$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: sYNAWafcPaTsYovhwSqguoGYaqGpgqp5XtEbxQ5/BPY= Subject key identifier: 29:2B:62:3E:36:02:C7:20:73:5D:BF:F9:05:02:11:C6:B6:5E:D8:65 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 01EA Signing time: Wed 19 Aug 2026 04:01:01 +0000 Manifest this update: Wed 19 Aug 2026 04:01:00 +0000 Manifest next update: Wed 26 Aug 2026 04:01:00 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: mr1R+Jk9h94JQXrSEYB4DxSAFDx3M3rKcZ4hDv5yo7E=) 2: 71FEBB84857711F18FAF10B98AA30FBC.roa (hash: NaP0K5S3pecUp/CUi1T5mH9PBjjPwLcXtf+dOiNICvQ=) 3: BE42116AB76311EE81395B37C4F9AE02.roa (hash: WbVHpiD8F2T3FI/bwtUGHLi/kEkpiTlqVNo5rwJpXuA=) 4: A5176822857711F1A76CF6B98AA30FBC.roa (hash: O/XAFsMoSkN7R/zuJmguUcR1phJvXalY/i9WhQwQI8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Aug 19 04:01:00 2026 GMT Not After : Aug 26 04:01:00 2026 GMT Subject: CN=6a852a7d-4ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:60:84:b1:95:d3:56:14:a9:a8:5e:6a:3e: 95:f4:82:50:9d:3b:d0:a1:0c:10:fa:e5:dc:0f:f8: 73:12:cb:a1:c9:13:e8:b3:d6:da:5f:79:d1:63:01: dd:9d:d8:e5:57:50:f7:a6:b0:7e:c7:bd:89:5f:da: ae:8d:da:68:d4:2b:d2:68:0c:c1:1f:8c:d0:fa:de: 31:08:10:fb:e0:9a:3c:27:cf:90:10:a6:79:d7:8e: 83:6f:66:83:7d:44:dd:69:49:0d:8a:17:94:dd:6f: 75:64:29:3e:8d:33:f5:44:4f:d1:db:9b:69:ce:b7: 91:27:56:14:ec:b6:ec:41:06:5a:73:14:f6:9c:ef: 8d:b8:63:68:f3:82:c2:9f:c9:ca:0f:84:1f:cf:87: 4c:29:52:94:5a:e0:89:e0:79:ea:b5:02:55:d8:25: c2:4c:85:49:7e:51:8f:7d:16:13:0e:bb:43:6e:db: 46:49:6a:63:97:85:5a:16:89:00:88:2c:7d:72:af: 45:a0:a0:2f:20:35:ea:e9:d6:9c:71:94:94:f5:e3: 4c:61:b4:87:ef:13:07:1c:f9:ae:ea:52:40:d9:07: c2:13:81:be:bf:d4:aa:06:05:01:2d:7b:70:e9:93: ee:6c:eb:18:18:d7:0b:3d:ca:fa:b2:f4:9c:00:5c: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:62:3E:36:02:C7:20:73:5D:BF:F9:05:02:11:C6:B6:5E:D8:65 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f5:5c:21:75:88:02:23:19:50:16:d7:2b:ac:37:58:89:03: c3:b5:cf:24:e6:35:91:cf:d4:3b:7e:98:3f:8e:87:89:0a:a1: 4a:79:7f:dc:94:68:e4:b4:6b:5f:4c:0c:da:34:bc:ad:2d:29: 6b:40:a2:ce:75:d7:13:b7:8a:8b:af:22:b5:2f:52:b1:bd:b5: 97:88:ec:21:f5:9b:19:d6:7d:14:e7:a7:e6:e6:79:76:12:3a: d5:0f:3f:02:b0:5c:36:6e:fb:1d:d9:f5:a8:89:53:75:06:e1: 80:dc:b6:bd:80:bf:f5:fc:d2:b3:20:44:bc:25:88:09:ea:3e: 87:d8:fe:cc:5d:1b:04:1f:fa:dd:e7:a9:ac:dd:92:13:af:32: cb:85:b5:af:23:c7:fb:f0:55:5f:0d:f5:cf:1d:4c:08:f8:ad: 21:fa:69:2a:6f:44:6d:a2:af:c1:a1:2a:d8:d0:d0:34:52:8f: 8e:d1:f0:58:9b:ea:21:82:cf:b0:63:4e:44:55:4b:3b:aa:55: 5e:39:c1:34:4d:a9:80:5e:64:b6:2e:c9:80:f8:80:f6:89:b2: db:40:02:e5:77:20:75:bf:6d:b2:f8:2c:5b:7f:82:79:ad:08: d8:93:b4:ed:02:1c:e9:03:d7:85:6e:99:21:b8:44:5f:35:14: a2:9c:e3:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjYwODE5MDQwMTAwWhcNMjYwODI2MDQwMTAwWjAYMRYwFAYD VQQDEw02YTg1MmE3ZC00YWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj5ghLGV01YUqaheaj6V9IJQnTvQoQwQ+uXcD/hzEsuhyRPos9baX3nRYwHd ndjlV1D3prB+x72JX9qujdpo1CvSaAzBH4zQ+t4xCBD74Jo8J8+QEKZ5146Db2aD fUTdaUkNiheU3W91ZCk+jTP1RE/R25tpzreRJ1YU7LbsQQZacxT2nO+NuGNo84LC n8nKD4Qfz4dMKVKUWuCJ4HnqtQJV2CXCTIVJflGPfRYTDrtDbttGSWpjl4VaFokA iCx9cq9FoKAvIDXq6daccZSU9eNMYbSH7xMHHPmu6lJA2QfCE4G+v9SqBgUBLXtw 6ZPubOsYGNcLPcr6svScAFzXiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkrYj42 Ascgc12/+QUCEca2XthlMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYfVcIXWIAiMZUBbXK6w3WIkDw7XPJOY1kc/UO36YP46HiQqhSnl/3JRo5LRr X0wM2jS8rS0pa0CiznXXE7eKi68itS9Ssb21l4jsIfWbGdZ9FOen5uZ5dhI61Q8/ ArBcNm77Hdn1qIlTdQbhgNy2vYC/9fzSsyBEvCWICeo+h9j+zF0bBB/63eeprN2S E68yy4W1ryPH+/BVXw31zx1MCPitIfppKm9EbaKvwaEq2NDQNFKPjtHwWJvqIYLP sGNORFVLO6pVXjnBNE2pgF5kti7JgPiA9omy20AC5Xcgdb9tsvgsW3+Cea0I2JO0 7QIc6QPXhW6ZIbhEXzUUopzjvQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:19 2026 by rpki-client