$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: wT57+4cHDN6tXQNhWzrb/AenyMoYNaptZ6jez2HbiS8= Subject key identifier: 33:BA:FC:4D:39:D3:7D:6E:C9:B2:55:CC:52:B3:EC:1C:CC:D4:8F:11 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 021B Signing time: Tue 27 Oct 2026 03:09:01 +0000 Manifest this update: Tue 27 Oct 2026 03:09:01 +0000 Manifest next update: Tue 03 Nov 2026 03:09:01 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: ar1H/+tRXXGkKcD93MX4PP4QiKcpF0058uO9Hm+NnYU=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Oct 27 03:09:01 2026 GMT Not After : Nov 3 03:09:01 2026 GMT Subject: CN=6ae015cd-93c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c7:61:1f:95:62:f2:bb:e6:2d:04:00:1d:6b: 80:79:71:cd:2a:03:b7:7c:b7:a3:3d:88:b4:bd:6a: 30:52:de:9b:21:34:b3:2d:63:3c:d5:de:58:9b:65: 88:26:38:b2:ed:6d:e8:da:1e:f7:5e:33:28:cb:0a: 08:07:30:d9:27:29:6b:8c:c6:94:b8:02:02:1a:7c: c5:77:7e:c4:c0:bf:9f:6b:fd:0f:d0:01:e8:f5:59: 29:7a:9f:36:eb:69:b3:e2:4d:44:27:86:a6:d8:b2: 3c:46:1f:fb:c4:72:12:bd:cc:1b:94:43:f0:a4:7c: d5:e3:b1:b6:c0:03:c1:e3:37:69:69:8c:69:83:16: 61:d7:bd:9d:d7:d1:78:1c:52:42:28:10:43:dc:ee: 9e:fa:6b:73:2e:88:b4:06:16:0f:8d:82:e3:92:c6: 07:e2:1f:fb:46:88:bd:f3:db:01:ae:c2:2b:7c:9c: 9f:eb:e7:8e:39:92:69:fa:25:a6:dd:96:64:3d:b5: 5f:07:0b:6f:39:4d:a4:08:ab:c8:dc:dc:ed:92:c5: 71:2d:36:6f:3f:df:3c:44:87:e0:ea:fd:20:9b:89: 2c:9f:db:8c:45:29:f1:00:ad:ad:3f:72:49:36:07: fd:1b:9d:b1:a2:a0:55:f4:58:1c:dc:01:39:23:74: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:FC:4D:39:D3:7D:6E:C9:B2:55:CC:52:B3:EC:1C:CC:D4:8F:11 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3f:d9:79:be:d8:d0:b2:8a:2e:d4:cf:8d:9d:ca:20:ae:66: d8:75:ef:7c:1d:c6:23:0e:7c:b6:67:82:94:12:d7:65:09:40: 20:be:18:af:57:54:28:48:16:55:2b:ba:01:46:31:f6:aa:bb: 05:71:41:35:01:81:b9:dc:c7:b9:ba:91:76:be:f9:eb:9a:58: 11:e6:a1:51:88:3d:1d:0f:64:ba:8d:f9:87:5f:42:18:18:5a: 19:f9:70:73:f1:22:c4:3b:6b:2f:ab:98:c6:52:64:c6:10:3e: d3:17:9a:0f:c6:e1:ac:21:cb:be:ef:db:1e:1c:08:ca:e8:35: 74:61:32:da:2d:f8:96:f4:c8:f8:30:d3:32:9b:58:f0:d0:00: 2e:07:ab:94:53:c6:4b:c6:b6:60:26:6e:96:31:ff:ea:6c:a0: 1a:0c:32:47:fd:ac:ef:0a:aa:4e:de:70:61:5a:91:e7:3c:13: 60:b1:a0:bc:0e:41:68:8b:c1:c2:59:a3:5c:7b:5f:f3:91:c5: 3a:74:14:f5:e0:60:13:4c:fd:10:50:32:d8:a8:35:f1:20:12: 0a:6d:cf:27:be:80:ed:0f:ef:42:81:cc:86:1c:4a:e4:11:9c: 85:2d:08:2c:6b:3d:4c:f9:c8:f0:17:69:53:6a:42:40:8b:71: a6:37:3f:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYxMDI3MDMwOTAxWhcNMjYxMTAzMDMwOTAxWjAYMRYwFAYD VQQDEw02YWUwMTVjZC05M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MdhH5Vi8rvmLQQAHWuAeXHNKgO3fLejPYi0vWowUt6bITSzLWM81d5Ym2WI Jjiy7W3o2h73XjMoywoIBzDZJylrjMaUuAICGnzFd37EwL+fa/0P0AHo9Vkpep82 62mz4k1EJ4am2LI8Rh/7xHISvcwblEPwpHzV47G2wAPB4zdpaYxpgxZh172d19F4 HFJCKBBD3O6e+mtzLoi0BhYPjYLjksYH4h/7Roi989sBrsIrfJyf6+eOOZJp+iWm 3ZZkPbVfBwtvOU2kCKvI3NztksVxLTZvP988RIfg6v0gm4ksn9uMRSnxAK2tP3JJ Ngf9G52xoqBV9Fgc3AE5I3TR4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDO6/E05 031uybJVzFKz7BzM1I8RMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcj/Zeb7Y0LKKLtTPjZ3KIK5m2HXvfB3GIw58tmeClBLXZQlAIL4Yr1dUKEgW VSu6AUYx9qq7BXFBNQGBudzHubqRdr7565pYEeahUYg9HQ9kuo35h19CGBhaGflw c/EixDtrL6uYxlJkxhA+0xeaD8bhrCHLvu/bHhwIyug1dGEy2i34lvTI+DDTMptY 8NAALgerlFPGS8a2YCZuljH/6mygGgwyR/2s7wqqTt5wYVqR5zwTYLGgvA5BaIvB wlmjXHtf85HFOnQU9eBgE0z9EFAy2Kg18SASCm3PJ76A7Q/vQoHMhhxK5BGchS0I LGs9TPnI8BdpU2pCQItxpjc/7A== -----END CERTIFICATE-----Generated at Wed Oct 28 14:13:24 2026 by rpki-client