$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: Pi8Dz02IE69yK/GN3fg9chtBk9gUwLfUa2KuPdXyGnU= Subject key identifier: E5:02:79:34:F0:C3:2E:57:8E:56:53:09:DF:FF:7D:BA:C6:39:C8:BF Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 02A7 Signing time: Sat 05 Sep 2026 01:24:50 +0000 Manifest this update: Sat 05 Sep 2026 01:24:50 +0000 Manifest next update: Sat 12 Sep 2026 01:24:50 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: igJOHSP4IB9swdGelNK8uKAPvoN8gcKc7pdo/1nhZgw=) 2: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=) 4: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Sep 5 01:24:50 2026 GMT Not After : Sep 12 01:24:50 2026 GMT Subject: CN=6a9b6f62-4f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:72:11:85:83:ab:88:15:ea:28:b5:4a:30: 71:2c:b3:4b:8f:49:dc:13:e2:f6:49:bf:f7:37:02: 2c:1c:70:d1:22:53:7a:95:b4:45:75:9a:9f:97:75: ad:90:40:a0:80:86:c0:07:66:59:7e:36:54:4b:c3: 1c:6c:84:aa:81:e0:a0:1e:30:35:bc:10:32:c5:e1: 52:ba:fc:7d:21:76:75:76:27:78:d7:13:cd:08:4c: ad:c3:37:d7:b1:d1:af:65:0b:91:50:21:6a:10:c3: 23:5e:ea:b1:31:54:a2:09:42:03:a3:74:98:04:41: 44:e8:11:82:1e:76:f4:49:26:62:4a:12:ed:3c:65: 91:21:43:ae:4e:00:c2:b3:13:4d:ba:01:59:64:bc: 0e:d5:5a:c2:ab:1c:64:08:3c:7c:b9:69:75:53:8c: e2:48:74:3d:29:34:6d:26:ce:78:74:7e:f0:88:8a: e7:b2:42:2b:bf:59:62:f9:6d:ba:07:c0:d8:ca:7f: 48:e5:a1:c2:64:70:f0:f1:bf:21:8b:38:70:7b:78: 4b:e5:19:3f:64:1b:63:50:ea:68:72:5a:86:62:53: e6:9c:60:a2:17:50:e9:03:11:bd:d9:60:56:85:49: 2c:35:60:f6:5e:4f:c1:1a:8e:67:70:18:4c:54:e8: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:79:34:F0:C3:2E:57:8E:56:53:09:DF:FF:7D:BA:C6:39:C8:BF X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:b3:e5:da:34:3a:4f:e9:d6:1b:cb:6f:1f:6c:50:35:89: ad:9d:7f:6e:da:18:be:29:de:ab:3b:b3:c7:a8:98:45:1b:14: 08:71:3e:4b:c3:b4:df:fa:35:7f:97:da:ec:b4:cb:ad:cb:db: 4a:f2:9a:e4:1b:88:44:26:b8:9c:d9:5d:eb:e3:14:2e:e2:2f: a6:e6:33:18:84:0f:5e:f5:a5:f9:eb:d1:92:0b:4f:77:45:98: a5:a1:f7:36:12:a8:64:69:fd:bc:43:e6:a6:f7:3a:89:89:24: 58:86:ae:0c:6a:90:2c:eb:c1:22:fc:11:38:7a:f1:e7:0f:f4: 87:a6:70:37:2c:d2:fe:c5:5a:32:c8:e1:e1:63:7f:79:b6:26: 25:5a:2b:ce:84:c6:e2:d9:d1:be:34:e2:a1:40:72:1f:e3:48: 9e:25:17:93:39:7b:d2:6c:8f:e0:5e:c5:d1:c2:da:38:91:89: 0d:30:df:83:c9:40:33:b2:7b:e5:78:48:24:6d:74:b6:d9:91: 59:2a:4b:04:84:d0:68:4c:52:a7:c5:4e:8f:47:6f:30:00:9b: a4:9a:10:53:88:cf:14:05:67:25:ea:b5:8f:4f:c1:67:76:fb: e3:ed:11:72:b4:48:7c:e1:57:72:e4:06:95:50:ab:78:de:9a: ae:39:d9:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjYwOTA1MDEyNDUwWhcNMjYwOTEyMDEyNDUwWjAYMRYwFAYD VQQDEw02YTliNmY2Mi00Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTFyEYWDq4gV6ii1SjBxLLNLj0ncE+L2Sb/3NwIsHHDRIlN6lbRFdZqfl3Wt kECggIbAB2ZZfjZUS8McbISqgeCgHjA1vBAyxeFSuvx9IXZ1did41xPNCEytwzfX sdGvZQuRUCFqEMMjXuqxMVSiCUIDo3SYBEFE6BGCHnb0SSZiShLtPGWRIUOuTgDC sxNNugFZZLwO1VrCqxxkCDx8uWl1U4ziSHQ9KTRtJs54dH7wiIrnskIrv1li+W26 B8DYyn9I5aHCZHDw8b8hizhwe3hL5Rk/ZBtjUOpoclqGYlPmnGCiF1DpAxG92WBW hUksNWD2Xk/BGo5ncBhMVOillwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUCeTTw wy5XjlZTCd//fbrGOci/MB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASGSz5do0Ok/p1hvLbx9sUDWJrZ1/btoYvineqzuzx6iYRRsUCHE+S8O03/o1 f5fa7LTLrcvbSvKa5BuIRCa4nNld6+MULuIvpuYzGIQPXvWl+evRkgtPd0WYpaH3 NhKoZGn9vEPmpvc6iYkkWIauDGqQLOvBIvwROHrx5w/0h6ZwNyzS/sVaMsjh4WN/ ebYmJVorzoTG4tnRvjTioUByH+NIniUXkzl70myP4F7F0cLaOJGJDTDfg8lAM7J7 5XhIJG10ttmRWSpLBITQaExSp8VOj0dvMACbpJoQU4jPFAVnJeq1j0/BZ3b74+0R crRIfOFXcuQGlVCreN6arjnZ5g== -----END CERTIFICATE-----Generated at Sat Sep 5 06:15:47 2026 by rpki-client