$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: QxQa8GBgI8qwsolqCsX9QoMjfboLsdRNmXG8EbGrx9k= Subject key identifier: 8A:B9:D1:21:35:78:F4:74:7C:8E:E1:97:11:BC:17:77:EB:53:6E:D4 Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 0133 Signing time: Wed 23 Sep 2026 05:29:05 +0000 Manifest this update: Wed 23 Sep 2026 05:29:05 +0000 Manifest next update: Wed 30 Sep 2026 05:29:05 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: eFLQ5shHWKSN/CufqltKLYZg7s+yufxYpFO/JPvCR0I=) 2: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 7YbtNnJCqqYGkWXbAOraecUqD8bW4P8HUGL4Pnjq7RY=) 3: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: hglWubZXzfjiLQUkYHVzTqN3YyCMG1Pzr8h/6XyrD8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Sep 23 05:29:05 2026 GMT Not After : Sep 30 05:29:05 2026 GMT Subject: CN=6ab363a1-e145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:c3:ce:1a:fe:80:b5:98:73:11:6e:1b:4b: 87:36:81:21:18:74:c9:ab:e1:0c:97:f8:66:a8:ef: 80:09:c3:ff:f6:9c:db:36:99:7c:07:ac:bc:35:11: 96:f3:55:78:93:62:1b:b2:d7:52:3a:4f:71:18:eb: ae:8a:b9:b1:f2:89:c9:d7:41:e3:2f:23:09:f5:d3: 1a:e1:83:e2:55:fb:03:bb:60:a2:fe:e0:c2:75:ba: ef:60:8b:91:0f:8a:17:2d:eb:8a:43:cd:b8:8a:50: b6:5a:07:49:0c:9c:37:8b:af:a7:df:1b:c1:ba:9b: 24:2a:7f:00:35:98:b5:d4:19:7c:a2:08:d2:02:e6: 6b:15:e0:ee:a0:57:27:52:1d:e9:b2:49:2e:20:6c: ea:e4:45:63:03:30:ae:13:3c:3b:6b:53:35:6e:dd: 72:ae:c7:6f:6d:07:d3:5f:25:75:b6:c8:97:65:6f: cf:1e:be:d5:90:4d:c5:c0:35:db:8c:e0:53:3a:38: 3a:81:4d:a4:57:f7:42:7a:1c:cd:9c:ed:f4:64:2f: 7c:15:4a:83:79:42:11:2b:7c:a4:7e:d7:47:83:80: 8f:70:9f:2c:fa:e0:1b:ed:b7:61:91:5c:c9:6e:0a: 6d:5e:21:36:c7:84:19:ca:b5:90:9d:c1:f3:5f:21: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:D1:21:35:78:F4:74:7C:8E:E1:97:11:BC:17:77:EB:53:6E:D4 X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:84:a1:2b:7d:05:69:5b:3f:ef:b7:6e:56:99:21:57:38:3e: 42:6a:e5:e3:04:15:6f:10:b2:39:db:9c:cd:ca:de:9b:df:cc: e7:2b:53:3f:a5:85:93:20:bd:80:e6:dc:2d:fe:67:1f:c9:b2: d3:95:ed:8b:5c:3e:8e:0a:09:75:c9:20:4c:a1:39:f1:5c:85: f8:41:fe:e3:d8:d8:a5:13:db:64:2f:c4:15:9e:3a:d2:fa:a3: 84:d7:d9:72:39:36:44:77:c1:28:c4:a0:b3:b2:69:ff:d2:e9: e1:4a:89:e8:97:7d:22:d1:b2:eb:35:a2:93:43:af:21:57:49: eb:84:7f:4e:3a:87:43:dc:b0:69:61:a2:90:39:9e:e4:98:2e: 83:e8:79:5a:b3:88:86:45:6b:43:3b:0c:01:cd:e2:a9:30:65: 63:09:07:93:2e:bd:31:25:55:ae:1b:a8:46:b3:af:8a:be:84: 2b:36:6a:48:40:72:df:e9:67:e5:c0:61:c3:a8:10:5d:d6:7d: 4c:1b:19:e4:3f:36:60:5f:6b:f7:6e:fc:ca:84:15:89:31:bd: 8f:0c:b0:3d:fa:51:0b:15:94:18:a4:5f:53:f6:3b:ea:a5:af: 5e:7f:22:28:6b:e2:06:a9:16:f8:69:6d:91:09:d8:10:11:ba: 61:53:0f:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3 NUVBRTZEMjkwHhcNMjYwOTIzMDUyOTA1WhcNMjYwOTMwMDUyOTA1WjAYMRYwFAYD VQQDEw02YWIzNjNhMS1lMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTHDzhr+gLWYcxFuG0uHNoEhGHTJq+EMl/hmqO+ACcP/9pzbNpl8B6y8NRGW 81V4k2IbstdSOk9xGOuuirmx8onJ10HjLyMJ9dMa4YPiVfsDu2Ci/uDCdbrvYIuR D4oXLeuKQ824ilC2WgdJDJw3i6+n3xvBupskKn8ANZi11Bl8ogjSAuZrFeDuoFcn Uh3pskkuIGzq5EVjAzCuEzw7a1M1bt1yrsdvbQfTXyV1tsiXZW/PHr7VkE3FwDXb jOBTOjg6gU2kV/dCehzNnO30ZC98FUqDeUIRK3ykftdHg4CPcJ8s+uAb7bdhkVzJ bgptXiE2x4QZyrWQncHzXyFa8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIq50SE1 ePR0fI7hlxG8F3frU27UMB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5 UlRjcWpqczJnMHgxNnViU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIShK30FaVs/77duVpkhVzg+Qmrl4wQVbxCyOduczcrem9/M5ytTP6WFkyC9 gObcLf5nH8my05Xti1w+jgoJdckgTKE58VyF+EH+49jYpRPbZC/EFZ460vqjhNfZ cjk2RHfBKMSgs7Jp/9Lp4UqJ6Jd9ItGy6zWik0OvIVdJ64R/TjqHQ9ywaWGikDme 5Jgug+h5WrOIhkVrQzsMAc3iqTBlYwkHky69MSVVrhuoRrOvir6EKzZqSEBy3+ln 5cBhw6gQXdZ9TBsZ5D82YF9r9278yoQViTG9jwywPfpRCxWUGKRfU/Y76qWvXn8i KGviBqkW+GltkQnYEBG6YVMPJw== -----END CERTIFICATE-----Generated at Thu Sep 24 10:03:51 2026 by rpki-client