$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: X9a+IYPjIBgvPq5AfxhXtBQbm3pyCa3cIoCxiPA7tyI= Subject key identifier: 9D:49:DF:F7:84:43:6F:A1:E3:68:8E:CD:6D:FB:CA:74:05:9B:DF:58 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 02BA Signing time: Tue 13 Oct 2026 01:51:18 +0000 Manifest this update: Tue 13 Oct 2026 01:51:17 +0000 Manifest next update: Tue 20 Oct 2026 01:51:17 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: tYtwQR+5wKFqq1XLzwYHsGTB2gkW8/+y9+YNpf6dA+8=) 2: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=) 4: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 01:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Oct 13 01:51:17 2026 GMT Not After : Oct 20 01:51:17 2026 GMT Subject: CN=6acd8e96-ec38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:e0:4d:76:56:aa:84:4c:1b:bc:98:63:ef: 75:54:f0:0e:a3:1c:a8:57:1f:28:9c:a5:cb:9f:ef: 78:7a:f0:24:e3:d6:b7:47:cc:9a:ad:de:c6:e7:31: e8:d8:d7:ef:c2:f3:96:c2:9c:a7:4c:89:83:b6:a1: 87:11:5e:a9:6f:d3:91:c8:0b:c8:d7:c3:38:20:ee: 3e:b7:56:3d:bc:0f:dc:41:51:fd:bc:43:0b:38:a5: 9f:1f:92:49:30:ed:92:12:1e:46:de:fb:26:ff:55: 89:5a:08:f1:48:8e:97:ad:6e:a1:5e:9a:10:02:a2: 34:d7:f2:10:93:68:9a:59:d1:93:41:6e:b0:0e:e1: 16:66:70:ce:f0:f5:84:e2:55:a4:58:c1:eb:d2:e9: 76:0e:42:4d:e2:36:5e:24:fe:00:ae:64:af:67:2b: c4:dc:5b:50:5d:55:d9:5b:43:be:16:cf:13:d7:bf: 68:36:c6:d2:27:3a:2f:54:53:c8:df:49:06:d3:fa: 58:36:f2:e9:ab:36:18:c9:04:a4:78:cf:ea:05:58: 96:23:00:c5:19:38:af:b8:e0:42:ac:9a:97:85:b8: 96:95:e6:3a:7a:05:4b:a3:95:2b:32:21:ee:9b:1c: 0b:40:0e:c8:7a:c8:d8:51:85:c1:67:50:e5:3c:31: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:DF:F7:84:43:6F:A1:E3:68:8E:CD:6D:FB:CA:74:05:9B:DF:58 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6b:dd:76:51:46:5d:30:ca:98:b5:6b:de:3b:ed:3c:1b:d1: 32:cc:da:cd:4f:cd:4c:f4:9e:5b:82:bb:15:7e:eb:9d:db:1a: 72:9e:e2:4d:62:71:24:4f:6b:f3:39:b4:0b:ab:1d:2d:63:cd: 9a:fb:f6:12:3c:bb:1a:2c:2b:9a:ba:bd:9a:49:3b:82:38:ad: ee:ac:ed:97:3d:bc:a1:ca:3d:d4:97:59:f3:58:0d:29:44:b3: 04:af:08:67:86:5e:d0:dd:e1:d1:4d:99:74:b9:d0:af:89:b0: 5c:a4:6a:6d:10:72:6d:a3:9f:35:e4:8b:64:ac:e7:6a:ff:d5: f3:78:fb:24:85:21:97:de:19:8b:09:cc:99:32:e3:97:b9:ac: 1a:7b:11:e9:c1:e6:46:6b:62:17:84:6a:5c:e8:0c:b5:38:30: df:2a:ea:93:27:16:0f:f4:c1:2f:29:c6:a1:33:c2:8a:66:51: 7f:96:db:3c:b3:a2:bb:dd:c2:91:c8:3a:15:60:79:a4:57:f0: 7f:d3:95:cc:15:32:c4:8a:19:b4:0c:2c:e3:cf:35:d7:70:7d: da:09:55:97:eb:7d:cd:a9:32:60:3a:3d:09:ab:61:33:de:86: b2:9b:99:48:51:a4:e6:de:d4:0b:00:82:80:05:af:d4:09:ea: a8:39:b3:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjYxMDEzMDE1MTE3WhcNMjYxMDIwMDE1MTE3WjAYMRYwFAYD VQQDEw02YWNkOGU5Ni1lYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQbgTXZWqoRMG7yYY+91VPAOoxyoVx8onKXLn+94evAk49a3R8yard7G5zHo 2NfvwvOWwpynTImDtqGHEV6pb9ORyAvI18M4IO4+t1Y9vA/cQVH9vEMLOKWfH5JJ MO2SEh5G3vsm/1WJWgjxSI6XrW6hXpoQAqI01/IQk2iaWdGTQW6wDuEWZnDO8PWE 4lWkWMHr0ul2DkJN4jZeJP4ArmSvZyvE3FtQXVXZW0O+Fs8T179oNsbSJzovVFPI 30kG0/pYNvLpqzYYyQSkeM/qBViWIwDFGTivuOBCrJqXhbiWleY6egVLo5UrMiHu mxwLQA7IesjYUYXBZ1DlPDGtzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1J3/eE Q2+h42iOzW37ynQFm99YMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2vddlFGXTDKmLVr3jvtPBvRMszazU/NTPSeW4K7FX7rndsacp7iTWJxJE9r 8zm0C6sdLWPNmvv2Ejy7Giwrmrq9mkk7gjit7qztlz28oco91JdZ81gNKUSzBK8I Z4Ze0N3h0U2ZdLnQr4mwXKRqbRBybaOfNeSLZKznav/V83j7JIUhl94ZiwnMmTLj l7msGnsR6cHmRmtiF4RqXOgMtTgw3yrqkycWD/TBLynGoTPCimZRf5bbPLOiu93C kcg6FWB5pFfwf9OVzBUyxIoZtAws488113B92glVl+t9zakyYDo9CathM96GspuZ SFGk5t7UCwCCgAWv1AnqqDmz3A== -----END CERTIFICATE-----Generated at Wed Oct 14 09:56:26 2026 by rpki-client