$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: DmoihltUXw9o7ffrau3QDRtt0QlKEaQ94NiLGuG3BOI= Subject key identifier: D4:35:AD:A8:84:8B:FE:0F:47:43:C3:23:22:65:DB:E9:66:9C:DA:94 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 02AD Signing time: Wed 07 Oct 2026 01:57:56 +0000 Manifest this update: Wed 07 Oct 2026 01:57:55 +0000 Manifest next update: Wed 14 Oct 2026 01:57:55 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: 4sDDs6qFNJ3YiNvkOcnYy7YCYVEevJFgRizb9b434iw=) 2: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ=) 3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=) 4: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: 9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Oct 7 01:57:55 2026 GMT Not After : Oct 14 01:57:55 2026 GMT Subject: CN=6ac5a724-14bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1f:e7:06:a6:ce:85:f7:be:14:dd:6b:05:1a: 23:e6:51:94:a4:27:57:d3:a0:1a:1e:f1:08:28:66: 2d:0a:68:18:15:e2:0b:a5:3b:23:1c:14:47:ad:24: df:5e:0a:99:f1:96:a6:22:1f:28:f4:df:9c:4f:ce: 91:51:40:cf:96:34:4b:fa:ed:dd:a5:16:73:9e:2c: 97:1f:c0:6f:2b:cd:9e:35:93:57:ee:01:39:d1:4e: ef:cb:69:b6:e5:29:85:c5:6e:46:75:91:69:33:37: 26:3b:e9:f1:d5:24:ad:f4:2b:07:5f:d4:3e:41:fb: 5a:a7:2a:6f:1b:dc:6d:5d:a2:fc:a9:6a:4d:c7:b4: 98:d1:e3:34:18:2c:ab:e0:f4:82:60:35:c4:aa:8a: ab:37:ca:00:c7:1a:8a:96:32:a9:82:69:d2:27:be: 96:dd:97:0b:8a:16:51:6c:72:c6:33:2a:c4:0c:6d: 22:96:5d:a5:b1:5c:33:32:b7:ce:fd:3f:76:aa:8f: c4:47:84:44:8b:18:bf:7e:07:03:78:82:95:93:e1: 12:39:71:17:9c:ab:fb:92:fc:a0:94:bb:8e:c6:50: 9e:fd:ca:13:d4:da:61:4c:77:20:f7:54:c0:f4:01: 33:2a:ec:a8:f7:63:6a:6c:99:ac:d9:97:26:be:43: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:AD:A8:84:8B:FE:0F:47:43:C3:23:22:65:DB:E9:66:9C:DA:94 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:5e:e9:5f:ce:ab:3a:0a:89:9f:73:80:46:9a:93:60:29: 46:c8:7b:da:23:93:74:24:e5:2c:87:a5:b4:55:ec:43:0d:06: 44:87:d1:a5:c7:71:fc:b7:4a:62:16:49:07:28:88:34:5a:0d: d9:4d:34:21:13:08:e4:d1:2b:e6:83:5d:60:a3:af:05:bb:d7: 9b:41:96:9c:08:21:ea:41:9c:9e:c7:04:55:83:ae:a5:ea:c0: 97:e6:13:e8:95:b4:18:a0:27:2c:03:a8:24:27:b7:fe:3f:39: ff:c9:86:bf:ed:d1:90:d9:33:23:d7:6b:02:03:7c:8f:54:65: 7d:2d:f2:13:f4:97:57:86:21:77:91:d5:43:e2:90:f4:f0:14: 94:e0:ef:74:3d:64:04:6d:a1:4e:9a:0e:88:c4:38:9e:6f:c5: 82:33:6c:47:18:5a:3e:ef:38:0c:fc:e2:b2:cf:5c:c0:31:db: 21:b7:cd:2c:1d:0b:34:56:1e:c3:44:66:25:f5:d6:ba:0a:e9: a7:bd:08:5c:e6:09:de:2a:8a:80:0e:95:29:9d:37:9d:ea:04: fb:f5:f0:7b:b5:2b:e7:4d:ed:02:d1:fc:db:4d:06:95:ec:88: ac:62:40:e9:07:64:da:78:4c:65:34:ed:fc:e7:18:86:f8:59: 86:25:7b:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYxMDA3MDE1NzU1WhcNMjYxMDE0MDE1NzU1WjAYMRYwFAYD VQQDEw02YWM1YTcyNC0xNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B/nBqbOhfe+FN1rBRoj5lGUpCdX06AaHvEIKGYtCmgYFeILpTsjHBRHrSTf XgqZ8ZamIh8o9N+cT86RUUDPljRL+u3dpRZzniyXH8BvK82eNZNX7gE50U7vy2m2 5SmFxW5GdZFpMzcmO+nx1SSt9CsHX9Q+QftapypvG9xtXaL8qWpNx7SY0eM0GCyr 4PSCYDXEqoqrN8oAxxqKljKpgmnSJ76W3ZcLihZRbHLGMyrEDG0ill2lsVwzMrfO /T92qo/ER4REixi/fgcDeIKVk+ESOXEXnKv7kvyglLuOxlCe/coT1NphTHcg91TA 9AEzKuyo92NqbJms2ZcmvkP5qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQ1raiE i/4PR0PDIyJl2+lmnNqUMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYGpe6V/OqzoKiZ9zgEaak2ApRsh72iOTdCTlLIeltFXsQw0GRIfRpcdx/LdK YhZJByiINFoN2U00IRMI5NEr5oNdYKOvBbvXm0GWnAgh6kGcnscEVYOuperAl+YT 6JW0GKAnLAOoJCe3/j85/8mGv+3RkNkzI9drAgN8j1RlfS3yE/SXV4Yhd5HVQ+KQ 9PAUlODvdD1kBG2hTpoOiMQ4nm/FgjNsRxhaPu84DPziss9cwDHbIbfNLB0LNFYe w0RmJfXWugrpp70IXOYJ3iqKgA6VKZ03neoE+/Xwe7Ur503tAtH8200GleyIrGJA 6Qdk2nhMZTTt/OcYhvhZhiV7ZA== -----END CERTIFICATE-----Generated at Wed Oct 7 22:52:06 2026 by rpki-client