$ rpki-client -vvvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft File: JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json) Hash identifier: vXAzPoe+qn4x6YDS+UEfCMEzS/j2JTcAojRYQFVBDQM= Subject key identifier: 99:50:E0:A3:94:B0:7C:DF:8D:6F:C6:28:54:59:30:24:2E:10:12:4D Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft Manifest number: 0123 Signing time: Wed 07 Oct 2026 06:21:34 +0000 Manifest this update: Wed 07 Oct 2026 06:21:34 +0000 Manifest next update: Wed 14 Oct 2026 06:21:34 +0000 Files and hashes: 1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: aafA6GQlsjGJDQpabrVVHqOKZzCPTlxIqFZlxwnJ3Ac=) 2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Validity Not Before: Oct 7 06:21:34 2026 GMT Not After : Oct 14 06:21:34 2026 GMT Subject: CN=6ac5e4ee-f1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:4a:fa:84:18:f5:48:e1:fc:05:ae:7f:55: ca:dd:02:f0:f0:36:a4:ec:04:90:7a:c8:f5:70:51: 6f:73:83:2c:dc:ae:4b:cb:59:03:cb:d2:86:c4:ab: 19:07:4c:a6:f2:fd:6e:c1:e6:11:b3:cf:b9:bd:c4: 84:25:9e:c3:2a:b6:af:c4:13:3e:35:15:d5:1e:6b: f0:8f:e1:48:af:6f:55:99:02:91:1f:88:2c:fc:fa: cd:71:69:63:da:e2:63:48:dc:1f:bd:c7:8d:f3:13: 91:e4:d4:35:25:02:4f:49:c5:55:5b:13:78:76:57: d6:9c:b4:35:0c:15:1a:e1:ca:c0:b9:9b:00:82:f1: 1b:ed:20:dc:bf:bf:a4:ca:29:81:02:7d:8b:25:1c: 03:19:2e:0c:79:32:6e:3c:50:b0:97:e1:6d:d3:7d: 9a:a1:18:79:1c:72:94:b3:99:4b:cb:b4:f8:09:a0: f4:7a:5a:9f:48:19:b3:69:0e:7c:77:23:d6:da:59: 8b:eb:51:a8:3a:f0:f7:37:0c:26:2a:8d:49:ee:b6: b4:12:67:a7:03:7b:58:4d:ab:a5:50:b9:1b:95:ed: e5:86:81:ba:04:e5:4f:5b:d7:14:2c:4e:ee:de:74: a9:80:ed:c0:cf:9e:51:3a:3c:a5:fe:c6:a6:c3:06: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:E0:A3:94:B0:7C:DF:8D:6F:C6:28:54:59:30:24:2E:10:12:4D X509v3 Authority Key Identifier: keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:66:0b:de:cd:c1:8c:1c:af:02:cb:ad:1c:8a:b2:81:1d:21: 20:9d:c3:74:e1:d2:5b:8c:f2:ba:ef:cb:93:47:2e:b0:0c:ae: e2:c8:7e:8b:d1:40:a4:b8:2a:56:14:2d:33:f9:96:bc:71:7b: 30:c0:49:4f:49:f5:e0:cb:19:56:ad:7b:00:cb:25:61:dd:82: 4c:04:1c:0e:17:a5:9e:b2:56:00:15:9b:ed:31:5d:25:e2:35: 33:94:b3:cc:f5:93:13:72:a7:31:f7:09:22:f5:be:02:78:53: 94:28:60:73:e9:df:fa:a7:a5:26:91:12:c5:fe:7e:0d:c6:9f: ad:64:53:e0:86:80:18:82:5c:1c:e9:31:64:b2:14:45:04:b1: b8:1c:b0:6d:cd:e6:12:91:b0:dc:a8:e5:88:4c:6e:8e:53:66: 43:56:5e:40:0b:28:9e:15:5a:ca:4a:3f:b8:ab:23:6a:3b:c3: e3:0f:84:f9:0c:e8:01:8f:81:c5:30:e1:f1:0e:d5:04:5f:31: 04:c6:18:d4:f8:24:30:97:5c:ca:82:7c:39:78:9a:f7:99:8f: 65:d7:d0:ec:52:f5:6e:f4:db:92:df:78:50:16:bb:b2:2b:90: 81:5a:58:08:2b:7b:f5:05:ad:1b:09:e5:e7:60:e0:f9:48:c7: 05:6e:76:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1 RjUzQzVEMDkwHhcNMjYxMDA3MDYyMTM0WhcNMjYxMDE0MDYyMTM0WjAYMRYwFAYD VQQDEw02YWM1ZTRlZS1mMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDpK+oQY9Ujh/AWuf1XK3QLw8Dak7ASQesj1cFFvc4Ms3K5Ly1kDy9KGxKsZ B0ym8v1uweYRs8+5vcSEJZ7DKravxBM+NRXVHmvwj+FIr29VmQKRH4gs/PrNcWlj 2uJjSNwfvceN8xOR5NQ1JQJPScVVWxN4dlfWnLQ1DBUa4crAuZsAgvEb7SDcv7+k yimBAn2LJRwDGS4MeTJuPFCwl+Ft032aoRh5HHKUs5lLy7T4CaD0elqfSBmzaQ58 dyPW2lmL61GoOvD3NwwmKo1J7ra0EmenA3tYTaulULkble3lhoG6BOVPW9cULE7u 3nSpgO3Az55ROjyl/samwwa1gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlQ4KOU sHzfjW/GKFRZMCQuEBJNMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDQy9CREQ0QUYzQzBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3 TEhyRDBwQVQ2UTFmVThYUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2YL3s3BjByvAsutHIqygR0hIJ3DdOHSW4zyuu/Lk0cusAyu4sh+i9FApLgq VhQtM/mWvHF7MMBJT0n14MsZVq17AMslYd2CTAQcDhelnrJWABWb7TFdJeI1M5Sz zPWTE3KnMfcJIvW+AnhTlChgc+nf+qelJpESxf5+DcafrWRT4IaAGIJcHOkxZLIU RQSxuBywbc3mEpGw3KjliExujlNmQ1ZeQAsonhVayko/uKsjajvD4w+E+QzoAY+B xTDh8Q7VBF8xBMYY1PgkMJdcyoJ8OXia95mPZdfQ7FL1bvTbkt94UBa7siuQgVpY CCt79QWtGwnl52Dg+UjHBW52+Q== -----END CERTIFICATE-----Generated at Thu Oct 8 19:18:13 2026 by rpki-client