$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft File: JfzCC3gzseILvBM0UQqTrh1obMA.mft (raw, json) Hash identifier: g+SL0lmOtsdV3dSC/2joXfsZqVrj6pTKs//1R42+AzA= Subject key identifier: 41:3F:CF:01:12:7A:34:7F:55:37:98:82:6D:91:0B:0A:8C:44:C4:69 Authority key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0 Certificate issuer: /CN=A918AA54/serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft Manifest number: 040E Signing time: Mon 05 Oct 2026 00:27:11 +0000 Manifest this update: Mon 05 Oct 2026 00:27:11 +0000 Manifest next update: Mon 12 Oct 2026 00:27:11 +0000 Files and hashes: 1: JfzCC3gzseILvBM0UQqTrh1obMA.crl (hash: iYC9I2GxE1+Dts/qNOxntq6P7YoHhtYq3bEViKQdmLk=) 2: FD8683B6AB2F11F199111181AFEE528E.roa (hash: nj7zpHhdZPeAnSuqqiBAFC350E8Xly3tDniLk5HF2SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0 Validity Not Before: Oct 5 00:27:11 2026 GMT Not After : Oct 12 00:27:11 2026 GMT Subject: CN=6ac2eedf-ee02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:c8:15:d3:80:82:14:0c:00:77:29:0c:9b: 60:18:96:39:31:26:b1:9d:a8:98:c6:f2:fb:1e:ca: d6:d2:53:d8:94:ab:02:d2:71:ea:32:1a:32:86:02: 6d:1d:72:4c:fc:f2:b5:bf:55:eb:8a:70:bf:5f:7e: 23:5d:8b:af:f7:ae:28:1d:34:a3:6a:24:70:40:79: 4d:49:0c:7a:51:99:f4:b9:71:f4:9b:f1:6b:ab:dc: e8:52:37:57:52:4d:62:94:99:5b:6c:db:ba:35:2a: ad:66:e8:fb:33:37:aa:aa:51:dc:2e:64:66:ff:4e: f9:37:db:90:fc:79:42:68:43:eb:2a:62:72:f2:71: 5c:9f:9b:20:70:a6:50:49:ca:26:32:78:01:49:02: 27:28:29:9b:88:56:3c:aa:41:c7:37:cd:43:f7:97: 53:d8:da:47:2a:d5:b1:b4:4c:95:77:cf:b7:3d:9d: ff:90:d7:4e:09:41:69:68:df:95:e7:eb:25:cd:79: a0:15:0b:d0:07:fb:56:92:16:07:15:9e:0a:33:a2: f9:b3:87:b4:d8:0a:99:4b:0f:0c:6b:e3:94:de:4f: e7:28:b5:0c:9d:7c:a1:2c:98:23:4c:15:74:51:d2: d6:f8:db:fd:63:17:a7:da:42:db:b2:a7:05:dd:1a: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3F:CF:01:12:7A:34:7F:55:37:98:82:6D:91:0B:0A:8C:44:C4:69 X509v3 Authority Key Identifier: keyid:25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:e9:3e:f0:fe:81:34:ab:75:02:b7:4c:7c:a4:34:1e:c1: 99:73:9c:09:b3:d0:9f:e4:be:57:39:b1:4e:e2:5a:1e:33:c5: 21:c6:a6:78:09:b3:e3:c9:ef:d2:ff:ab:20:d1:7f:76:37:15: a6:ae:7f:3d:bc:26:cb:82:d7:3f:c3:18:a9:d2:ae:fb:49:18: 9b:c5:8e:eb:67:55:ea:68:64:9f:8a:85:78:bb:47:21:93:83: 02:07:e1:4c:49:17:05:f8:a8:bc:db:a0:85:40:81:c5:77:1e: 30:7d:b8:60:80:f3:78:6e:69:7d:22:e3:51:14:75:68:51:e4: 3b:95:ac:48:c3:32:64:03:55:da:64:22:ae:c0:ff:aa:eb:3b: a5:fb:aa:a6:c5:a3:15:09:34:ff:0e:75:a7:80:6f:dc:5b:1e: 83:06:83:40:4b:33:a8:c7:4a:74:aa:4b:c2:42:91:11:0c:3b: 00:79:37:56:0d:d3:e7:2e:4c:bf:36:73:21:8e:db:20:bb:7c: 7d:c2:08:70:d5:fa:d2:9d:59:ab:29:1e:57:78:55:df:71:a8: c1:34:9a:4b:c3:27:83:df:0c:db:2e:43:7f:8b:9b:4a:0b:a9: de:97:00:06:57:a4:ad:3a:d0:c6:87:04:75:bb:a1:89:17:c6: c6:70:a4:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUE1NDExMC8GA1UEBRMoMjVGQ0MyMEI3ODMzQjFFMjBCQkMxMzM0NTEwQTkzQUUx RDY4NkNDMDAeFw0yNjEwMDUwMDI3MTFaFw0yNjEwMTIwMDI3MTFaMBgxFjAUBgNV BAMTDTZhYzJlZWRmLWVlMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXksgV04CCFAwAdykMm2AYljkxJrGdqJjG8vseytbSU9iUqwLSceoyGjKGAm0d ckz88rW/VeuKcL9ffiNdi6/3rigdNKNqJHBAeU1JDHpRmfS5cfSb8Wur3OhSN1dS TWKUmVts27o1Kq1m6PszN6qqUdwuZGb/Tvk325D8eUJoQ+sqYnLycVyfmyBwplBJ yiYyeAFJAicoKZuIVjyqQcc3zUP3l1PY2kcq1bG0TJV3z7c9nf+Q104JQWlo35Xn 6yXNeaAVC9AH+1aSFgcVngozovmzh7TYCplLDwxr45TeT+cotQydfKEsmCNMFXRR 0tb42/1jF6faQtuypwXdGn2jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQT/PARJ6 NH9VN5iCbZELCoxExGkwHwYDVR0jBBgwFoAUJfzCC3gzseILvBM0UQqTrh1obMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQTU0L0Q4OENEOUQ2REMz ODExRUM5MzkxMEI2OEM0RjlBRTAyL0pmekNDM2d6c2VJTHZCTTBVUXFUcmgxb2JN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmZ6Q0MzZ3pzZUlMdkJNMFVRcVRyaDFvYk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QTU0L0Q4OENEOUQ2REMzODExRUM5MzkxMEI2OEM0RjlBRTAyL0pmekNDM2d6c2VJ THZCTTBVUXFUcmgxb2JNQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTXek+8P6BNKt1ArdMfKQ0HsGZc5wJs9Cf5L5XObFO4loeM8UhxqZ4CbPjye/S /6sg0X92NxWmrn89vCbLgtc/wxip0q77SRibxY7rZ1XqaGSfioV4u0chk4MCB+FM SRcF+Ki826CFQIHFdx4wfbhggPN4bml9IuNRFHVoUeQ7laxIwzJkA1XaZCKuwP+q 6zul+6qmxaMVCTT/DnWngG/cWx6DBoNASzOox0p0qkvCQpERDDsAeTdWDdPnLky/ NnMhjtsgu3x9wghw1frSnVmrKR5XeFXfcajBNJpLwyeD3wzbLkN/i5tKC6nelwAG V6StOtDGhwR1u6GJF8bGcKRb -----END CERTIFICATE-----Generated at Tue Oct 6 20:00:14 2026 by rpki-client