$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: wW3SpX8cttADsYXBQJwVDOGm08dF+hFfqPG83wF9BUs= Subject key identifier: 66:0C:36:1F:99:E2:83:4E:74:4F:35:B0:02:DE:78:56:9C:E9:00:71 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 05B9 Signing time: Tue 22 Sep 2026 22:46:31 +0000 Manifest this update: Tue 22 Sep 2026 22:46:31 +0000 Manifest next update: Tue 29 Sep 2026 22:46:31 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: tX4IatZhy5uiiY/GtuCwH9hS+1Ntj9Jr61YGhfOzviY=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: tZDhIMTLHb3NbSs7t7zGCwhDrXMR5MLwG/mByKSsB2E=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Sep 22 22:46:31 2026 GMT Not After : Sep 29 22:46:31 2026 GMT Subject: CN=6ab30547-6fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0c:06:85:ce:39:6f:2b:d1:c6:43:55:02:50: dd:73:94:a3:b5:03:c8:b7:3f:68:48:92:e8:5f:ab: 66:5e:f1:c9:1e:de:7f:eb:54:1d:f0:a4:67:5b:55: 4d:cb:50:8b:6f:c9:ae:73:e2:fb:da:8e:cd:6d:1d: ee:3e:f8:66:fc:9b:6b:c5:ac:26:d7:13:71:f4:53: 99:a0:2d:c2:31:9b:c4:41:48:bc:3f:1f:24:38:fc: 66:01:f2:e4:d1:7d:c8:24:73:0e:e1:db:49:44:57: 80:3a:90:15:66:be:7d:b9:95:f1:64:ad:71:77:8b: ef:95:27:aa:bd:e6:79:51:e9:ca:0b:41:e1:92:c6: 2e:5a:b8:de:7b:4d:7f:f2:22:05:67:41:a3:d0:cc: e1:64:67:7d:d1:9f:b2:c6:81:5e:b4:ea:de:3e:f1: 18:9a:a7:2c:d5:e4:2e:0e:37:9d:24:5a:d4:a7:c7: 58:aa:6b:5e:06:02:a5:99:74:3a:16:16:9a:e0:1a: 37:bb:1f:05:d8:6f:1c:cb:3c:c9:d4:5c:eb:df:ee: 41:3e:cf:b2:8b:bb:25:0b:0c:e5:df:cf:6f:05:2a: 6a:6f:3f:13:77:67:b9:b5:25:e4:fa:61:e4:c3:ba: be:09:7b:8d:9d:a0:2a:f9:e3:0b:d9:29:6a:6e:f8: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0C:36:1F:99:E2:83:4E:74:4F:35:B0:02:DE:78:56:9C:E9:00:71 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:18:4f:b6:f8:32:e3:82:d4:85:4c:d3:09:17:b9:c0:6d:08: 34:e6:f6:55:a5:aa:18:ad:e1:35:ba:a2:14:19:6f:78:e0:77: 19:6e:82:63:4f:5f:c1:b8:9a:b5:8d:0e:4c:18:24:3a:b0:94: f8:30:e2:69:35:71:a5:f0:7d:a8:61:2f:a3:63:c2:84:53:c2: 87:df:f7:77:77:a8:58:b9:42:06:fb:8d:67:4f:8e:fe:ba:c6: 2b:60:13:5b:b2:fc:33:91:1a:51:47:ab:70:b5:e6:89:9b:a9: d9:8e:7b:c3:b3:a1:36:9d:60:44:d0:f6:23:aa:aa:22:47:b5: 08:ec:ac:ed:37:98:23:17:a3:f4:53:26:a8:22:2c:b9:b3:d3: 51:30:dc:73:2d:6f:04:9a:f8:36:e8:cf:68:fc:c9:88:a7:29: 5f:eb:b3:3d:d0:4e:31:df:18:6c:5e:a9:5a:ac:48:29:b0:a4: d9:ea:60:a6:b6:4a:87:13:f9:18:b1:5e:5b:f2:9e:c5:bc:fe: d7:d7:2c:6d:4f:b3:83:81:9f:b0:b2:41:6e:af:11:3f:87:8e: 17:7b:19:e9:58:d9:fa:52:f7:c2:35:d5:03:a5:6f:43:d0:1b: f9:a5:04:5d:81:b2:88:36:c1:c6:da:49:09:9a:4d:ef:ce:89: c0:55:03:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjYwOTIyMjI0NjMxWhcNMjYwOTI5MjI0NjMxWjAYMRYwFAYD VQQDEw02YWIzMDU0Ny02ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QwGhc45byvRxkNVAlDdc5SjtQPItz9oSJLoX6tmXvHJHt5/61Qd8KRnW1VN y1CLb8muc+L72o7NbR3uPvhm/Jtrxawm1xNx9FOZoC3CMZvEQUi8Px8kOPxmAfLk 0X3IJHMO4dtJRFeAOpAVZr59uZXxZK1xd4vvlSeqveZ5UenKC0HhksYuWrjee01/ 8iIFZ0Gj0MzhZGd90Z+yxoFetOrePvEYmqcs1eQuDjedJFrUp8dYqmteBgKlmXQ6 Fhaa4Bo3ux8F2G8cyzzJ1Fzr3+5BPs+yi7slCwzl389vBSpqbz8Td2e5tSXk+mHk w7q+CXuNnaAq+eML2SlqbvhbtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGYMNh+Z 4oNOdE81sALeeFac6QBxMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQhhPtvgy44LUhUzTCRe5wG0INOb2VaWqGK3hNbqiFBlveOB3GW6CY09fwbia tY0OTBgkOrCU+DDiaTVxpfB9qGEvo2PChFPCh9/3d3eoWLlCBvuNZ0+O/rrGK2AT W7L8M5EaUUercLXmiZup2Y57w7OhNp1gRND2I6qqIke1COys7TeYIxej9FMmqCIs ubPTUTDccy1vBJr4NujPaPzJiKcpX+uzPdBOMd8YbF6pWqxIKbCk2epgprZKhxP5 GLFeW/Kexbz+19csbU+zg4GfsLJBbq8RP4eOF3sZ6VjZ+lL3wjXVA6VvQ9Ab+aUE XYGyiDbBxtpJCZpN786JwFUDGQ== -----END CERTIFICATE-----Generated at Thu Sep 24 13:59:21 2026 by rpki-client