$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: cDJUWBBNy5STYZXmYnni0U2Vf5qyjCckzwg3bOwzLho= Subject key identifier: FE:C8:E7:64:DF:97:CA:8F:1A:D9:F2:6C:B5:2D:89:F9:76:B4:0E:A3 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 018C Signing time: Tue 25 Aug 2026 04:23:34 +0000 Manifest this update: Tue 25 Aug 2026 04:23:34 +0000 Manifest next update: Tue 01 Sep 2026 04:23:34 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: v3eNBktSiAipHiUillG/bDkZJ/z5MHqTbRkSd6a4YqA=) 2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=) 3: CE2868C28F4C11F18259B4DA4511F970.roa (hash: SVvm79oQMCFC2IGmLTLLnWJV/qee9aelISNdMkE7N/8=) 4: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Aug 25 04:23:34 2026 GMT Not After : Sep 1 04:23:34 2026 GMT Subject: CN=6a8d18c6-7ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:ce:f8:3b:f8:55:fc:39:21:90:12:78:f0: 36:51:ce:59:df:55:bf:35:eb:e1:a0:bc:3d:2e:75: aa:51:7b:12:dd:a8:65:5e:6d:6e:ed:4e:ef:dc:a7: 44:44:09:5a:6f:64:96:d0:6a:e6:3c:05:7a:c2:d9: 76:b6:5f:b2:5b:71:63:ae:bb:1b:db:82:9e:54:4e: 37:9e:ef:92:74:27:74:a5:dd:46:0e:e9:d7:7d:76: 31:97:a1:01:00:82:26:01:90:50:34:82:85:f6:fd: d8:33:db:54:5a:c3:77:3e:15:ee:a8:9e:64:32:6f: 4f:2f:97:82:c1:ba:90:38:5c:31:18:be:89:2d:08: 8f:26:e7:a6:bf:e0:f9:01:97:e7:c8:18:c9:97:ee: 6f:f7:c1:7a:b0:47:43:37:8a:d2:75:91:a4:76:b0: d2:6b:a5:5b:84:66:95:96:32:d2:00:e5:1c:78:41: 71:44:8d:79:f7:0a:f7:54:98:68:4b:fe:a0:ad:77: 4f:74:1b:cd:82:93:42:7b:bc:0f:47:6e:ff:3e:87: cb:7a:9f:ef:8e:ab:9c:78:e6:79:f9:70:48:59:fa: 01:fc:14:64:3b:98:6d:7f:a7:6b:3e:d3:b6:75:27: d7:b2:1c:84:33:3a:a8:3a:59:b6:76:34:4d:79:35: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:E7:64:DF:97:CA:8F:1A:D9:F2:6C:B5:2D:89:F9:76:B4:0E:A3 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:40:56:7d:51:97:1b:62:8d:9b:c7:cc:17:55:c9:d1:e8:3a: fd:e1:bc:c8:ff:a1:6d:db:d9:55:b6:13:79:6d:87:a7:94:21: 28:35:1f:09:14:92:50:ed:56:5d:70:44:46:39:d3:0f:09:8e: 4a:31:13:2a:71:ce:9b:1d:be:cf:18:cc:84:5e:36:89:6d:07: 63:63:8e:53:5b:d8:74:f2:9f:e2:45:8d:cb:60:d4:59:78:5a: b3:80:ba:4b:7a:2f:0a:3d:dd:d5:88:02:39:71:ec:2e:17:11: 0c:51:cf:fd:d4:db:d4:15:1e:f7:56:eb:58:43:35:a3:73:17: 87:80:50:be:c2:f3:6c:5c:72:e0:f6:14:1b:25:46:cd:84:30: 92:c4:75:5a:1b:6d:ba:c8:e4:1b:72:45:27:92:92:ce:e9:ef: 18:48:aa:7f:4b:f8:06:63:63:14:b3:fb:81:11:75:c7:f7:3b: 86:d4:6e:82:eb:8f:90:40:52:7b:63:a5:12:6c:9d:d5:d8:d8: f9:31:3d:1f:00:50:7e:0d:13:29:64:77:e5:95:08:b5:32:07: ba:21:2a:d6:d5:eb:b6:d2:dd:cc:fd:e3:24:10:4f:97:10:94: c4:d9:02:e5:3d:b0:c0:52:f7:5a:62:59:38:78:6a:ab:38:62: 49:76:a6:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjYwODI1MDQyMzM0WhcNMjYwOTAxMDQyMzM0WjAYMRYwFAYD VQQDEw02YThkMThjNi03ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfTO+Dv4Vfw5IZASePA2Uc5Z31W/NevhoLw9LnWqUXsS3ahlXm1u7U7v3KdE RAlab2SW0GrmPAV6wtl2tl+yW3Fjrrsb24KeVE43nu+SdCd0pd1GDunXfXYxl6EB AIImAZBQNIKF9v3YM9tUWsN3PhXuqJ5kMm9PL5eCwbqQOFwxGL6JLQiPJuemv+D5 AZfnyBjJl+5v98F6sEdDN4rSdZGkdrDSa6VbhGaVljLSAOUceEFxRI159wr3VJho S/6grXdPdBvNgpNCe7wPR27/PofLep/vjquceOZ5+XBIWfoB/BRkO5htf6drPtO2 dSfXshyEMzqoOlm2djRNeTVwgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7I52Tf l8qPGtnybLUtifl2tA6jMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATEBWfVGXG2KNm8fMF1XJ0eg6/eG8yP+hbdvZVbYTeW2Hp5QhKDUfCRSSUO1W XXBERjnTDwmOSjETKnHOmx2+zxjMhF42iW0HY2OOU1vYdPKf4kWNy2DUWXhas4C6 S3ovCj3d1YgCOXHsLhcRDFHP/dTb1BUe91brWEM1o3MXh4BQvsLzbFxy4PYUGyVG zYQwksR1WhttusjkG3JFJ5KSzunvGEiqf0v4BmNjFLP7gRF1x/c7htRuguuPkEBS e2OlEmyd1djY+TE9HwBQfg0TKWR35ZUItTIHuiEq1tXrttLdzP3jJBBPlxCUxNkC 5T2wwFL3WmJZOHhqqzhiSXamKQ== -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:28 2026 by rpki-client