$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft File: JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json) Hash identifier: vtaE0dUJa9xLcyZoMK0DXq6Wp9H7wkvZlC0PhebAUrY= Subject key identifier: 9F:9F:34:2E:33:27:62:DA:1D:68:21:B6:EA:5F:24:EF:07:3E:DE:70 Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft Manifest number: 0D97 Signing time: Tue 18 Aug 2026 18:13:38 +0000 Manifest this update: Tue 18 Aug 2026 18:13:37 +0000 Manifest next update: Tue 25 Aug 2026 18:13:37 +0000 Files and hashes: 1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: Z/t+4H4SBHOKSEHZ+M/OnPpjskF/7+DJ0TeTj2WEcfQ=) 2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: 2j8ZEZZDC+v0AsplIrNRFX86JLUI1D1lZouNpF7eL1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Validity Not Before: Aug 18 18:13:37 2026 GMT Not After : Aug 25 18:13:37 2026 GMT Subject: CN=6a84a0d2-298e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:81:7f:92:84:e1:17:54:a0:0f:a2:b1:90: 7c:d5:18:17:45:c8:07:0a:b2:c3:cf:59:03:6a:e7: 54:ba:19:cf:94:53:08:31:08:94:c3:04:88:47:96: 43:b9:fe:17:3d:64:50:f3:c1:6e:09:35:f4:33:0d: e9:c6:29:c1:16:0d:f3:f4:83:9c:69:a6:5f:95:de: 6d:b7:34:13:03:f1:57:e1:da:35:3b:f7:8d:14:39: 8a:f4:82:e1:f8:f2:01:c3:7f:e1:5f:69:c8:1f:49: e0:7f:68:ff:7e:df:3b:10:da:08:4a:d8:b0:2f:7c: 34:b7:7b:31:06:1b:0f:ab:d0:3a:39:08:84:4a:72: b0:01:fc:99:09:0a:01:fb:dc:34:97:45:d8:f0:8d: 54:76:7c:c3:ce:0a:fa:9f:e4:b5:ef:5e:3b:d7:a9: e4:a6:c6:c6:94:6e:40:39:c4:a3:65:4f:a8:99:56: 58:9d:51:a6:77:9f:7a:3a:93:65:6d:93:c9:d0:85: 47:f2:3b:8e:25:7e:7d:81:fb:da:56:52:14:5a:bd: ca:8f:02:02:a9:c2:53:62:7f:75:a7:dd:99:8e:61: c0:17:da:19:63:3c:13:eb:64:58:64:79:24:3b:a3: 69:a3:9a:f6:01:28:69:90:26:d6:a8:38:14:bf:11: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:34:2E:33:27:62:DA:1D:68:21:B6:EA:5F:24:EF:07:3E:DE:70 X509v3 Authority Key Identifier: keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:c8:8d:61:b2:2e:d6:d5:32:a0:c6:8b:63:d9:53:7e:b2:4c: f2:43:2e:4b:43:3b:67:d6:a5:58:53:7c:f3:a5:7f:99:e9:c2: c7:5a:61:b8:64:a6:5b:1b:a7:13:14:1b:50:5f:5e:c6:c1:c5: 8a:47:71:b4:a8:c3:14:82:dc:dd:df:7e:b1:d2:4e:e3:91:cf: 47:f2:05:34:b5:06:83:98:3e:5d:4a:b8:6f:fa:18:f1:e0:e2: 23:93:02:b6:0e:31:45:e0:ef:cc:79:7f:74:8a:32:a7:2e:bb: fd:79:b1:39:ab:76:e5:41:c9:78:44:73:f4:48:fb:4b:1e:94: 69:a2:4c:0a:35:6e:49:93:e8:74:ed:93:ec:58:03:27:a6:fb: 37:cb:e3:bf:10:b1:12:8e:72:64:df:a3:73:43:5d:09:35:53: 86:52:c5:8a:8e:e3:e1:a5:4f:68:b6:f5:ef:93:71:3c:05:e1: e2:f1:c3:07:68:9a:78:32:96:90:67:8a:50:9a:ef:f9:0f:3e: ec:92:23:7b:b4:33:e8:85:07:b9:1d:21:20:85:c5:e0:01:fd: 3a:f7:bb:84:04:92:35:5b:ff:09:1e:f9:a5:ba:58:73:45:dc: f0:04:36:7c:72:47:93:f4:85:4e:2f:b8:76:5f:0f:b1:39:ad: 23:78:52:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5MTgxMTAvBgNVBAUTKDI1MDM3NzVGQUMzQTZGNDcyMzRDQjgzMkE2MzdGQzEw ODJBNDdDNDQwHhcNMjYwODE4MTgxMzM3WhcNMjYwODI1MTgxMzM3WjAYMRYwFAYD VQQDEw02YTg0YTBkMi0yOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbqBf5KE4RdUoA+isZB81RgXRcgHCrLDz1kDaudUuhnPlFMIMQiUwwSIR5ZD uf4XPWRQ88FuCTX0Mw3pxinBFg3z9IOcaaZfld5ttzQTA/FX4do1O/eNFDmK9ILh +PIBw3/hX2nIH0ngf2j/ft87ENoIStiwL3w0t3sxBhsPq9A6OQiESnKwAfyZCQoB +9w0l0XY8I1UdnzDzgr6n+S1714716nkpsbGlG5AOcSjZU+omVZYnVGmd596OpNl bZPJ0IVH8juOJX59gfvaVlIUWr3KjwICqcJTYn91p92ZjmHAF9oZYzwT62RYZHkk O6Npo5r2AShpkCbWqDgUvxFPvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+fNC4z J2LaHWghtupfJO8HPt5wMB8GA1UdIwQYMBaAFCUDd1+sOm9HI0y4MqY3/BCCpHxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODkxOC9FOThGREZENEY2 NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIwY2pUTGd5cGpmOEVJS2tm RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRTjNYNnc2YjBjalRMZ3lwamY4RUlLa2ZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODkxOC9FOThGREZENEY2NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIw Y2pUTGd5cGpmOEVJS2tmRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA38iNYbIu1tUyoMaLY9lTfrJM8kMuS0M7Z9alWFN886V/menCx1phuGSmWxun ExQbUF9exsHFikdxtKjDFILc3d9+sdJO45HPR/IFNLUGg5g+XUq4b/oY8eDiI5MC tg4xReDvzHl/dIoypy67/XmxOat25UHJeERz9Ej7Sx6UaaJMCjVuSZPodO2T7FgD J6b7N8vjvxCxEo5yZN+jc0NdCTVThlLFio7j4aVPaLb175NxPAXh4vHDB2iaeDKW kGeKUJrv+Q8+7JIje7Qz6IUHuR0hIIXF4AH9Ove7hASSNVv/CR75pbpYc0Xc8AQ2 fHJHk/SFTi+4dl8PsTmtI3hSWA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:47:02 2026 by rpki-client