$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: WHGo7Xvug8bNSwIk5V6Eh0QJeE3GsaCTvXfilXJpryw= Subject key identifier: C8:D2:BB:EA:96:72:FA:BC:00:BB:90:BC:1A:00:2D:1D:89:62:16:21 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 1097 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 108D Signing time: Fri 04 Sep 2026 17:19:28 +0000 Manifest this update: Fri 04 Sep 2026 17:19:28 +0000 Manifest next update: Fri 11 Sep 2026 17:19:28 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: 4K5QG0kB2QUIAj4u5Vey20CdNKGrwPelsSLi0ai9fJs=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Sep 4 17:19:28 2026 GMT Not After : Sep 11 17:19:28 2026 GMT Subject: CN=6a9afda0-63a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:9f:88:74:31:7e:67:0f:fa:8b:95:ce:8c: 71:39:41:6a:90:74:d9:4d:6c:76:7e:bf:39:1f:c8: df:e8:26:a5:ef:29:89:c8:44:91:1e:c8:b3:ee:68: fd:9d:df:f7:5f:0b:71:58:8d:84:72:55:41:30:0c: d6:3e:8e:2e:c6:98:24:bb:45:f6:3d:12:d2:aa:a1: 20:a0:62:08:fd:dd:bb:83:ec:19:2c:4d:0d:a5:87: 8f:a0:d4:17:23:60:8e:9f:3a:71:11:ee:57:39:40: ff:40:c6:21:ca:9d:9e:a9:eb:6e:92:12:2e:c3:b2: d4:a8:8e:c7:64:0c:01:38:fa:27:f5:18:78:12:e7: 4f:6d:59:f2:68:65:60:1c:da:29:4f:14:9a:c4:d3: 7b:b8:f2:da:2f:bb:c9:30:af:ae:52:06:b9:bd:8f: 1d:ae:f5:48:99:dc:5e:11:c4:a1:e7:c8:d3:f1:58: 7b:4f:91:e4:2f:fb:18:bd:c5:c8:03:a7:43:85:0e: 13:67:35:b1:2e:50:eb:12:82:53:dd:ba:cc:69:68: 54:12:9a:71:dd:ca:a5:23:f6:cc:39:b3:10:64:5f: d2:d3:d6:e2:39:65:f2:66:93:ed:17:73:6e:0b:4f: c5:89:ae:1a:76:27:b9:86:53:a5:39:da:dd:5c:65: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:BB:EA:96:72:FA:BC:00:BB:90:BC:1A:00:2D:1D:89:62:16:21 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:10:f6:63:14:b2:5d:fe:82:5e:c7:b0:7f:59:db:48:32:8b: c7:ca:b0:d1:b1:a1:1b:67:fd:54:89:7e:c1:10:04:41:97:44: 2e:fe:85:06:64:46:21:31:8d:84:d2:bb:6c:c2:4d:9f:4e:fa: 06:5d:0d:f9:83:1e:90:e7:86:fd:b7:2c:f3:68:0d:1b:81:5e: 5b:99:b0:5f:73:81:c6:46:9b:c6:49:6b:fb:aa:7f:3b:6f:d1: 30:13:5c:86:e6:27:fb:d4:06:bb:a8:bb:a8:68:ea:61:f7:64: ea:02:f8:42:28:92:32:b5:5d:88:17:1c:9f:7e:26:3e:d6:92: 9c:54:af:07:d6:9c:f9:97:a9:bd:d5:e7:4a:a3:cd:d3:14:99: 79:dd:fa:13:68:80:ca:30:0f:b8:bf:af:c7:bd:41:66:04:96: 13:1c:88:31:97:fa:3c:73:d3:7e:0b:f3:6e:f8:e0:2b:16:70: e4:10:a4:4e:64:8c:41:77:2c:51:42:b0:af:5c:ef:92:0c:36: e4:c1:2d:f2:e0:a5:5e:d5:46:50:1a:ee:5e:04:39:d2:f4:99: 9f:06:e3:04:85:5b:aa:f1:bb:b1:3d:0e:95:2f:25:73:83:a6: 74:a8:77:f4:99:20:0b:cc:ba:24:8d:4e:83:0b:b5:ca:1a:f9: cf:b9:50:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjYwOTA0MTcxOTI4WhcNMjYwOTExMTcxOTI4WjAYMRYwFAYD VQQDEw02YTlhZmRhMC02M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYifiHQxfmcP+ouVzoxxOUFqkHTZTWx2fr85H8jf6Cal7ymJyESRHsiz7mj9 nd/3XwtxWI2EclVBMAzWPo4uxpgku0X2PRLSqqEgoGII/d27g+wZLE0NpYePoNQX I2COnzpxEe5XOUD/QMYhyp2eqetukhIuw7LUqI7HZAwBOPon9Rh4EudPbVnyaGVg HNopTxSaxNN7uPLaL7vJMK+uUga5vY8drvVImdxeEcSh58jT8Vh7T5HkL/sYvcXI A6dDhQ4TZzWxLlDrEoJT3brMaWhUEppx3cqlI/bMObMQZF/S09biOWXyZpPtF3Nu C0/Fia4adie5hlOlOdrdXGXDJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjSu+qW cvq8ALuQvBoALR2JYhYhMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgRD2YxSyXf6CXsewf1nbSDKLx8qw0bGhG2f9VIl+wRAEQZdELv6FBmRGITGN hNK7bMJNn076Bl0N+YMekOeG/bcs82gNG4FeW5mwX3OBxkabxklr+6p/O2/RMBNc huYn+9QGu6i7qGjqYfdk6gL4QiiSMrVdiBccn34mPtaSnFSvB9ac+ZepvdXnSqPN 0xSZed36E2iAyjAPuL+vx71BZgSWExyIMZf6PHPTfgvzbvjgKxZw5BCkTmSMQXcs UUKwr1zvkgw25MEt8uClXtVGUBruXgQ50vSZnwbjBIVbqvG7sT0OlS8lc4OmdKh3 9JkgC8y6JI1Ogwu1yhr5z7lQ0w== -----END CERTIFICATE-----Generated at Sat Sep 5 06:37:49 2026 by rpki-client