjrYx8wb1u56kHyle7UcWdL6 3lZQ/JN+Q6R00RAE2Uf48xMQlAaekgojg05PhMBgivx7yXCfehTrn2KmsenrooLC P43O22nT5mLK2p3zupZavVAe -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:38 2026 by rpki-client