$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: S0wTTs+rCgCoGc9xdS6HtMgepxSzgv9VUWRvt8+S+V0= Subject key identifier: E2:40:AB:57:78:EA:74:47:24:09:38:5B:37:16:E4:D3:A0:6B:0D:43 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 037A Signing time: Fri 11 Sep 2026 00:38:41 +0000 Manifest this update: Fri 11 Sep 2026 00:38:40 +0000 Manifest next update: Fri 18 Sep 2026 00:38:40 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: jSSjeAmGgCM0BYE8/bClZaxvVsFsOcUAI14fg7HIrAE=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Sep 11 00:38:40 2026 GMT Not After : Sep 18 00:38:40 2026 GMT Subject: CN=6aa34d91-e252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:fb:bc:99:58:33:3e:67:3a:0e:fe:4f:1b: b0:a9:a7:7d:72:f5:b8:75:64:ca:36:7e:91:ad:8a: f9:7f:8b:f9:ad:b0:4e:32:1d:23:45:96:0d:f2:d7: c8:a2:5a:32:2e:c8:17:2a:e4:66:2e:ca:2c:76:ba: a0:fa:c6:7b:31:93:8a:49:79:43:52:a5:30:9e:8a: 88:ce:01:da:6e:2c:fa:ea:1e:2e:b1:6e:ab:50:b6: 43:88:a3:9c:97:34:f2:d1:3a:96:8a:19:7b:3a:03: 97:d5:17:3b:74:67:7a:9c:64:c3:e1:6f:11:f7:22: 08:f1:e1:4d:20:0e:a0:eb:f9:2c:90:9f:39:1a:1e: 17:af:b9:69:80:17:8f:53:92:66:9e:66:2c:3b:85: 7e:61:37:f4:69:a2:38:51:ff:d2:b2:df:47:88:f1: 81:da:6b:88:d1:11:c1:b5:94:15:99:e7:34:6f:e7: 83:3e:a2:5b:9f:b0:56:24:d8:d1:8a:15:19:66:74: 33:f0:21:d9:99:7b:96:39:ba:09:4d:61:ad:88:64: c2:fb:7e:3b:3c:0d:06:04:42:2c:f8:af:7c:3c:53: ff:c2:28:d8:6e:b6:d3:54:00:e5:4c:6d:fc:dc:19: 56:f2:8a:fd:57:7f:14:1a:39:5f:fd:7a:6f:3c:3e: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:AB:57:78:EA:74:47:24:09:38:5B:37:16:E4:D3:A0:6B:0D:43 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f8:15:8c:b9:67:43:ec:93:c4:c2:5b:02:a8:9c:aa:66:ab:9e: 06:95:1a:a4:c5:72:50:b3:4c:02:c0:f5:23:05:da:39:71:77: 83:6b:0c:64:c9:ed:1d:13:f3:9b:2e:c4:ea:3e:0b:08:f3:c1: 15:0b:b3:bc:cc:ea:32:a4:54:f8:29:6a:fe:ab:84:f6:b6:65: e3:73:de:c3:a4:36:7c:e8:f0:84:3b:e2:fd:6d:e3:58:af:5c: ea:48:26:dd:2c:6f:09:0e:3b:13:da:73:f1:e0:1a:c3:bd:19: c3:7b:07:7e:1c:ab:68:88:22:9b:20:44:b4:8d:9d:5e:be:1b: f4:3b:e1:fa:26:b8:2a:90:de:d5:c7:ef:95:8a:a9:e3:5a:24: 81:83:f1:22:30:b7:65:65:17:a3:83:10:c4:9a:91:3a:25:19: cd:82:3a:71:9e:e5:96:17:21:bb:a0:0c:ea:43:9f:8a:2d:56: 81:58:44:de:eb:d5:4e:ad:3b:f0:9c:39:ee:63:78:4e:93:8b: e4:68:1a:f6:b7:be:3d:6a:58:55:bc:4b:1d:1c:ee:34:73:38: e5:a8:b1:15:79:49:38:df:cc:af:35:f6:b8:5b:9d:a7:87:87: 42:cd:9b:57:51:fe:24:a7:c1:14:7a:68:15:c5:2f:9f:e1:d9: 2c:51:72:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwOTExMDAzODQwWhcNMjYwOTE4MDAzODQwWjAYMRYwFAYD VQQDEw02YWEzNGQ5MS1lMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9P7vJlYMz5nOg7+Txuwqad9cvW4dWTKNn6RrYr5f4v5rbBOMh0jRZYN8tfI oloyLsgXKuRmLsosdrqg+sZ7MZOKSXlDUqUwnoqIzgHabiz66h4usW6rULZDiKOc lzTy0TqWihl7OgOX1Rc7dGd6nGTD4W8R9yII8eFNIA6g6/kskJ85Gh4Xr7lpgBeP U5JmnmYsO4V+YTf0aaI4Uf/Sst9HiPGB2muI0RHBtZQVmec0b+eDPqJbn7BWJNjR ihUZZnQz8CHZmXuWOboJTWGtiGTC+347PA0GBEIs+K98PFP/wijYbrbTVADlTG38 3BlW8or9V38UGjlf/XpvPD6AvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJAq1d4 6nRHJAk4WzcW5NOgaw1DMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA+BWMuWdD7JPEwlsCqJyqZqueBpUapMVyULNMAsD1IwXaOXF3g2sMZMntHRPz my7E6j4LCPPBFQuzvMzqMqRU+Clq/quE9rZl43Pew6Q2fOjwhDvi/W3jWK9c6kgm 3SxvCQ47E9pz8eAaw70Zw3sHfhyraIgimyBEtI2dXr4b9Dvh+ia4KpDe1cfvlYqp 41okgYPxIjC3ZWUXo4MQxJqROiUZzYI6cZ7llhchu6AM6kOfii1WgVhE3uvVTq07 8Jw57mN4TpOL5Gga9re+PWpYVbxLHRzuNHM45aixFXlJON/MrzX2uFudp4eHQs2b V1H+JKfBFHpoFcUvn+HZLFFynw== -----END CERTIFICATE-----Generated at Fri Sep 11 11:27:34 2026 by rpki-client