$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: 9eP/fKdMr6vLo8HaXRV3K10Bo5aLH3RwE8CvYbDTHnY= Subject key identifier: 60:B3:96:EF:B9:0A:13:6C:6D:F0:CD:5A:38:74:C5:2C:11:DB:ED:1C Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A4D Signing time: Thu 24 Sep 2026 19:38:39 +0000 Manifest this update: Thu 24 Sep 2026 19:38:39 +0000 Manifest next update: Thu 01 Oct 2026 19:38:39 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: k5t1VBV5FLFksMmDyc5y6olt578BXSZrZ4rX73RNuPc=) 2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=) 3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Sep 24 19:38:39 2026 GMT Not After : Oct 1 19:38:39 2026 GMT Subject: CN=6ab57c3f-6e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:02:72:0a:32:b1:44:ef:cc:4a:45:e8:c7: 62:6e:b1:7c:2a:bd:0b:84:82:90:37:02:fe:0a:69: 60:14:29:3b:81:0e:68:6c:fb:cb:ce:1c:97:a9:53: d8:f2:b3:e6:74:d4:e5:15:b1:d4:e3:75:04:a4:41: 37:2c:05:9a:a2:89:f9:89:6d:27:2a:cb:f6:b8:64: a1:df:94:9b:ee:a9:13:55:cd:ca:cd:18:dd:58:83: a4:8d:16:03:7d:c3:09:1c:c3:95:ff:30:04:18:13: c5:30:3d:74:42:d8:30:4f:1d:ec:92:47:04:5a:c6: 7b:d6:6a:3a:75:98:b5:e4:8f:00:1b:30:ae:c7:4f: 60:fe:49:5a:3f:31:23:98:9d:96:6c:91:cc:5a:c0: 17:05:5b:97:90:dd:cb:47:ba:fd:d0:49:48:c4:79: 25:db:98:85:13:08:dd:48:f4:0a:de:10:69:fe:dd: 0f:f5:07:89:f3:01:98:3c:b2:0b:82:a8:9b:3a:7f: b6:e1:d6:8c:f2:08:04:66:5e:0d:29:ae:e6:9b:b8: e3:8c:e5:58:6c:c9:6c:b3:0d:fc:4e:7c:7f:79:77: 06:7b:98:41:3a:b1:d6:9b:dc:5d:fa:5f:b2:1c:85: 17:4f:f9:db:57:85:9f:2f:77:de:08:cd:e5:c5:cc: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:96:EF:B9:0A:13:6C:6D:F0:CD:5A:38:74:C5:2C:11:DB:ED:1C X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b4:57:3f:87:f0:8b:cb:65:f1:97:72:53:d2:d7:59:e9:07: c4:62:2b:0c:34:28:96:5b:e9:73:4f:4b:db:cc:70:2f:af:ef: 30:5e:c0:8e:93:07:43:f1:e6:28:9a:b0:e1:44:ed:df:f1:39: 27:d0:80:2a:87:6a:a0:c2:eb:30:42:e6:f1:86:53:b3:c1:59: 02:2c:17:64:1a:42:81:18:36:cc:53:d1:af:12:f6:da:0e:41: ee:e3:e1:d5:4f:e9:12:49:0d:39:a5:2a:7f:90:7c:ca:4d:9a: 8c:1f:86:9c:0b:38:52:87:7c:1a:e0:7e:39:64:be:cd:3b:b8: 3c:f4:81:8e:39:15:17:0f:a5:45:47:5b:e5:82:41:b2:41:2a: 24:9a:ee:bd:c7:0b:29:44:90:d1:da:4f:40:37:ea:24:91:2b: a2:f2:8d:de:9e:3b:2b:2d:d3:d8:f0:25:99:62:6e:70:86:a2: bf:d9:9b:34:1c:b2:7b:2c:cb:16:12:8f:82:1e:ba:94:5f:e0: c0:11:19:fa:e0:2d:94:ee:99:9b:ea:d8:35:46:1e:ef:bb:d2: 15:3e:b1:d5:2e:11:b2:7b:66:a7:10:95:42:d4:e5:f1:b3:38: c6:1e:78:57:b0:98:fd:fe:ee:be:03:97:ba:5f:4d:81:be:50: 15:01:35:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwOTI0MTkzODM5WhcNMjYxMDAxMTkzODM5WjAYMRYwFAYD VQQDEw02YWI1N2MzZi02ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCgCcgoysUTvzEpF6MdibrF8Kr0LhIKQNwL+CmlgFCk7gQ5obPvLzhyXqVPY 8rPmdNTlFbHU43UEpEE3LAWaoon5iW0nKsv2uGSh35Sb7qkTVc3KzRjdWIOkjRYD fcMJHMOV/zAEGBPFMD10QtgwTx3skkcEWsZ71mo6dZi15I8AGzCux09g/klaPzEj mJ2WbJHMWsAXBVuXkN3LR7r90ElIxHkl25iFEwjdSPQK3hBp/t0P9QeJ8wGYPLIL gqibOn+24daM8ggEZl4NKa7mm7jjjOVYbMlssw38Tnx/eXcGe5hBOrHWm9xd+l+y HIUXT/nbV4WfL3feCM3lxcw0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCzlu+5 ChNsbfDNWjh0xSwR2+0cMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbRXP4fwi8tl8ZdyU9LXWekHxGIrDDQollvpc09L28xwL6/vMF7AjpMHQ/Hm KJqw4UTt3/E5J9CAKodqoMLrMELm8YZTs8FZAiwXZBpCgRg2zFPRrxL22g5B7uPh 1U/pEkkNOaUqf5B8yk2ajB+GnAs4Uod8GuB+OWS+zTu4PPSBjjkVFw+lRUdb5YJB skEqJJruvccLKUSQ0dpPQDfqJJErovKN3p47Ky3T2PAlmWJucIaiv9mbNByyeyzL FhKPgh66lF/gwBEZ+uAtlO6Zm+rYNUYe77vSFT6x1S4RsntmpxCVQtTl8bM4xh54 V7CY/f7uvgOXul9Ngb5QFQE1KA== -----END CERTIFICATE-----Generated at Sat Sep 26 11:04:06 2026 by rpki-client