$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: Z8qPfOvBwzKGl4wcEL+WCGTJEEiwp9QceNyv6533ut4= Subject key identifier: D5:1D:44:E3:1D:35:03:FA:B9:57:DE:6B:1E:AF:5F:09:09:71:5F:B2 Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 0228 Signing time: Mon 05 Oct 2026 03:06:12 +0000 Manifest this update: Mon 05 Oct 2026 03:06:11 +0000 Manifest next update: Mon 12 Oct 2026 03:06:11 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: 0jf4YeQYxhxdHd3Y2rfS9NBqO/meIqEhqXp8lcO+J50=) 2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: BTr6YT/sVKFiVn2WwAP9dUems16aGI8uRZK60rksJcM=) 3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: 8PR1OXqIuV/6eRpG3icyql3dqzt2IVj4HZ8xAFN12Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: Oct 5 03:06:11 2026 GMT Not After : Oct 12 03:06:11 2026 GMT Subject: CN=6ac31424-5b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:32:23:8e:2f:60:40:ab:e4:6c:66:d2:37: 7e:8d:1b:40:f2:08:e1:b2:71:5c:0e:f2:35:82:01: 07:cf:a6:ca:50:98:17:d5:b6:8c:73:df:20:64:b7: dc:50:ab:b3:d1:2d:28:6c:5e:76:42:8a:d3:00:9c: 83:02:25:09:5d:bd:dd:81:5c:d9:bd:d6:5d:e3:e5: 76:4f:e8:c1:e0:81:83:2f:e1:ea:59:5c:c3:a5:9f: cc:1f:9d:a4:3b:d6:d9:da:e4:61:b1:b4:ac:d9:ce: 2f:9d:98:ec:50:a6:52:17:9c:5f:82:12:f2:8e:a8: 6f:63:8b:c8:f2:48:ad:1f:ba:2e:1e:93:32:50:24: 8c:b9:a4:5b:05:ea:94:c4:b6:d3:b9:b8:61:bf:18: 23:2d:0e:5b:a5:22:8f:61:55:90:b9:eb:66:04:48: 52:e5:bf:b5:16:72:ec:3b:8e:ba:af:56:fd:4a:5d: 62:49:8d:50:f8:e5:f0:8f:b8:62:f7:a8:31:44:a7: 09:ad:a9:80:b2:d2:5f:a3:0c:13:fa:55:ee:23:19: 93:e5:4b:ba:76:9c:b6:db:99:41:12:9a:36:7f:18: 14:0e:32:70:33:0b:47:c8:c1:15:ac:f1:ea:6f:de: 45:60:f4:46:7f:dc:57:31:9f:c5:86:84:cb:d6:0d: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:44:E3:1D:35:03:FA:B9:57:DE:6B:1E:AF:5F:09:09:71:5F:B2 X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:52:c7:54:40:97:3d:a6:b5:24:19:41:fd:4b:dd:9d:bb: 3a:58:f9:aa:e2:9d:76:a7:70:d0:5f:da:78:64:b1:8c:ce:69: 93:10:b2:9d:e6:5b:0b:ad:36:63:1e:93:47:d8:c6:56:b9:2e: 25:c0:f5:01:ef:b0:89:18:20:99:cc:c5:5b:58:68:79:27:34: b5:93:30:f0:36:f8:85:b5:f5:34:23:0e:e3:7d:8d:f0:f8:88: 91:9d:14:ee:d8:92:8f:5b:0e:b4:b9:99:a0:85:f8:cb:fe:8f: 34:96:e4:f4:09:0c:c9:f2:d1:cc:9e:3a:50:49:ed:a8:a9:5c: ca:4a:9c:9c:cd:fd:04:1c:bc:7e:19:c0:53:9d:07:f7:6a:94: 1b:6b:6b:87:a9:3c:83:88:92:86:6f:c9:da:20:c9:9a:94:1e: 25:70:2a:0e:c5:82:96:ed:77:46:49:d5:fe:c5:e8:2f:55:61: 39:f3:39:69:44:20:fa:76:d9:67:13:2f:40:49:90:fc:a4:c6: 82:4d:a6:06:b3:9a:33:d6:0f:9c:e8:5a:35:c1:70:8f:30:06: d4:38:0b:0c:02:02:ae:58:0c:38:0d:ae:98:7f:ee:bd:7b:22: 43:74:5a:f7:59:21:d0:ec:4e:9a:2b:45:82:29:42:ef:1c:be: f3:39:7e:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5 REM1NTIyQkEwHhcNMjYxMDA1MDMwNjExWhcNMjYxMDEyMDMwNjExWjAYMRYwFAYD VQQDEw02YWMzMTQyNC01YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjc4yI44vYECr5Gxm0jd+jRtA8gjhsnFcDvI1ggEHz6bKUJgX1baMc98gZLfc UKuz0S0obF52QorTAJyDAiUJXb3dgVzZvdZd4+V2T+jB4IGDL+HqWVzDpZ/MH52k O9bZ2uRhsbSs2c4vnZjsUKZSF5xfghLyjqhvY4vI8kitH7ouHpMyUCSMuaRbBeqU xLbTubhhvxgjLQ5bpSKPYVWQuetmBEhS5b+1FnLsO466r1b9Sl1iSY1Q+OXwj7hi 96gxRKcJramAstJfowwT+lXuIxmT5Uu6dpy225lBEpo2fxgUDjJwMwtHyMEVrPHq b95FYPRGf9xXMZ/FhoTL1g1knwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUdROMd NQP6uVfeax6vXwkJcV+yMB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2 Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ em5fbmFEdTBkcC1keFZJcm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL6RSx1RAlz2mtSQZQf1L3Z27Olj5quKddqdw0F/aeGSxjM5pkxCyneZbC602 Yx6TR9jGVrkuJcD1Ae+wiRggmczFW1hoeSc0tZMw8Db4hbX1NCMO432N8PiIkZ0U 7tiSj1sOtLmZoIX4y/6PNJbk9AkMyfLRzJ46UEntqKlcykqcnM39BBy8fhnAU50H 92qUG2trh6k8g4iShm/J2iDJmpQeJXAqDsWClu13RknV/sXoL1VhOfM5aUQg+nbZ ZxMvQEmQ/KTGgk2mBrOaM9YPnOhaNcFwjzAG1DgLDAICrlgMOA2umH/uvXsiQ3Ra 91kh0OxOmitFgilC7xy+8zl+Og== -----END CERTIFICATE-----Generated at Tue Oct 6 09:23:43 2026 by rpki-client