$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: Q5TJPplMUQ4GsbZWL54ehSJOjFbbVvtz0TB+cq9AzfY= Subject key identifier: 54:37:17:F5:64:17:D3:0F:E4:B4:9D:9F:6B:C1:09:5F:78:DA:1E:C1 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 023E Signing time: Sat 03 Oct 2026 03:07:25 +0000 Manifest this update: Sat 03 Oct 2026 03:07:25 +0000 Manifest next update: Sat 10 Oct 2026 03:07:25 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: SBzyT+HShzREumiAPxzXF9VymYh6bn/zfKlkegrZCPk=) 2: 22GMXwPNWWWzvWsUIcJ7UEVwvEA.asa (hash: qJkMKj8/jMHzRiV86dGH+6E0TVSHRHDhc7jDUHlYwCc=) 3: F13C8D4EBACA11F1883A41384E11F970.roa (hash: zPxKN0NM2huvpF0Ch+rRISwETJ08pGI3uOhgIhjtSNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Oct 3 03:07:25 2026 GMT Not After : Oct 10 03:07:25 2026 GMT Subject: CN=6ac0716d-5ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:8a:e0:e8:9e:31:3f:0c:75:8f:26:d5:12: e6:2c:56:86:ed:bc:d6:79:62:e5:5e:07:4a:e0:c2: ee:64:af:75:80:12:ca:14:ef:c3:9e:12:3d:ae:8d: 6a:e6:dd:23:2e:2a:36:0c:d2:ba:76:9d:9e:05:99: 7a:14:b0:fd:1f:7f:4b:13:d7:1e:bb:d0:39:e2:96: 9d:9a:2e:d7:df:3d:e9:1f:b3:c4:a2:53:ce:2f:8f: 91:c8:e5:0e:52:57:08:3b:a3:68:e3:ec:98:46:5f: 37:32:2d:6d:eb:c3:1c:1c:85:15:b4:ea:8a:6c:c8: 75:b4:8b:ee:65:84:bb:eb:ea:e6:25:a8:4a:ce:6b: 0f:6c:e5:76:b7:4a:b9:4c:b7:10:b1:06:1e:68:24: bd:bd:30:7f:43:04:0e:b9:dd:2d:a0:ca:f7:ed:67: b5:de:8a:83:c7:22:b0:58:f9:0e:45:6f:a6:b5:ab: 84:94:cc:a4:58:87:ed:e7:81:eb:15:f7:85:bc:db: 3d:10:78:fd:60:cf:67:81:cb:88:b8:cf:91:ef:04: 91:2e:4a:22:b6:44:35:7c:b8:e2:60:2c:1b:dc:37: c3:85:c4:84:9c:a4:f6:ba:4e:8a:cb:b1:79:1b:be: c9:15:9d:1f:16:9d:1c:ee:d6:34:ef:e9:f8:68:00: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:37:17:F5:64:17:D3:0F:E4:B4:9D:9F:6B:C1:09:5F:78:DA:1E:C1 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:29:63:87:ea:04:9c:17:83:66:de:ec:2f:b0:fa:93:ae:fa: 04:e1:4f:22:f4:13:fa:bc:c8:55:d0:b7:89:1b:9c:50:21:93: 61:18:82:99:7d:30:ea:58:8b:68:a4:87:c5:48:94:f3:3a:56: f1:63:00:93:42:af:44:be:b8:d1:ea:5c:e8:19:b2:de:e7:12: b7:ae:13:dd:ac:91:60:2c:bc:c8:f6:20:1a:56:f9:ba:71:70: 7d:cf:46:b7:ca:14:58:08:f4:01:ce:9f:b3:38:62:35:24:2e: a0:26:aa:79:ab:2a:b6:8b:8d:0a:5c:af:e6:9c:1a:29:94:f4: a0:af:76:45:c1:88:2f:89:3b:44:83:d7:86:66:9e:4a:24:e1: 13:64:96:da:e9:7c:2b:5e:fe:1a:ae:9d:b5:13:33:36:d8:fd: 29:87:f4:01:ca:19:2b:b0:89:c2:69:e5:4b:3d:a3:7f:e4:b1: e5:fb:73:7d:8a:0e:22:c2:e9:5b:13:52:0b:c2:b0:f5:95:ec: ee:5b:10:38:90:8f:7f:ee:5f:c9:17:9e:2c:4d:d7:23:f3:e5: 1b:42:02:c5:6a:f5:3b:1e:fa:d1:2c:57:dc:ea:4b:48:9b:07: e5:e6:bc:3d:27:e3:38:8d:bf:50:94:53:50:59:35:28:6b:4a: 9c:ba:06:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjYxMDAzMDMwNzI1WhcNMjYxMDEwMDMwNzI1WjAYMRYwFAYD VQQDEw02YWMwNzE2ZC01ZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndWK4OieMT8MdY8m1RLmLFaG7bzWeWLlXgdK4MLuZK91gBLKFO/DnhI9ro1q 5t0jLio2DNK6dp2eBZl6FLD9H39LE9ceu9A54padmi7X3z3pH7PEolPOL4+RyOUO UlcIO6No4+yYRl83Mi1t68McHIUVtOqKbMh1tIvuZYS76+rmJahKzmsPbOV2t0q5 TLcQsQYeaCS9vTB/QwQOud0toMr37We13oqDxyKwWPkORW+mtauElMykWIft54Hr FfeFvNs9EHj9YM9ngcuIuM+R7wSRLkoitkQ1fLjiYCwb3DfDhcSEnKT2uk6Ky7F5 G77JFZ0fFp0c7tY07+n4aAA8CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQ3F/Vk F9MP5LSdn2vBCV942h7BMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlSljh+oEnBeDZt7sL7D6k676BOFPIvQT+rzIVdC3iRucUCGTYRiCmX0w6liL aKSHxUiU8zpW8WMAk0KvRL640epc6Bmy3ucSt64T3ayRYCy8yPYgGlb5unFwfc9G t8oUWAj0Ac6fszhiNSQuoCaqeasqtouNClyv5pwaKZT0oK92RcGIL4k7RIPXhmae SiThE2SW2ul8K17+Gq6dtRMzNtj9KYf0AcoZK7CJwmnlSz2jf+Sx5ftzfYoOIsLp WxNSC8Kw9ZXs7lsQOJCPf+5fyReeLE3XI/PlG0ICxWr1Ox760SxX3OpLSJsH5ea8 PSfjOI2/UJRTUFk1KGtKnLoGZg== -----END CERTIFICATE-----Generated at Sun Oct 4 19:51:28 2026 by rpki-client