$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: +jVbcCxrjx+Ht+31meatt5QSPLIfL6935epwvyqj/Mg= Subject key identifier: 2A:67:B0:76:CF:F0:E7:14:1F:75:33:25:26:5C:7E:EA:E1:C5:45:CA Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0B91 Signing time: Tue 18 Aug 2026 19:24:40 +0000 Manifest this update: Tue 18 Aug 2026 19:24:39 +0000 Manifest next update: Tue 25 Aug 2026 19:24:39 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: xgDPNeArS57t9UVLyUe+C9bP/QXnPMRBe40RI76x9Wc=) 2: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=) 3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=) 4: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Aug 18 19:24:39 2026 GMT Not After : Aug 25 19:24:39 2026 GMT Subject: CN=6a84b178-bc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:c7:6e:cc:35:23:0a:55:8b:a1:e0:5a:ba: fb:bb:7b:a6:05:ff:ff:9d:d4:1b:ac:dc:02:c4:e5: b7:18:70:8c:d5:6c:17:d6:91:eb:bb:c1:38:57:6b: 51:73:22:ef:69:44:1e:0a:84:b0:87:e9:0c:5d:a5: f5:b9:fd:ec:00:67:4b:fc:02:4f:c4:e1:94:9f:fe: 08:69:ac:dc:f8:6b:0d:f9:7a:9f:25:f4:dc:62:d3: e7:62:ac:a0:61:bd:cb:aa:b5:bf:41:8e:a5:fb:3d: 86:05:33:fc:6b:f0:f9:a8:20:5d:36:b2:20:d6:79: c3:ab:b2:43:2c:f1:f7:61:98:35:ee:b0:a0:7f:fd: 89:d6:e7:48:b4:74:93:a8:75:78:31:5c:46:89:07: 08:a0:f0:b7:cd:53:9b:ea:fd:93:f3:d6:c4:b2:71: 71:64:ae:60:cf:5a:b8:80:77:c6:c0:16:05:ad:2a: 78:a7:09:e9:8d:dd:10:25:f4:61:07:54:c3:f2:bd: 63:78:48:a2:08:6b:73:86:b1:eb:e9:f3:7d:61:49: 33:61:07:fa:18:39:52:cd:2a:06:cd:20:69:b6:40: e1:87:38:f7:86:9d:8f:4b:02:90:14:b6:2c:6b:fb: a4:ee:37:12:e3:39:b0:12:62:8b:66:57:d5:31:0f: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:B0:76:CF:F0:E7:14:1F:75:33:25:26:5C:7E:EA:E1:C5:45:CA X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b0:4a:0d:88:b6:c6:9e:61:f0:71:d5:d3:1c:b7:eb:d0:7b: 1f:ba:cc:26:84:66:4f:a3:03:a8:35:5b:e9:5e:6c:18:ed:ac: 58:18:23:96:66:a0:ba:8a:32:ad:f7:87:23:f0:12:d6:0a:fc: 50:b2:5f:a4:f3:dd:1a:34:04:0e:96:50:62:39:4d:f1:cf:8d: 92:bd:be:0c:52:70:9b:b2:4c:74:97:cb:b6:c0:06:8b:81:cd: 34:9b:0e:93:c9:1d:37:46:73:f3:09:e3:ae:30:4f:c8:da:02: 3b:76:aa:37:6c:31:9c:c2:b2:10:be:10:b4:e1:27:a8:3f:e6: e6:56:8c:b8:6c:6c:70:00:35:9f:0b:e8:2a:cc:14:79:f2:83: e8:b6:c0:ef:4b:f6:f9:a2:de:a0:53:a7:22:b5:d9:a5:54:72: bf:f0:02:67:9e:48:b3:3a:2d:75:27:60:17:3b:10:07:34:ee: 19:7c:6d:60:c5:c6:46:98:f9:33:f6:bb:a0:8a:5f:f6:3f:d1: c5:a5:7f:d7:f3:e2:ca:47:3e:7b:ef:53:3b:d2:28:a8:e8:45: 92:74:5e:a7:72:6e:52:0e:41:9d:74:0f:27:bb:16:82:b1:4b: 65:4c:9e:53:0d:9f:1b:4c:9f:42:aa:c2:09:f5:ce:0b:0a:5a: 5c:db:6e:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjYwODE4MTkyNDM5WhcNMjYwODI1MTkyNDM5WjAYMRYwFAYD VQQDEw02YTg0YjE3OC1iYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdDHbsw1IwpVi6HgWrr7u3umBf//ndQbrNwCxOW3GHCM1WwX1pHru8E4V2tR cyLvaUQeCoSwh+kMXaX1uf3sAGdL/AJPxOGUn/4Iaazc+GsN+XqfJfTcYtPnYqyg Yb3LqrW/QY6l+z2GBTP8a/D5qCBdNrIg1nnDq7JDLPH3YZg17rCgf/2J1udItHST qHV4MVxGiQcIoPC3zVOb6v2T89bEsnFxZK5gz1q4gHfGwBYFrSp4pwnpjd0QJfRh B1TD8r1jeEiiCGtzhrHr6fN9YUkzYQf6GDlSzSoGzSBptkDhhzj3hp2PSwKQFLYs a/uk7jcS4zmwEmKLZlfVMQ/j+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpnsHbP 8OcUH3UzJSZcfurhxUXKMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZrBKDYi2xp5h8HHV0xy369B7H7rMJoRmT6MDqDVb6V5sGO2sWBgjlmaguooy rfeHI/AS1gr8ULJfpPPdGjQEDpZQYjlN8c+Nkr2+DFJwm7JMdJfLtsAGi4HNNJsO k8kdN0Zz8wnjrjBPyNoCO3aqN2wxnMKyEL4QtOEnqD/m5laMuGxscAA1nwvoKswU efKD6LbA70v2+aLeoFOnIrXZpVRyv/ACZ55IszotdSdgFzsQBzTuGXxtYMXGRpj5 M/a7oIpf9j/RxaV/1/Piykc+e+9TO9IoqOhFknRep3JuUg5BnXQPJ7sWgrFLZUye Uw2fG0yfQqrCCfXOCwpaXNtutg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:09 2026 by rpki-client