$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: MtwYamiQdTZqPiCXkU+1VI1TjJKL6vOBO3F2+qHqSOk= Subject key identifier: 36:56:87:74:01:78:B4:22:2B:34:47:DF:28:8C:B3:3D:99:90:79:74 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 025E Signing time: Sat 05 Sep 2026 02:02:31 +0000 Manifest this update: Sat 05 Sep 2026 02:02:30 +0000 Manifest next update: Sat 12 Sep 2026 02:02:30 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: yf/BnMfeHL/JRGI5RwX1GDtaue0w4B7IcwyuuW1E/X4=) 2: 27623F48040711F193DC81CA173D8C67.roa (hash: mzCIZfKTucgozxw0jlm4c47n5Z3DTwwALFRuv9z3XQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Sep 5 02:02:30 2026 GMT Not After : Sep 12 02:02:30 2026 GMT Subject: CN=6a9b7837-ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:76:da:f3:38:f8:9d:bc:6a:5b:76:89:c0: c4:82:a4:b9:2e:31:9d:1f:a9:9d:7f:ca:bb:d6:bc: dd:5f:45:ef:a1:20:18:34:aa:7c:45:00:b3:db:98: e6:d6:d0:9d:9f:d1:84:73:ec:6d:ad:43:26:c6:0c: 99:59:79:89:f8:b6:a5:e0:f5:06:a7:2d:3d:9f:37: 02:ff:4a:09:24:39:98:e8:25:28:f7:51:17:65:75: 66:7f:8d:15:a5:bc:d3:06:a7:ec:64:d3:c0:cf:99: ee:ef:aa:98:9b:0d:16:96:fd:66:42:e2:3e:e7:f9: ad:ec:b9:87:34:1d:a9:96:99:36:a9:b7:e5:0d:ff: 73:ae:e2:5c:26:5a:94:21:55:a9:40:0c:c6:24:83: 9e:f7:fe:68:92:af:c2:2a:4e:3f:d3:60:df:ee:7c: 78:7b:3a:76:2a:4b:b1:90:8b:78:7c:a5:88:fe:4f: 17:21:39:23:56:9a:af:18:aa:ad:44:a4:88:66:8c: 0d:2a:7a:5b:4f:46:62:20:a6:39:dc:2b:09:11:12: 4d:a6:d4:45:f5:24:c8:c9:b4:d9:d3:d7:c8:de:92: 31:c7:a7:bf:c6:55:01:76:2a:68:93:a7:4a:0b:7e: da:64:47:65:96:74:90:a4:6d:d9:41:60:3f:f8:a5: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:87:74:01:78:B4:22:2B:34:47:DF:28:8C:B3:3D:99:90:79:74 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:43:ab:bb:63:89:9f:50:b5:ed:90:40:82:fb:8d:52:db:90: d1:03:dd:60:3f:39:ea:92:8b:0e:36:e7:55:e1:83:0a:dd:77: a8:df:0c:77:e3:1a:1f:a8:68:a6:31:ca:5d:47:05:cf:05:f5: ec:71:12:70:30:28:b8:4a:0f:03:d9:15:ef:85:b9:8c:e0:66: 9a:e5:8b:9d:8c:15:b2:67:0c:83:39:36:cd:f2:71:9f:b7:57: cd:aa:fc:d9:7e:57:99:e7:3f:3e:3c:44:d9:0b:21:c4:1c:c8: ba:5e:f6:c1:55:af:49:bd:d3:8f:44:36:ef:a2:41:e9:48:88: 85:c0:96:aa:28:78:a0:1d:80:22:4d:69:a7:d3:39:0e:28:9d: d8:54:fd:fa:97:a5:d4:f7:af:c4:e8:0f:77:63:8e:37:ed:fa: cf:c7:76:34:1e:fa:78:4c:e0:ff:da:ed:09:ea:8a:70:84:a4: 91:31:95:7c:33:87:e2:04:3a:84:1b:19:ce:23:b3:04:24:ea: 0b:a5:d9:9a:da:6e:c9:6b:f7:c8:e5:ce:43:8b:9e:55:99:94: ec:9e:1a:a5:5b:49:26:cd:bc:5b:d1:7c:d2:e0:e8:27:66:db: 34:ff:82:e5:73:a7:1d:19:dc:a8:b2:73:8f:9e:25:57:f8:85: 48:7f:53:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjYwOTA1MDIwMjMwWhcNMjYwOTEyMDIwMjMwWjAYMRYwFAYD VQQDEw02YTliNzgzNy1hYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0x22vM4+J28alt2icDEgqS5LjGdH6mdf8q71rzdX0XvoSAYNKp8RQCz25jm 1tCdn9GEc+xtrUMmxgyZWXmJ+Lal4PUGpy09nzcC/0oJJDmY6CUo91EXZXVmf40V pbzTBqfsZNPAz5nu76qYmw0Wlv1mQuI+5/mt7LmHNB2plpk2qbflDf9zruJcJlqU IVWpQAzGJIOe9/5okq/CKk4/02Df7nx4ezp2KkuxkIt4fKWI/k8XITkjVpqvGKqt RKSIZowNKnpbT0ZiIKY53CsJERJNptRF9STIybTZ09fI3pIxx6e/xlUBdipok6dK C37aZEdllnSQpG3ZQWA/+KVr0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZWh3QB eLQiKzRH3yiMsz2ZkHl0MB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkOru2OJn1C17ZBAgvuNUtuQ0QPdYD856pKLDjbnVeGDCt13qN8Md+MaH6ho pjHKXUcFzwX17HEScDAouEoPA9kV74W5jOBmmuWLnYwVsmcMgzk2zfJxn7dXzar8 2X5Xmec/PjxE2QshxBzIul72wVWvSb3Tj0Q276JB6UiIhcCWqih4oB2AIk1pp9M5 Diid2FT9+pel1PevxOgPd2OON+36z8d2NB76eEzg/9rtCeqKcISkkTGVfDOH4gQ6 hBsZziOzBCTqC6XZmtpuyWv3yOXOQ4ueVZmU7J4apVtJJs28W9F80uDoJ2bbNP+C 5XOnHRncqLJzj54lV/iFSH9TjA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:17:47 2026 by rpki-client