$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: qHFgbonNf7gqfk6aCzUY0woVJjldarR+ko/ukT8wNFo= Subject key identifier: 2B:CA:74:CA:FC:AD:A1:0D:FB:77:4B:F5:80:BE:E4:2E:44:CC:C5:DE Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 97 Signing time: Sun 11 Oct 2026 08:02:27 +0000 Manifest this update: Sun 11 Oct 2026 08:02:26 +0000 Manifest next update: Sun 18 Oct 2026 08:02:26 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: 34Qr+xI3k3aQh4oSBniyB6Lg3dPNuMDCM/DQQWNhD7Q=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Oct 11 08:02:26 2026 GMT Not After : Oct 18 08:02:26 2026 GMT Subject: CN=6acb4293-6143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:ac:39:cb:43:0b:11:b9:19:16:28:84:c6: 56:3f:fd:f7:5f:62:89:a0:58:10:2f:89:15:9d:d4: af:a1:6d:89:e8:e5:d4:51:5c:58:cc:22:88:e4:97: f0:b6:1d:64:e8:fc:cb:7d:02:ec:a8:ba:41:ac:c9: 82:9a:84:5f:c3:7e:be:14:92:c0:6d:76:11:1c:ad: 6a:c3:78:c8:5f:05:08:54:ce:df:80:49:54:14:77: 58:5b:55:4b:b0:d7:b8:3c:56:dd:ec:cf:ac:01:d3: a3:51:d2:7e:b0:d3:d3:11:97:6f:56:a0:68:15:f5: dd:c7:85:6f:16:16:d0:cc:3c:c0:ec:69:b3:88:54: ad:61:e3:b9:1c:02:0f:00:b8:00:45:ce:5c:43:10: 9b:bb:3b:35:17:4b:f9:f1:df:5d:0a:b5:5f:61:79: 37:03:db:fe:5d:df:ec:41:7d:b7:11:42:7a:03:bb: bc:37:85:ff:d5:95:c5:33:6b:c5:2a:39:cb:f6:bd: a2:4f:92:a5:7a:e9:80:d4:ae:dc:00:20:6d:50:dc: 25:b0:10:64:5f:7a:54:2b:9f:9b:00:28:97:f3:60: 90:4d:5e:bf:ea:6f:35:f3:7b:47:37:09:72:5b:d0: 0c:13:82:e9:72:1b:ab:7f:03:9f:c6:4c:a3:2f:c7: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CA:74:CA:FC:AD:A1:0D:FB:77:4B:F5:80:BE:E4:2E:44:CC:C5:DE X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:58:02:0c:5e:2d:af:45:14:b0:f3:f8:a6:4f:fb:54:99:bf: 67:37:31:1a:57:3d:dc:e4:d4:fe:ad:e8:06:91:6c:9d:86:8a: e5:05:46:25:20:fc:e7:34:18:98:1a:b1:e9:86:ed:47:ee:5f: ff:cb:0d:be:0e:1f:69:6d:64:c5:ca:5b:01:df:d0:35:42:35: 76:e4:92:ab:a9:f6:bc:97:de:4a:97:7a:33:44:37:55:d8:05: 6e:45:fa:f5:60:de:ee:db:6c:f5:d2:72:52:4f:38:0c:22:62: 85:6f:64:d7:4a:db:64:9e:f0:3e:fa:bd:2f:70:8b:ab:aa:0c: d9:a2:dc:46:ce:61:ee:c6:06:b5:91:3c:53:62:54:bf:02:f6: a0:3f:23:38:b0:49:c8:eb:9a:8f:0a:78:13:55:cf:4a:3f:38: 2b:55:a5:89:e6:a2:87:7b:1f:b4:c7:5f:42:8b:e6:95:f4:73: 2e:c1:c6:c7:07:57:e1:00:4d:2d:3b:61:aa:88:da:5c:75:cd: d6:62:80:ef:02:ba:dd:13:46:43:9a:50:8e:9a:90:ce:5a:5c: cc:27:43:9b:9c:90:b5:fc:21:d6:be:d0:d1:95:af:69:87:bd: 3d:30:5c:64:bb:f6:ec:b5:fd:e6:e8:ff:5c:f4:c3:f0:16:20: e8:9f:51:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlGQkIxMTAvBgNVBAUTKDI0RTQ1QTQ2NzA4NjVFRDFDNTExREQyMjJENTE4NUJG QTY3MjA4NUUwHhcNMjYxMDExMDgwMjI2WhcNMjYxMDE4MDgwMjI2WjAYMRYwFAYD VQQDEw02YWNiNDI5My02MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKKsOctDCxG5GRYohMZWP/33X2KJoFgQL4kVndSvoW2J6OXUUVxYzCKI5Jfw th1k6PzLfQLsqLpBrMmCmoRfw36+FJLAbXYRHK1qw3jIXwUIVM7fgElUFHdYW1VL sNe4PFbd7M+sAdOjUdJ+sNPTEZdvVqBoFfXdx4VvFhbQzDzA7GmziFStYeO5HAIP ALgARc5cQxCbuzs1F0v58d9dCrVfYXk3A9v+Xd/sQX23EUJ6A7u8N4X/1ZXFM2vF KjnL9r2iT5KleumA1K7cACBtUNwlsBBkX3pUK5+bACiX82CQTV6/6m8183tHNwly W9AME4LpchurfwOfxkyjL8ePaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvKdMr8 raEN+3dL9YC+5C5EzMXeMB8GA1UdIwQYMBaAFCTkWkZwhl7RxRHdIi1Rhb+mcghe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUZCQi9CQTlBOUU2OEU0 MDQxMUYwQTY2MTlDNjA2MTZGNTZCQy9KT1JhUm5DR1h0SEZFZDBpTFZHRnY2WnlD RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUZCQi9CQTlBOUU2OEU0MDQxMUYwQTY2MTlDNjA2MTZGNTZCQy9KT1JhUm5DR1h0 SEZFZDBpTFZHRnY2WnlDRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1gCDF4tr0UUsPP4pk/7VJm/ZzcxGlc93OTU/q3oBpFsnYaK5QVGJSD85zQY mBqx6YbtR+5f/8sNvg4faW1kxcpbAd/QNUI1duSSq6n2vJfeSpd6M0Q3VdgFbkX6 9WDe7tts9dJyUk84DCJihW9k10rbZJ7wPvq9L3CLq6oM2aLcRs5h7sYGtZE8U2JU vwL2oD8jOLBJyOuajwp4E1XPSj84K1Wlieaih3sftMdfQovmlfRzLsHGxwdX4QBN LTthqojaXHXN1mKA7wK63RNGQ5pQjpqQzlpczCdDm5yQtfwh1r7Q0ZWvaYe9PTBc ZLv27LX95uj/XPTD8BYg6J9RNQ== -----END CERTIFICATE-----Generated at Mon Oct 12 22:26:14 2026 by rpki-client