$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: 3qmR6kEbUIOboO+TnjonsSnn1/zWJE7yh8xLIERnK1c= Subject key identifier: 3F:79:25:5C:1D:4B:8B:8C:0C:51:C3:C2:F2:06:65:3D:7C:3F:07:B3 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0ECD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0EC3 Signing time: Sun 04 Oct 2026 17:44:41 +0000 Manifest this update: Sun 04 Oct 2026 17:44:40 +0000 Manifest next update: Sun 11 Oct 2026 17:44:40 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: bVW72CONQk7+01Jn1iXlQzt1FOFdM0L4HwOjZ8S2X2M=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: Kp314Z/IGVTSIepcMGXMRI/Il28yCatLCD2MLmcgYVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3789 (0xecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Oct 4 17:44:40 2026 GMT Not After : Oct 11 17:44:40 2026 GMT Subject: CN=6ac29088-52f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:f3:74:20:7c:48:fe:ca:ca:9a:ca:d8:d1: 3c:a4:81:71:42:35:2c:39:5b:22:8b:a5:b0:1f:7b: 35:ec:b3:2b:47:61:77:dd:9d:65:20:91:06:c5:7c: b3:7c:6a:e5:6e:b6:a7:07:64:92:c9:83:c2:11:52: 82:73:8f:63:87:7d:16:28:03:26:93:8c:70:be:ca: 99:31:79:dd:72:c3:85:d5:db:f6:7c:6b:0a:95:f5: a2:71:59:f1:cf:2d:03:78:70:f1:e2:ff:22:21:eb: 1a:96:c5:67:52:d5:d5:01:9a:60:3c:cf:3a:99:3f: 91:06:64:5e:34:b2:72:85:75:26:84:17:ad:e4:b8: 32:f2:cd:c3:5a:08:2d:f7:dd:16:d1:19:3e:ea:fc: ca:ec:e3:c1:56:f7:21:bd:7e:e2:d4:b1:89:99:80: d8:fc:86:ee:ea:d0:49:2e:d0:46:47:c5:9c:17:5e: 16:0c:a4:14:01:0e:73:14:ee:28:75:8e:3e:05:11: a1:ee:59:0b:ee:98:63:09:43:98:c6:3a:f7:f2:8e: 83:6c:1c:d5:14:1f:25:00:93:1d:aa:7b:9e:8b:b0: dc:54:0a:a1:30:d1:2b:85:60:ec:0f:ae:24:75:f0: 3d:67:01:d8:b1:ca:4c:0d:f6:8c:0b:23:2b:65:f4: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:25:5C:1D:4B:8B:8C:0C:51:C3:C2:F2:06:65:3D:7C:3F:07:B3 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:52:80:63:9c:10:96:33:25:fd:4f:d1:a0:53:5d:65:fb: a1:8a:bb:0e:d4:77:52:97:5a:c0:b7:89:7c:37:0f:9d:ae:f3: 63:e1:99:f5:9f:8d:75:4e:89:2a:67:9f:60:ac:ba:52:86:b4: 2f:9b:47:da:bf:35:2c:97:16:fd:bc:17:8c:39:48:3b:88:db: eb:bf:bf:c1:61:7a:2d:57:64:be:a5:5b:18:87:f4:fd:50:3e: 23:3c:4a:e9:6f:8f:e9:c3:d1:1e:7c:0d:9c:62:34:fa:af:3e: a0:ad:a6:d2:2f:9b:f7:c6:fd:85:47:b2:6d:fa:5a:b4:0b:66: 09:e5:f8:d2:9a:6e:92:ca:88:fa:cd:90:0e:68:0e:b9:f7:5a: ab:a4:6c:4d:67:72:48:64:db:41:42:27:62:b6:8e:b7:3f:9f: b1:57:52:a9:9f:7d:6c:6b:2a:0c:51:95:02:93:e6:4d:18:4e: ea:64:b4:80:22:2f:fe:ac:3f:4d:2b:33:2d:fa:01:49:79:c1: f2:35:93:eb:dd:d1:79:78:05:ad:97:a0:36:cc:5d:ba:1b:c0: c3:ca:2c:6b:62:dd:88:c8:81:44:67:50:3d:55:88:8f:6d:f8: 37:0e:8c:30:8a:fd:df:e0:95:a2:96:a4:7c:30:6c:d4:42:2c: 67:c2:4b:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjYxMDA0MTc0NDQwWhcNMjYxMDExMTc0NDQwWjAYMRYwFAYD VQQDEw02YWMyOTA4OC01MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBbzdCB8SP7KyprK2NE8pIFxQjUsOVsii6WwH3s17LMrR2F33Z1lIJEGxXyz fGrlbranB2SSyYPCEVKCc49jh30WKAMmk4xwvsqZMXndcsOF1dv2fGsKlfWicVnx zy0DeHDx4v8iIesalsVnUtXVAZpgPM86mT+RBmReNLJyhXUmhBet5Lgy8s3DWggt 990W0Rk+6vzK7OPBVvchvX7i1LGJmYDY/Ibu6tBJLtBGR8WcF14WDKQUAQ5zFO4o dY4+BRGh7lkL7phjCUOYxjr38o6DbBzVFB8lAJMdqnuei7DcVAqhMNErhWDsD64k dfA9ZwHYscpMDfaMCyMrZfSCuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD95JVwd S4uMDFHDwvIGZT18PwezMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldNSgGOcEJYzJf1P0aBTXWX7oYq7DtR3UpdawLeJfDcPna7zY+GZ9Z+NdU6J KmefYKy6Uoa0L5tH2r81LJcW/bwXjDlIO4jb67+/wWF6LVdkvqVbGIf0/VA+IzxK 6W+P6cPRHnwNnGI0+q8+oK2m0i+b98b9hUeybfpatAtmCeX40ppuksqI+s2QDmgO ufdaq6RsTWdySGTbQUInYraOtz+fsVdSqZ99bGsqDFGVApPmTRhO6mS0gCIv/qw/ TSszLfoBSXnB8jWT693ReXgFrZegNsxduhvAw8osa2LdiMiBRGdQPVWIj234Nw6M MIr93+CVopakfDBs1EIsZ8JLqQ== -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:22 2026 by rpki-client