$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: U//BucimyNZwTuO9/V1G+yBW9VitkcH0M8gmjfp6xt4= Subject key identifier: 2C:AB:A0:3D:06:94:9B:B0:DC:B9:55:DD:CB:A0:47:D7:BB:BE:C5:D3 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 02BD Signing time: Wed 23 Sep 2026 01:17:36 +0000 Manifest this update: Wed 23 Sep 2026 01:17:35 +0000 Manifest next update: Wed 30 Sep 2026 01:17:35 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: bgJrk5OCLE0Z+nN3gxUPBF4EOdbNeMsNmUgHVrPMvAQ=) 2: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: iDRttbAq2dG33Z+GOcEvSaxwB+ZISIrhoHxT2VA+MAU=) 3: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: YbTHElizFzUtlbWyp+pwU08KL5opGYwYJhzV3rHc988=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Sep 23 01:17:35 2026 GMT Not After : Sep 30 01:17:35 2026 GMT Subject: CN=6ab328b0-540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:bf:51:13:97:87:e0:af:8a:47:0e:33:c6: f1:46:69:4e:fb:70:49:4b:76:bf:ac:8b:8a:bc:76: cd:41:04:3f:6b:a0:c7:40:4e:e5:38:c9:3a:83:7a: b1:36:5a:59:22:4c:9f:ef:bc:2c:2e:b3:47:84:7c: 3f:da:c1:e1:55:0a:16:40:9e:e5:ee:03:66:49:ec: c6:1a:e6:af:71:4e:0a:bf:fe:9e:1b:c8:46:42:9e: 72:f1:2c:25:b8:4a:d7:e0:c0:6a:d2:8f:94:60:df: b5:e3:35:23:99:7d:99:af:de:b3:02:6b:14:8e:4c: 84:98:de:56:dd:7c:3e:52:06:d5:22:57:63:61:11: 45:55:cf:6f:47:37:b2:a3:dc:ac:dd:34:9c:5e:83: be:07:b3:a2:15:a9:ac:2d:19:05:cb:19:e1:cb:4c: 0a:ea:d0:d7:84:c2:2d:83:fd:45:53:c3:5c:ae:57: c4:3c:94:ec:26:0b:4c:68:c6:16:b6:3b:6e:11:40: 5a:3a:a9:20:3e:52:d5:6d:99:82:2d:65:15:3e:ff: 82:0b:4e:e6:23:fb:0c:92:2e:fb:65:89:80:6f:b9: 21:89:18:db:40:33:c6:a2:8f:b3:24:b8:d1:60:60: 84:d7:f9:25:8c:76:d3:e0:db:46:b9:a7:80:87:4b: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:A0:3D:06:94:9B:B0:DC:B9:55:DD:CB:A0:47:D7:BB:BE:C5:D3 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:78:7f:c2:a1:01:ca:cd:fa:5f:82:b3:d4:b6:dd:ff:ca:2d: c5:f4:af:2d:27:b5:0f:f1:f5:c9:08:d2:61:a2:c9:47:25:d4: 51:ed:93:59:3b:a1:8c:b6:83:c8:81:4a:47:ab:f6:c5:9a:6d: 7d:d1:e9:57:e1:e1:06:2b:a8:04:ed:ea:ce:20:58:ab:1e:e2: 11:ca:06:cd:98:b7:23:ca:9d:61:10:eb:87:ec:88:6d:c8:f1: 9b:1d:6a:c2:05:cc:96:2a:62:fe:fe:77:42:b9:d6:2c:0e:b7: 31:64:ce:98:64:1c:9f:7c:4c:64:c7:bd:bf:11:6b:34:33:ff: 67:e3:0c:28:46:c1:27:75:22:33:69:28:67:33:aa:33:a8:b7: bb:2c:ea:32:a3:da:b6:95:81:2a:dc:3d:a1:57:93:ec:65:83: b6:3b:cd:8d:14:16:8e:2f:43:f8:38:78:68:a7:0c:8e:16:33: 4e:63:bd:38:e7:23:82:43:8d:12:03:3c:8c:6f:44:2f:22:f0: c9:78:dd:dc:82:41:61:b8:51:eb:c2:86:e9:86:85:ea:e1:ef: f4:01:1a:09:ce:ba:f8:b5:d3:8b:20:e7:b9:03:ec:f5:1a:12: 9a:06:4e:4f:8d:e5:2c:2b:cc:68:9b:97:60:9f:e7:fb:ca:0c: 39:36:92:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjYwOTIzMDExNzM1WhcNMjYwOTMwMDExNzM1WjAYMRYwFAYD VQQDEw02YWIzMjhiMC01NDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxda/UROXh+CvikcOM8bxRmlO+3BJS3a/rIuKvHbNQQQ/a6DHQE7lOMk6g3qx NlpZIkyf77wsLrNHhHw/2sHhVQoWQJ7l7gNmSezGGuavcU4Kv/6eG8hGQp5y8Swl uErX4MBq0o+UYN+14zUjmX2Zr96zAmsUjkyEmN5W3Xw+UgbVIldjYRFFVc9vRzey o9ys3TScXoO+B7OiFamsLRkFyxnhy0wK6tDXhMItg/1FU8NcrlfEPJTsJgtMaMYW tjtuEUBaOqkgPlLVbZmCLWUVPv+CC07mI/sMki77ZYmAb7khiRjbQDPGoo+zJLjR YGCE1/kljHbT4NtGuaeAh0um9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyroD0G lJuw3LlV3cugR9e7vsXTMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHh/wqEBys36X4Kz1Lbd/8otxfSvLSe1D/H1yQjSYaLJRyXUUe2TWTuhjLaD yIFKR6v2xZptfdHpV+HhBiuoBO3qziBYqx7iEcoGzZi3I8qdYRDrh+yIbcjxmx1q wgXMlipi/v53QrnWLA63MWTOmGQcn3xMZMe9vxFrNDP/Z+MMKEbBJ3UiM2koZzOq M6i3uyzqMqPatpWBKtw9oVeT7GWDtjvNjRQWji9D+Dh4aKcMjhYzTmO9OOcjgkON EgM8jG9ELyLwyXjd3IJBYbhR68KG6YaF6uHv9AEaCc66+LXTiyDnuQPs9RoSmgZO T43lLCvMaJuXYJ/n+8oMOTaS0w== -----END CERTIFICATE-----Generated at Wed Sep 23 06:46:19 2026 by rpki-client