$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: r9BX0Rey7O5q6AVkul9vTN4qcUhoT0e8kT5FTSLl+40= Subject key identifier: 47:85:BF:03:C2:47:83:77:77:6D:E6:AE:66:49:A6:B1:FC:8A:A5:54 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0BC2 Signing time: Mon 26 Oct 2026 16:34:39 +0000 Manifest this update: Mon 26 Oct 2026 16:34:39 +0000 Manifest next update: Mon 02 Nov 2026 16:34:39 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: Q3QDODd0QNpaPFjm1+QhbyEce6tSwrSIMd0+aeulkUQ=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: nqbQIgrhmeL5wj3GGG2dipmCVF4BUOr4+zNFb87qa/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Oct 26 16:34:39 2026 GMT Not After : Nov 2 16:34:39 2026 GMT Subject: CN=6adf811f-ffb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:8b:d3:9f:da:81:cf:f4:8e:07:bb:2e:26: 0d:b1:fa:be:eb:b1:5f:42:05:55:e8:d9:c4:30:34: 71:d0:7d:b0:ef:7d:6d:85:22:b7:af:04:bb:c8:9d: 84:12:18:57:12:a7:4c:7f:cb:9c:41:3d:28:6c:a1: 86:69:05:a7:a1:05:28:3d:53:75:e4:a7:c8:37:c3: f5:2d:2d:74:9d:2d:fb:91:34:69:e8:6c:eb:a1:39: 8c:1e:45:4a:a3:ea:fb:61:40:65:9c:09:97:d5:06: 8b:bb:18:26:5a:2b:56:1f:fe:6c:5c:1f:f3:5e:1d: fd:72:61:de:0b:36:5c:51:92:96:e4:fd:06:56:e1: 90:00:db:6f:b5:96:1a:d6:be:ed:52:b0:36:74:b5: ba:5b:a6:5c:b3:2b:22:75:dc:16:b7:4d:b7:cf:a2: df:5e:44:b4:5c:ba:bd:51:bc:7b:4e:3e:a3:92:86: 76:ed:4d:51:ee:a4:1f:d3:fc:d5:82:68:10:a5:6d: bc:8b:70:83:c3:88:bb:aa:8d:c7:e8:75:ed:0d:20: 9d:04:e7:25:cf:b4:ba:ba:f7:df:d6:69:04:94:04: 1f:26:e9:40:05:98:13:f6:46:c3:f0:9d:a2:2d:f2: fd:2c:2c:22:9d:68:cd:ac:4c:9d:6d:5b:57:f5:38: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:85:BF:03:C2:47:83:77:77:6D:E6:AE:66:49:A6:B1:FC:8A:A5:54 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d3:46:33:f8:9d:f9:b3:ff:1c:67:0e:be:b9:6a:5c:5e:64: d9:ad:68:00:6f:15:db:b0:1a:37:53:11:94:41:63:53:3e:27: 8f:2c:3f:88:91:a3:fc:93:ef:ab:9c:bb:eb:11:14:3b:f4:c4: b5:c7:a3:55:1a:94:8a:36:8b:65:de:49:25:b6:c9:bb:c4:55: 12:1d:18:90:c3:6d:07:be:4f:89:68:70:ec:ee:41:9f:90:d2: 6f:59:85:1e:34:34:39:7b:54:d2:46:99:89:f6:79:7d:8e:c6: 18:aa:4e:6f:40:66:d5:8b:21:56:f7:a3:ef:92:fe:e2:95:cd: 22:f0:e4:77:f6:5b:9b:7d:32:a8:81:30:3c:35:a9:c6:3b:72: e1:79:c5:b1:5d:43:6e:ad:bf:69:db:d1:7e:6a:4e:87:91:6f: 26:70:46:46:ea:00:ec:6b:74:60:c2:de:25:76:bf:1e:0d:8e: 8f:2e:a6:e7:3b:5f:5c:75:98:e1:cc:4c:15:1a:bd:fa:d9:6c: 64:b0:a4:85:3b:c7:75:46:9a:b2:da:17:65:de:14:51:3f:6e: cf:ba:ae:a9:b5:03:fc:99:22:81:2d:b0:59:46:05:9a:d4:20: 0f:37:d0:45:58:86:ea:01:aa:46:22:db:0c:87:2a:6e:be:f6: 16:d3:2e:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYxMDI2MTYzNDM5WhcNMjYxMTAyMTYzNDM5WjAYMRYwFAYD VQQDEw02YWRmODExZi1mZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj6L05/agc/0jge7LiYNsfq+67FfQgVV6NnEMDRx0H2w731thSK3rwS7yJ2E EhhXEqdMf8ucQT0obKGGaQWnoQUoPVN15KfIN8P1LS10nS37kTRp6GzroTmMHkVK o+r7YUBlnAmX1QaLuxgmWitWH/5sXB/zXh39cmHeCzZcUZKW5P0GVuGQANtvtZYa 1r7tUrA2dLW6W6ZcsysiddwWt023z6LfXkS0XLq9Ubx7Tj6jkoZ27U1R7qQf0/zV gmgQpW28i3CDw4i7qo3H6HXtDSCdBOclz7S6uvff1mkElAQfJulABZgT9kbD8J2i LfL9LCwinWjNrEydbVtX9TjhuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeFvwPC R4N3d23mrmZJprH8iqVUMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9NGM/id+bP/HGcOvrlqXF5k2a1oAG8V27AaN1MRlEFjUz4njyw/iJGj/JPv q5y76xEUO/TEtcejVRqUijaLZd5JJbbJu8RVEh0YkMNtB75PiWhw7O5Bn5DSb1mF HjQ0OXtU0kaZifZ5fY7GGKpOb0Bm1YshVvej75L+4pXNIvDkd/Zbm30yqIEwPDWp xjty4XnFsV1Dbq2/advRfmpOh5FvJnBGRuoA7Gt0YMLeJXa/Hg2Ojy6m5ztfXHWY 4cxMFRq9+tlsZLCkhTvHdUaastoXZd4UUT9uz7quqbUD/JkigS2wWUYFmtQgDzfQ RViG6gGqRiLbDIcqbr72FtMuJQ== -----END CERTIFICATE-----Generated at Tue Oct 27 11:57:12 2026 by rpki-client