$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: Fb5hUco2nZYA17hLjpL3mlac5GRe+HYEPwOUY7CP2W0= Subject key identifier: 16:BC:30:7B:A8:0D:78:C2:7D:EE:74:91:36:8C:A0:F3:8D:FB:30:BC Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 036D Signing time: Fri 25 Sep 2026 00:41:08 +0000 Manifest this update: Fri 25 Sep 2026 00:41:08 +0000 Manifest next update: Fri 02 Oct 2026 00:41:08 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: kWQ95XfbO5r6i4mrIQ6iuwvOQ8Jgf7EgLDcmEWPAlmE=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: knDy628uBHc0xyl65AH5Q4Dg6SIjdEf/qj441Xa26zI=) 3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: 3tR98Qpp+cElPjcCs79m4oSOnnMvkWLHmAoCd/9m2C8=) 4: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: Y517FjnOIlJoEuMsljxEPUYQv1AnUzE1TBfadkK2NDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 25 00:41:08 2026 GMT Not After : Oct 2 00:41:08 2026 GMT Subject: CN=6ab5c324-31fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:12:7c:40:dc:8a:94:89:c9:40:66:a6:0a: 9b:1d:95:24:3d:38:f8:66:8a:48:7f:2d:97:da:91: 1c:6c:9f:4f:73:67:4e:9b:0a:a8:3e:e1:44:35:6d: 33:e2:fb:63:20:fa:c0:d1:c1:de:f3:25:cd:c7:3c: b1:88:d2:be:d1:52:e2:88:fd:d2:84:bb:e1:41:a1: a2:02:3e:9c:a2:f6:6b:f9:d6:cd:52:a7:16:c1:6d: 69:37:50:75:28:7c:ef:1e:19:1f:fd:cd:ad:ff:be: a7:7f:30:2f:7b:7b:b5:27:60:c2:d2:4f:ab:c7:97: b6:43:68:ba:68:59:e6:a9:29:00:a3:7d:4a:81:ae: df:ad:f4:ca:a7:5a:81:62:81:12:07:97:08:ad:77: db:27:01:a0:49:60:77:57:b3:29:c7:9c:4b:89:17: 44:d9:47:ce:5a:07:c6:c4:a8:da:5e:44:ab:83:36: a2:b6:e5:28:3a:6a:38:8f:b2:f0:01:03:40:cc:f6: fc:bf:5b:18:46:c1:51:ee:d3:8e:f3:3e:2d:36:27: 56:9a:97:9d:9d:d4:08:19:81:e6:d0:12:04:cc:9c: b5:97:65:5c:41:27:95:07:e1:49:5b:3a:f9:23:51: 77:38:fd:c9:e1:d6:c4:55:88:e5:d4:34:e5:66:8b: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BC:30:7B:A8:0D:78:C2:7D:EE:74:91:36:8C:A0:F3:8D:FB:30:BC X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:29:ad:27:68:d2:64:0b:ba:d3:2f:85:37:67:f1:42:8c:8b: 1e:c1:d0:4a:0b:ff:2d:33:43:f3:27:0c:80:32:04:98:66:3a: 36:57:e0:97:d2:d2:83:79:17:ee:94:08:a9:cd:11:5d:88:28: c8:9a:58:b3:b9:2e:f9:8e:36:61:91:f5:39:6e:41:1a:3c:58: ce:82:44:dc:be:3e:9b:f0:4d:bf:37:c3:22:8b:07:2c:b0:44: 00:52:25:b5:14:3d:ac:4f:3e:f8:54:e2:6c:59:55:d0:b3:68: d1:90:49:b7:f3:bf:ff:72:10:89:e6:2f:65:54:0d:16:35:0f: 1b:6e:da:ac:26:70:01:33:f2:eb:8d:72:05:3b:21:f1:6b:69: 4c:fa:d4:dc:62:c7:3b:42:9c:1d:e4:71:d0:2f:bc:ac:3c:c9: 21:fc:ed:6b:38:31:e0:e7:4b:01:49:b4:74:0b:d0:d5:8b:90: 5e:d8:db:ed:30:58:54:b7:55:15:cf:de:25:e8:8e:bb:f8:77: 3d:53:13:c2:9d:4e:41:f0:cd:0f:70:fc:12:5c:bc:fd:96:ab: ec:d2:ad:e8:fa:63:34:75:79:5f:0d:6b:1a:81:01:c4:d1:60: 48:78:d2:7b:49:4f:74:15:14:c0:1c:28:75:c3:3d:c4:e5:d2: 20:ed:d1:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYwOTI1MDA0MTA4WhcNMjYxMDAyMDA0MTA4WjAYMRYwFAYD VQQDEw02YWI1YzMyNC0zMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseMSfEDcipSJyUBmpgqbHZUkPTj4ZopIfy2X2pEcbJ9Pc2dOmwqoPuFENW0z 4vtjIPrA0cHe8yXNxzyxiNK+0VLiiP3ShLvhQaGiAj6covZr+dbNUqcWwW1pN1B1 KHzvHhkf/c2t/76nfzAve3u1J2DC0k+rx5e2Q2i6aFnmqSkAo31Kga7frfTKp1qB YoESB5cIrXfbJwGgSWB3V7Mpx5xLiRdE2UfOWgfGxKjaXkSrgzaituUoOmo4j7Lw AQNAzPb8v1sYRsFR7tOO8z4tNidWmpedndQIGYHm0BIEzJy1l2VcQSeVB+FJWzr5 I1F3OP3J4dbEVYjl1DTlZotDwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBa8MHuo DXjCfe50kTaMoPON+zC8MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFCmtJ2jSZAu60y+FN2fxQoyLHsHQSgv/LTND8ycMgDIEmGY6Nlfgl9LSg3kX 7pQIqc0RXYgoyJpYs7ku+Y42YZH1OW5BGjxYzoJE3L4+m/BNvzfDIosHLLBEAFIl tRQ9rE8++FTibFlV0LNo0ZBJt/O//3IQieYvZVQNFjUPG27arCZwATPy641yBTsh 8WtpTPrU3GLHO0KcHeRx0C+8rDzJIfztazgx4OdLAUm0dAvQ1YuQXtjb7TBYVLdV Fc/eJeiOu/h3PVMTwp1OQfDND3D8Ely8/Zar7NKt6PpjNHV5Xw1rGoEBxNFgSHjS e0lPdBUUwBwodcM9xOXSIO3R8g== -----END CERTIFICATE-----Generated at Fri Sep 25 13:31:38 2026 by rpki-client