$ rpki-client -vvvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: h4hxRu5J971sXx8lwfa12Z62tY5hKAKF5w3yFfdKqKE= Subject key identifier: 81:F5:A9:DB:23:BF:8A:1B:98:46:01:0C:D5:94:63:0D:53:9A:9E:2D Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0A3B Signing time: Fri 04 Sep 2026 19:40:00 +0000 Manifest this update: Fri 04 Sep 2026 19:39:59 +0000 Manifest next update: Fri 11 Sep 2026 19:39:59 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: br8FGwEVuCXRmR8ElNZGiRjhGZc9yIsrju3jiKZNqHs=) 2: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 6ELYEf//xgOmHmrw5674KJknvEDN6uqGmjP7VLTouxc=) 3: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: KWvwHruv1KceHBzzUFVoKpJPfw5czAZyyAOarnbSqBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: Sep 4 19:39:59 2026 GMT Not After : Sep 11 19:39:59 2026 GMT Subject: CN=6a9b1e90-09ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:b6:9f:ce:ed:3a:da:cc:1b:b9:12:d9:4c: e4:62:da:a3:b9:15:91:7a:b9:be:ca:04:7c:5f:46: eb:31:1c:d9:e3:8d:ab:b0:4d:80:f8:f3:52:4e:ea: e3:41:d8:eb:86:65:18:1c:08:40:e0:3b:46:70:5b: 64:56:18:1e:ea:39:44:30:d3:2d:d6:8a:c6:46:8b: fa:1b:ad:26:b8:1d:01:99:70:a2:7b:a0:1a:77:6c: b2:32:b2:27:80:37:74:cc:c5:c8:0d:a2:b0:58:c9: eb:75:7f:66:fb:25:28:05:6c:af:8e:e7:f8:f4:a9: 5d:df:0c:fe:73:22:22:1d:65:81:60:c3:61:1a:eb: 16:9d:08:5b:42:35:5b:59:75:aa:94:3f:54:90:86: fc:eb:f0:42:55:fc:c5:02:5a:c7:cf:95:6b:96:a9: 61:77:fc:55:43:2c:82:33:fc:ab:b2:eb:9d:f2:12: e7:a9:2d:f7:dd:05:c0:e0:8d:57:58:59:4d:76:a8: 9a:8e:de:52:a5:4a:40:1b:4d:66:ae:e7:a3:07:d7: e1:ec:76:04:d3:6d:d8:d4:27:3e:aa:e4:d1:32:96: b7:72:83:17:bb:b9:c0:4a:7e:c7:8a:cc:ef:4a:f6: 96:e9:be:42:c6:5c:b7:f6:ce:81:b4:28:e6:c0:68: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:A9:DB:23:BF:8A:1B:98:46:01:0C:D5:94:63:0D:53:9A:9E:2D X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5b:eb:40:76:42:45:63:6e:77:52:f6:2f:10:01:3d:38:d9: 78:45:51:04:d6:b1:1b:cd:06:52:45:83:db:0e:20:94:50:49: ba:25:9e:05:a6:76:17:ea:8c:12:56:78:67:dc:d6:f5:55:d6: e6:73:0b:63:35:52:45:bc:3e:ae:09:f4:3c:fd:3b:91:ce:55: aa:24:6d:fe:db:96:ad:d0:83:41:21:38:60:b4:0d:b0:96:47: 28:70:6b:9f:c5:da:d8:13:86:bf:b3:4f:15:91:e5:16:5f:58: da:4e:dd:a1:18:ff:b3:36:0c:48:85:0e:b5:ed:d6:98:4f:9a: 23:b6:47:f5:51:76:92:c2:41:79:13:56:25:f6:bd:16:ed:b6: 97:65:ea:a0:22:da:db:0a:0c:e5:cf:34:b3:69:76:5f:a0:86: de:a0:3b:3f:47:7f:b0:01:65:89:0b:fd:24:1f:f2:a5:a6:a9: 7e:f0:24:17:87:04:fd:b0:41:a5:1d:ba:68:d7:07:e1:db:1e: e0:ca:97:7a:66:30:be:24:26:8e:8b:d6:68:9e:93:f9:ce:e7: e1:66:d7:5d:c6:37:11:82:ab:a6:9b:b4:1b:b4:98:db:a6:f6: a2:a4:1b:08:48:5a:60:28:4f:59:07:bd:e7:20:48:0c:58:1f: d7:c6:d7:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjYwOTA0MTkzOTU5WhcNMjYwOTExMTkzOTU5WjAYMRYwFAYD VQQDEw02YTliMWU5MC0wOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Oi2n87tOtrMG7kS2UzkYtqjuRWRerm+ygR8X0brMRzZ442rsE2A+PNSTurj QdjrhmUYHAhA4DtGcFtkVhge6jlEMNMt1orGRov6G60muB0BmXCie6Aad2yyMrIn gDd0zMXIDaKwWMnrdX9m+yUoBWyvjuf49Kld3wz+cyIiHWWBYMNhGusWnQhbQjVb WXWqlD9UkIb86/BCVfzFAlrHz5Vrlqlhd/xVQyyCM/yrsuud8hLnqS333QXA4I1X WFlNdqiajt5SpUpAG01mruejB9fh7HYE023Y1Cc+quTRMpa3coMXu7nASn7Hiszv SvaW6b5Cxly39s6BtCjmwGjRlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIH1qdsj v4obmEYBDNWUYw1Tmp4tMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFvrQHZCRWNud1L2LxABPTjZeEVRBNaxG80GUkWD2w4glFBJuiWeBaZ2F+qM ElZ4Z9zW9VXW5nMLYzVSRbw+rgn0PP07kc5VqiRt/tuWrdCDQSE4YLQNsJZHKHBr n8Xa2BOGv7NPFZHlFl9Y2k7doRj/szYMSIUOte3WmE+aI7ZH9VF2ksJBeRNWJfa9 Fu22l2XqoCLa2woM5c80s2l2X6CG3qA7P0d/sAFliQv9JB/ypaapfvAkF4cE/bBB pR26aNcH4dse4MqXemYwviQmjovWaJ6T+c7n4WbXXcY3EYKrppu0G7SY26b2oqQb CEhaYChPWQe95yBIDFgf18bXvg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:14:35 2026 by rpki-client