$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json) Hash identifier: pOnoptSqC8arJVBDHGIsYMHmEfEfNwUespa6n4CEpXU= Subject key identifier: 0B:AB:6C:78:C9:10:76:BE:9F:AF:63:12:A9:E5:C9:5E:5A:DD:D5:A5 Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft Manifest number: BB Signing time: Wed 23 Sep 2026 06:44:44 +0000 Manifest this update: Wed 23 Sep 2026 06:44:44 +0000 Manifest next update: Wed 30 Sep 2026 06:44:44 +0000 Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: WlXKwvGawE5bT+uixoBEVYL9eM6dOq8RPR8BDgVE12U=) 2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Validity Not Before: Sep 23 06:44:44 2026 GMT Not After : Sep 30 06:44:44 2026 GMT Subject: CN=6ab3755c-241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:ad:e0:08:28:5b:2d:65:13:01:b3:65:df: 52:a9:0f:bb:08:cc:99:fe:75:df:b2:a0:ee:2d:85: 02:a7:95:2e:aa:0a:ce:00:f3:e4:74:e8:86:dc:e4: 01:94:ab:24:d1:50:09:f8:f1:45:17:6f:ca:02:bb: 57:51:3a:7c:18:89:33:32:b9:33:08:c7:f4:94:7f: ed:c0:c1:c8:fa:86:45:7d:8b:7a:14:e4:a6:76:6c: 48:b9:3a:4f:46:d6:99:68:4b:3a:78:3f:1d:a4:f8: 82:08:17:1c:37:19:9e:9d:67:87:a4:0a:51:ed:11: 2a:55:6a:e5:e1:be:8a:28:1d:89:09:3a:22:94:83: 81:b1:71:8f:85:d0:71:84:fd:bc:99:6a:98:cb:c7: d1:fa:2c:cd:1d:53:72:19:f4:d0:00:b6:52:37:8c: ce:bf:3d:0c:32:fd:6e:7e:0b:8a:5f:3b:f9:7f:c4: 1c:0a:dc:37:77:17:19:96:a3:3f:4e:92:a1:3c:f2: 8d:7b:85:79:fd:21:f3:b5:81:cf:02:81:a9:a5:1e: 13:88:20:84:85:05:0a:0c:fa:af:71:2e:cb:e9:fb: 36:7c:35:87:7b:3c:58:eb:6f:93:c1:54:22:d7:94: 3f:ae:36:92:33:5a:e7:c4:21:ca:89:71:b2:1f:02: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:6C:78:C9:10:76:BE:9F:AF:63:12:A9:E5:C9:5E:5A:DD:D5:A5 X509v3 Authority Key Identifier: keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:00:2a:c8:7b:04:82:da:7b:c6:74:7f:d8:d6:13:b4:2a:87: 2a:c4:d6:ac:9a:55:4d:35:1e:be:6e:e1:2e:fc:8d:b6:75:c5: c5:4f:c4:3a:a6:2c:00:2b:d4:2e:fe:ee:ea:2d:af:91:23:8b: 76:d8:a9:0f:72:0c:ea:4d:46:c6:30:25:fd:43:6d:5b:ae:b8: 1d:77:11:f5:4f:ae:07:39:ee:4a:d3:6a:6e:ee:ab:04:0a:52: 14:7f:14:af:c2:6e:60:1f:4c:74:ec:63:e7:3e:28:07:35:20: 80:98:d8:93:7f:9e:d4:a0:27:aa:4e:47:18:4c:69:59:92:50: 09:44:1d:92:9e:f8:05:85:6f:64:2d:6c:d3:0f:c2:04:b3:fa: dd:b4:94:27:bd:6e:aa:85:64:7e:80:ed:23:5f:dd:e1:70:3d: ab:75:73:43:9e:b2:f2:5d:6b:17:c8:ec:42:6b:b1:d7:63:6e: 77:3e:6d:f3:e7:89:24:50:88:6e:69:ac:ab:0e:32:78:c5:68: a9:ca:9f:d4:70:2e:75:97:37:9d:01:39:a7:6f:5e:64:b7:d0: b6:53:7f:2f:9e:fd:e5:a9:7e:54:4a:be:ad:72:65:58:03:57: cb:a7:67:fc:57:91:3f:c9:fb:99:56:f1:7d:a6:02:dc:ea:8a: 62:b7:07:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0Q0QxMTAvBgNVBAUTKDhEMUNENjU5RTYxREI2NDk1QjM2Q0U2OUM0OUY1QTgz MkVEQkQ1OUQwHhcNMjYwOTIzMDY0NDQ0WhcNMjYwOTMwMDY0NDQ0WjAYMRYwFAYD VQQDEw02YWIzNzU1Yy0yNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7Wt4AgoWy1lEwGzZd9SqQ+7CMyZ/nXfsqDuLYUCp5UuqgrOAPPkdOiG3OQB lKsk0VAJ+PFFF2/KArtXUTp8GIkzMrkzCMf0lH/twMHI+oZFfYt6FOSmdmxIuTpP RtaZaEs6eD8dpPiCCBccNxmenWeHpApR7REqVWrl4b6KKB2JCToilIOBsXGPhdBx hP28mWqYy8fR+izNHVNyGfTQALZSN4zOvz0MMv1ufguKXzv5f8QcCtw3dxcZlqM/ TpKhPPKNe4V5/SHztYHPAoGppR4TiCCEhQUKDPqvcS7L6fs2fDWHezxY62+TwVQi 15Q/rjaSM1rnxCHKiXGyHwJOxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAurbHjJ EHa+n69jEqnlyV5a3dWlMB8GA1UdIwQYMBaAFI0c1lnmHbZJWzbOacSfWoMu29Wd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8zNkFGOTQ3MjlF QzgxMUYwOENEMkFDN0JDNEY5QUUwMi9qUnpXV2VZZHRrbGJOczVweEo5YWd5N2Ix WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8zNkFGOTQ3MjlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi9qUnpXV2VZZHRr bGJOczVweEo5YWd5N2IxWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuAAqyHsEgtp7xnR/2NYTtCqHKsTWrJpVTTUevm7hLvyNtnXFxU/EOqYsACvU Lv7u6i2vkSOLdtipD3IM6k1GxjAl/UNtW664HXcR9U+uBznuStNqbu6rBApSFH8U r8JuYB9MdOxj5z4oBzUggJjYk3+e1KAnqk5HGExpWZJQCUQdkp74BYVvZC1s0w/C BLP63bSUJ71uqoVkfoDtI1/d4XA9q3VzQ56y8l1rF8jsQmux12Nudz5t8+eJJFCI bmmsqw4yeMVoqcqf1HAudZc3nQE5p29eZLfQtlN/L5795al+VEq+rXJlWANXy6dn /FeRP8n7mVbxfaYC3OqKYrcHeQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:29:45 2026 by rpki-client