$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: zl+6AkZy8zT4G3jZ5kqA/68AmU34ne6fdsz5IVh2Mlg= Subject key identifier: 08:B7:0E:63:8B:27:BF:41:38:66:D5:90:D8:49:2D:C0:33:13:0F:74 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 023A Signing time: Wed 07 Oct 2026 03:06:19 +0000 Manifest this update: Wed 07 Oct 2026 03:06:19 +0000 Manifest next update: Wed 14 Oct 2026 03:06:19 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: GVPuiSi22Unk3n2gpkhFORAGxJ/KXn1OWh18L1KjBV4=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Oct 7 03:06:19 2026 GMT Not After : Oct 14 03:06:19 2026 GMT Subject: CN=6ac5b72b-ab88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:f8:f6:98:2b:d2:b8:a8:31:ef:91:f8:84: 29:72:54:6d:8e:eb:67:25:6a:a0:76:27:68:98:3b: 86:de:ad:2f:75:f8:f7:0a:90:30:d4:69:75:8f:ee: dd:5c:18:b7:3e:13:cd:84:16:72:ce:17:0c:77:5e: af:11:65:a8:76:45:2e:46:5f:ac:12:ef:d9:41:7e: 11:a0:b6:79:3a:81:a4:df:e9:87:2b:7c:e0:43:ee: 6c:e1:e8:fc:42:9c:97:9e:69:df:c5:22:45:1f:ee: a4:0e:d4:c2:cc:0e:b9:f6:1e:50:a2:fd:53:fa:8f: ae:08:68:c6:61:df:9f:25:99:92:fd:30:1a:b2:8b: 43:d2:6b:e9:2d:59:aa:8f:c7:10:dc:96:63:53:12: d9:c2:36:fc:9f:46:ac:a4:4a:93:e8:6c:8a:eb:b8: 95:53:1f:30:34:56:c2:1c:db:b1:65:84:80:81:bb: 3d:85:20:31:a0:36:0c:d4:4a:3d:3f:86:b9:a2:f0: fa:3d:a2:06:94:9b:bf:cf:32:6e:a2:bc:3c:d1:39: 8b:73:a7:ed:3f:f4:fe:3f:05:af:de:c5:01:f8:3c: 5a:da:a1:96:cd:c5:aa:54:33:db:4d:11:06:6b:c7: 3b:b3:c3:1d:7d:6a:e6:64:ee:6d:00:82:52:01:6f: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B7:0E:63:8B:27:BF:41:38:66:D5:90:D8:49:2D:C0:33:13:0F:74 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:61:f9:52:1a:16:87:ea:cd:3b:23:ff:99:49:31:be:b0:4b: b0:19:41:97:95:30:f3:9b:98:a1:1f:2a:81:c3:21:83:3a:28: 32:33:8d:a1:f5:5d:12:f7:f0:b2:d5:40:5c:11:b6:a6:a9:7c: 4b:6c:4b:bc:61:b8:a7:a0:a3:a4:32:51:5f:6c:09:7a:d5:14: c0:1b:19:44:bf:4a:bf:51:11:36:43:a8:1e:e1:fe:f3:ee:e5: a0:6d:c8:4b:96:07:96:fe:ab:65:e9:b8:a4:ac:32:8f:9c:ce: 8d:d2:e5:5d:4d:76:06:b0:44:94:8b:f4:27:93:b7:04:03:33: 3d:28:fe:13:a6:dc:f3:c6:52:12:8e:52:c1:a3:17:98:58:a4: 60:18:52:ee:32:60:b4:a3:60:2d:b8:57:d9:66:2e:18:ce:f6: 2f:3c:56:55:4e:fb:80:55:6e:41:1c:2c:ce:e3:60:86:a7:a5: 1f:ef:a5:5e:2b:9e:26:44:28:4f:1f:d9:9f:c5:6b:64:c5:2d: 84:be:98:7e:1c:ad:de:58:b1:52:4f:53:4f:f0:51:79:e8:70: fb:0a:8c:de:3f:e1:65:5b:e9:01:d8:5a:71:4a:ef:35:31:d4: d5:44:06:e2:26:64:ee:68:7b:89:57:e5:ad:3a:39:6a:2f:c3: f4:5f:ca:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjYxMDA3MDMwNjE5WhcNMjYxMDE0MDMwNjE5WjAYMRYwFAYD VQQDEw02YWM1YjcyYi1hYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmT49pgr0rioMe+R+IQpclRtjutnJWqgdidomDuG3q0vdfj3CpAw1Gl1j+7d XBi3PhPNhBZyzhcMd16vEWWodkUuRl+sEu/ZQX4RoLZ5OoGk3+mHK3zgQ+5s4ej8 QpyXnmnfxSJFH+6kDtTCzA659h5Qov1T+o+uCGjGYd+fJZmS/TAasotD0mvpLVmq j8cQ3JZjUxLZwjb8n0aspEqT6GyK67iVUx8wNFbCHNuxZYSAgbs9hSAxoDYM1Eo9 P4a5ovD6PaIGlJu/zzJuorw80TmLc6ftP/T+PwWv3sUB+Dxa2qGWzcWqVDPbTREG a8c7s8MdfWrmZO5tAIJSAW8UFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi3DmOL J79BOGbVkNhJLcAzEw90MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmGH5UhoWh+rNOyP/mUkxvrBLsBlBl5Uw85uYoR8qgcMhgzooMjONofVdEvfw stVAXBG2pql8S2xLvGG4p6CjpDJRX2wJetUUwBsZRL9Kv1ERNkOoHuH+8+7loG3I S5YHlv6rZem4pKwyj5zOjdLlXU12BrBElIv0J5O3BAMzPSj+E6bc88ZSEo5SwaMX mFikYBhS7jJgtKNgLbhX2WYuGM72LzxWVU77gFVuQRwszuNghqelH++lXiueJkQo Tx/Zn8VrZMUthL6Yfhyt3lixUk9TT/BReehw+wqM3j/hZVvpAdhacUrvNTHU1UQG 4iZk7mh7iVflrTo5ai/D9F/K5g== -----END CERTIFICATE-----Generated at Wed Oct 7 07:41:04 2026 by rpki-client