$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: K4amt/8AO9lUVkIqlAXP2ke748IrUsQLaLcUyCMLcCo= Subject key identifier: FD:5D:33:1D:95:AA:FD:7C:46:E5:91:58:2C:4C:13:C3:E3:9E:48:88 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 087A Signing time: Mon 26 Oct 2026 20:56:56 +0000 Manifest this update: Mon 26 Oct 2026 20:56:56 +0000 Manifest next update: Mon 02 Nov 2026 20:56:56 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: 3eSsw958k5HIJsS9f+JXsCdLBEToVc64T3hhzBFfDYQ=) 2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=) 3: 7C76080E08D611EE82522448C4F9AE02.roa (hash: R42a1XTZV+JT3ULvAq3AmV+IeV1nfk19HZc62DZHUKY=) 4: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=) 5: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Oct 26 20:56:56 2026 GMT Not After : Nov 2 20:56:56 2026 GMT Subject: CN=6adfbe98-0cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:4e:82:bd:eb:e7:13:bd:55:1d:f6:15:03: ac:81:ec:66:7f:3a:de:a1:31:2f:60:d2:6d:12:46: b5:ef:89:56:16:38:5d:1d:39:3c:50:06:17:02:76: 0f:89:ff:db:93:ec:70:d4:80:8c:26:bb:ad:ab:9b: d6:04:c3:94:06:c9:49:80:18:b4:74:5d:a3:89:4b: 19:c5:9b:7f:27:63:91:31:4f:58:da:90:0a:ea:7c: cc:60:ef:75:40:d5:f9:52:c7:7f:45:f8:09:cb:0d: f7:5e:fe:f6:98:be:dc:38:39:2d:7b:b8:9f:f8:df: a7:54:57:0b:8b:b0:1c:28:41:b3:46:72:03:3c:25: 00:30:b9:8a:0a:a3:84:86:ec:33:7c:02:8a:04:01: 51:37:13:86:87:f6:76:af:df:52:2e:18:3f:32:18: c6:39:66:70:08:e8:dd:e8:ac:58:6a:ba:0d:1c:84: 75:1c:b9:68:87:91:ad:8a:8d:1d:5d:e2:d4:87:61: e8:dd:11:0b:49:36:99:1c:7c:8d:0f:35:25:21:be: 5a:d6:48:c5:99:3d:b3:73:28:1f:56:49:fd:cb:f7: cb:fc:c0:12:46:f6:3c:f1:a9:4e:3e:ee:b1:01:03: 17:08:37:3b:59:80:00:02:a8:9c:12:33:63:6c:69: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5D:33:1D:95:AA:FD:7C:46:E5:91:58:2C:4C:13:C3:E3:9E:48:88 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d3:c6:88:98:00:97:28:68:b6:79:06:5e:d3:9d:74:52:d9: 08:e5:13:32:30:5f:6a:15:e8:59:b2:58:cf:ed:de:4c:84:3d: b2:74:ee:1a:5e:77:91:2b:5f:1b:c7:10:c8:58:46:ee:44:e3: 3b:bf:cd:6c:55:3c:f3:ab:9f:04:be:0a:9e:71:55:2d:e4:28: 54:8e:a2:9f:e9:76:f2:39:af:48:5e:33:dc:a8:f9:43:bc:dc: df:ba:74:93:7e:cf:d0:2f:b0:f6:16:b7:57:d6:c4:5f:cb:ca: ad:63:ca:9c:f6:08:1a:da:15:95:bc:27:81:bd:5a:04:c8:ee: d6:53:9e:44:a8:e0:8a:63:d8:fe:61:a7:ce:61:1e:75:c1:6c: c9:ae:aa:07:9a:15:a2:f4:6e:54:2d:e5:08:ab:47:70:a8:34: 34:2d:aa:d8:0b:a2:a4:28:f8:de:fd:43:ac:66:52:38:38:c5: 78:e6:a2:2c:69:bb:7e:5b:c0:34:e3:aa:75:0c:a0:77:24:bd: 5b:90:b0:2a:89:fd:77:ee:e3:8f:2f:5d:62:88:4c:58:2d:c4: 42:f9:1f:c7:26:81:cd:0e:d6:88:f8:9a:e2:09:98:85:f4:5b: c7:b1:a3:6d:a7:c6:f2:1f:12:50:fe:b1:81:ca:97:e2:b4:91: da:1e:33:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYxMDI2MjA1NjU2WhcNMjYxMTAyMjA1NjU2WjAYMRYwFAYD VQQDEw02YWRmYmU5OC0wY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjVOgr3r5xO9VR32FQOsgexmfzreoTEvYNJtEka174lWFjhdHTk8UAYXAnYP if/bk+xw1ICMJrutq5vWBMOUBslJgBi0dF2jiUsZxZt/J2ORMU9Y2pAK6nzMYO91 QNX5Usd/RfgJyw33Xv72mL7cODkte7if+N+nVFcLi7AcKEGzRnIDPCUAMLmKCqOE huwzfAKKBAFRNxOGh/Z2r99SLhg/MhjGOWZwCOjd6KxYaroNHIR1HLloh5Gtio0d XeLUh2Ho3RELSTaZHHyNDzUlIb5a1kjFmT2zcygfVkn9y/fL/MASRvY88alOPu6x AQMXCDc7WYAAAqicEjNjbGl2BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1dMx2V qv18RuWRWCxME8PjnkiIMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk9PGiJgAlyhotnkGXtOddFLZCOUTMjBfahXoWbJYz+3eTIQ9snTuGl53kStf G8cQyFhG7kTjO7/NbFU886ufBL4KnnFVLeQoVI6in+l28jmvSF4z3Kj5Q7zc37p0 k37P0C+w9ha3V9bEX8vKrWPKnPYIGtoVlbwngb1aBMju1lOeRKjgimPY/mGnzmEe dcFsya6qB5oVovRuVC3lCKtHcKg0NC2q2AuipCj43v1DrGZSODjFeOaiLGm7flvA NOOqdQygdyS9W5CwKon9d+7jjy9dYohMWC3EQvkfxyaBzQ7WiPia4gmYhfRbx7Gj bafG8h8SUP6xgcqX4rSR2h4zKA== -----END CERTIFICATE-----Generated at Wed Oct 28 11:41:43 2026 by rpki-client