$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: gHsJJoCp96OVeFEG8IY2n8zOMB0g3E0Z42NM9cnb6Do= Subject key identifier: 35:19:DB:3E:84:BF:E1:02:13:64:1A:B5:CA:62:C5:A5:19:23:A3:32 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0848 Signing time: Fri 02 Oct 2026 21:18:31 +0000 Manifest this update: Fri 02 Oct 2026 21:18:31 +0000 Manifest next update: Fri 09 Oct 2026 21:18:31 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: hXC5FW5D05+hsqqwkTUkFrkq8uM3i99L+RcRRyWloXM=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Oct 2 21:18:31 2026 GMT Not After : Oct 9 21:18:31 2026 GMT Subject: CN=6ac01fa7-5ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:02:7a:61:69:cd:87:0d:7e:9f:0b:6a:e3: dd:3a:64:4a:37:0f:df:72:ed:1f:b6:0f:85:be:65: 43:cd:b5:8a:19:55:18:bb:f1:85:dd:74:c2:18:8d: a5:95:e7:4d:03:2d:a3:85:fa:f4:49:d9:e4:ca:4c: 1b:91:b0:dd:fa:f7:bd:f5:31:f5:5d:60:f6:3c:5f: 0c:9b:d3:c6:ae:13:2e:51:8f:b3:31:19:ab:f0:69: 1e:51:1a:cf:e2:3f:c7:47:d0:d9:39:56:8f:ff:39: 2a:64:88:bd:7b:46:5b:cb:0f:7f:02:0f:04:9e:95: 58:ac:a5:44:e9:bf:93:25:07:e2:c7:61:6b:03:f4: f7:28:b9:1e:b7:18:a8:f4:d7:e5:22:ad:81:b6:91: 85:fb:74:0a:3d:d8:2b:90:9a:db:cf:32:92:4c:e3: f6:4d:0c:30:db:aa:8e:f4:f2:e5:ae:a4:52:88:bf: 00:c7:ba:63:08:b9:bf:03:e8:4b:ab:6d:91:0d:7d: 6c:a2:10:10:54:ee:e9:53:b5:48:b4:4e:99:a1:31: 1b:6a:93:46:75:1c:30:9b:9e:d4:f7:93:3c:02:33: 4e:eb:59:52:e8:02:00:3d:af:bf:b2:a1:6f:c0:3a: b3:73:04:60:86:eb:e8:2f:48:b3:9c:f9:7d:7a:04: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:DB:3E:84:BF:E1:02:13:64:1A:B5:CA:62:C5:A5:19:23:A3:32 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:30:1c:fc:79:47:bb:7a:1e:e6:5b:2a:ef:76:7b:69:25: 2e:b0:b8:b7:85:70:10:a4:7e:72:ba:a2:e7:f8:c9:9a:ca:07: 9e:c8:91:01:05:35:1d:e4:69:4f:4a:28:03:aa:87:d0:17:f1: 79:77:74:3f:37:09:15:0e:34:4b:2b:30:9d:f6:5e:f1:18:c5: 33:f0:79:f2:21:02:49:57:53:27:6c:1f:fc:b4:1b:5d:03:5d: bd:c3:71:7c:15:43:68:dd:15:c8:dd:7c:b8:f4:b6:56:ba:8f: be:36:5d:cd:72:66:96:59:71:a7:a1:60:32:fb:b3:7a:b3:8f: bf:bf:82:a7:9d:7b:9a:0a:e7:62:6d:8f:08:8f:93:e4:27:09: 5f:03:1f:a2:d4:eb:04:0c:cd:b3:aa:2f:92:48:4a:6e:03:3b: 08:fb:57:d3:c7:d3:66:9f:ac:6e:51:39:73:24:37:98:ce:62: cf:76:3d:f4:a8:8d:87:0f:63:61:08:fe:c3:0d:99:ee:da:bc: 88:e1:18:c9:4f:24:72:78:9f:e9:d1:f8:2d:95:a2:17:e5:dd: 6d:8d:9f:38:ed:e6:f9:84:fc:b9:8a:0f:e0:f1:ae:60:f4:09: 98:41:c9:d8:6f:33:82:84:0e:98:c8:1b:b3:ef:20:55:e5:83: c4:b0:e1:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjYxMDAyMjExODMxWhcNMjYxMDA5MjExODMxWjAYMRYwFAYD VQQDEw02YWMwMWZhNy01YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhSACemFpzYcNfp8LauPdOmRKNw/fcu0ftg+FvmVDzbWKGVUYu/GF3XTCGI2l ledNAy2jhfr0SdnkykwbkbDd+ve99TH1XWD2PF8Mm9PGrhMuUY+zMRmr8GkeURrP 4j/HR9DZOVaP/zkqZIi9e0Zbyw9/Ag8EnpVYrKVE6b+TJQfix2FrA/T3KLketxio 9NflIq2BtpGF+3QKPdgrkJrbzzKSTOP2TQww26qO9PLlrqRSiL8Ax7pjCLm/A+hL q22RDX1sohAQVO7pU7VItE6ZoTEbapNGdRwwm57U95M8AjNO61lS6AIAPa+/sqFv wDqzcwRghuvoL0iznPl9egTabwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUZ2z6E v+ECE2QatcpixaUZI6MyMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV48wHPx5R7t6HuZbKu92e2klLrC4t4VwEKR+crqi5/jJmsoHnsiRAQU1HeRp T0ooA6qH0BfxeXd0PzcJFQ40SyswnfZe8RjFM/B58iECSVdTJ2wf/LQbXQNdvcNx fBVDaN0VyN18uPS2VrqPvjZdzXJmlllxp6FgMvuzerOPv7+Cp517mgrnYm2PCI+T 5CcJXwMfotTrBAzNs6ovkkhKbgM7CPtX08fTZp+sblE5cyQ3mM5iz3Y99KiNhw9j YQj+ww2Z7tq8iOEYyU8kcnif6dH4LZWiF+XdbY2fOO3m+YT8uYoP4PGuYPQJmEHJ 2G8zgoQOmMgbs+8gVeWDxLDhug== -----END CERTIFICATE-----Generated at Sun Oct 4 01:09:21 2026 by rpki-client