$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: BaoojZ5nH70j8xnh1dgoK+UFrK9bfNR3LHyqSpGpTzk= Subject key identifier: 20:4B:A9:39:EE:0F:2F:41:AD:BE:42:71:9E:11:AF:95:7D:E5:9C:71 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 01A6 Signing time: Sun 11 Oct 2026 04:45:30 +0000 Manifest this update: Sun 11 Oct 2026 04:45:29 +0000 Manifest next update: Sun 18 Oct 2026 04:45:29 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: 42ZHLvUtppQd7Fm/ZftH0q1FBgudaam6LzJAyAKsOdk=) 2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ol6GVz47sRCGDVdpSbtKqXjVimVSYgLAgjn3lhayf1k=) 3: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: qUAsmwJrGNnZ4LMlEZRu5pS5wvgSSSd1+jpCN0g9BCk=) 4: CE2868C28F4C11F18259B4DA4511F970.roa (hash: cu7AnJ9TPxK2uGn4bkgIAX6kf4pKIeDeneOPNEPA89k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Oct 11 04:45:29 2026 GMT Not After : Oct 18 04:45:29 2026 GMT Subject: CN=6acb146a-babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:db:16:94:86:22:94:1a:2c:bb:bb:32:ad: 2b:8b:24:63:58:b6:2e:93:7b:4e:64:1d:12:99:ab: 9c:6d:56:52:5c:c3:83:98:63:88:04:ec:38:ac:21: 28:b4:66:55:85:43:6b:41:ee:24:34:3e:9a:d8:dd: 4b:47:ab:a4:99:0b:af:53:6b:93:31:58:99:83:ca: 5a:91:ee:e2:75:f1:a6:6d:c7:b0:05:7f:71:e4:fa: b1:a5:7f:04:94:72:fa:01:43:01:0b:69:c6:bc:d8: 74:87:0f:c7:1c:b0:56:d0:db:02:ad:d2:2a:55:d7: b1:0f:ae:8d:e5:fe:78:50:13:dd:63:93:30:97:c9: 96:f5:4d:5b:8c:7d:74:42:e8:5c:d1:9c:4d:b4:19: 58:0e:33:51:b4:b4:3f:44:89:45:68:9c:75:b8:42: 66:d2:68:7e:28:f4:ba:de:2f:98:32:dc:7a:47:65: e2:60:9b:08:f2:88:3d:f2:8d:a8:cb:19:20:e7:6a: 16:1d:0b:13:a3:9a:be:bb:e8:01:5c:32:78:e1:18: b9:54:1c:9e:0e:25:eb:71:c9:79:55:21:96:23:b8: 38:75:be:8f:23:19:85:0a:e6:d9:1b:6a:5b:64:7a: ab:3e:c6:fd:6f:b4:24:5b:a2:c0:b1:e3:59:0c:38: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:A9:39:EE:0F:2F:41:AD:BE:42:71:9E:11:AF:95:7D:E5:9C:71 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:0b:29:90:7f:b9:db:c2:f5:92:00:ad:4a:71:cb:4a:0a: 30:03:8b:ff:6a:03:ca:3b:65:0d:9a:b0:8d:b0:03:f5:5b:0e: c0:a2:ea:ca:67:a4:64:65:50:3e:83:08:0f:07:3c:19:82:1d: c8:98:28:74:bf:f2:06:6b:ed:f5:2a:46:0a:c7:95:6a:7a:33: 05:ee:cf:f6:af:f6:dd:e4:e1:84:d1:ab:f9:d0:90:99:3b:00: 95:f2:66:ca:4c:a3:8c:7f:cb:90:35:84:4c:08:0f:b5:b1:63: 6a:73:be:3a:11:f1:b2:0a:04:8d:2f:0c:df:df:4d:d9:64:21: 54:3c:3e:85:01:a0:c0:18:48:d3:74:28:a1:00:92:2e:6f:65: a5:c7:6a:50:64:3d:84:62:d7:6f:a3:77:b4:e0:ad:66:1c:f1: 70:19:89:e2:27:5b:58:d6:51:e3:2d:16:45:97:77:22:a2:9b: a3:4c:d5:86:40:f0:ac:67:7e:20:d3:10:72:e9:49:59:a1:8c: 49:d1:6f:c2:eb:04:7c:9f:a9:e3:82:0d:5b:1c:3f:83:0e:0d: a3:94:d5:7d:7f:96:34:9e:cf:af:49:66:ba:4c:ed:51:d3:d2: dc:b7:c3:4c:c4:7f:fe:51:7b:8b:a5:c9:f1:f3:b2:43:c3:09: bc:06:3b:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjYxMDExMDQ0NTI5WhcNMjYxMDE4MDQ0NTI5WjAYMRYwFAYD VQQDEw02YWNiMTQ2YS1iYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswHbFpSGIpQaLLu7Mq0riyRjWLYuk3tOZB0SmaucbVZSXMODmGOIBOw4rCEo tGZVhUNrQe4kND6a2N1LR6ukmQuvU2uTMViZg8pake7idfGmbcewBX9x5PqxpX8E lHL6AUMBC2nGvNh0hw/HHLBW0NsCrdIqVdexD66N5f54UBPdY5Mwl8mW9U1bjH10 Quhc0ZxNtBlYDjNRtLQ/RIlFaJx1uEJm0mh+KPS63i+YMtx6R2XiYJsI8og98o2o yxkg52oWHQsTo5q+u+gBXDJ44Ri5VByeDiXrccl5VSGWI7g4db6PIxmFCubZG2pb ZHqrPsb9b7QkW6LAseNZDDiJ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBLqTnu Dy9Brb5CcZ4Rr5V95ZxxMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMsMLKZB/udvC9ZIArUpxy0oKMAOL/2oDyjtlDZqwjbAD9VsOwKLqymekZGVQ PoMIDwc8GYIdyJgodL/yBmvt9SpGCseVanozBe7P9q/23eThhNGr+dCQmTsAlfJm ykyjjH/LkDWETAgPtbFjanO+OhHxsgoEjS8M399N2WQhVDw+hQGgwBhI03QooQCS Lm9lpcdqUGQ9hGLXb6N3tOCtZhzxcBmJ4idbWNZR4y0WRZd3IqKbo0zVhkDwrGd+ INMQculJWaGMSdFvwusEfJ+p44INWxw/gw4No5TVfX+WNJ7Pr0lmukztUdPS3LfD TMR//lF7i6XJ8fOyQ8MJvAY78A== -----END CERTIFICATE-----Generated at Mon Oct 12 22:07:37 2026 by rpki-client