$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: j1g37CRCxcxm6+wm5ExBYv4JB2xpEEN3eYPt1VuDHkw= Subject key identifier: 0C:0D:27:E7:2C:12:52:3E:AE:14:B9:9C:69:B1:BE:75:26:1B:28:78 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0204 Signing time: Fri 11 Sep 2026 03:13:29 +0000 Manifest this update: Fri 11 Sep 2026 03:13:28 +0000 Manifest next update: Fri 18 Sep 2026 03:13:28 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: wg55V3aqCfZB2P8azJ1mhaAs3tKGTyU8GXweqCgEWYw=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Sep 11 03:13:28 2026 GMT Not After : Sep 18 03:13:28 2026 GMT Subject: CN=6aa371d9-577e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:c8:56:f2:22:26:3d:7a:48:7c:48:e3:54: 8e:e7:4b:fe:9d:11:7c:d1:7c:04:0a:5d:77:e5:3e: 22:39:c2:46:ff:57:7c:4f:df:40:58:be:a5:f0:8b: 60:35:63:72:dc:13:62:06:e8:bc:18:80:07:52:3d: 53:27:9a:e5:f2:54:55:19:fd:5a:dd:9c:94:5a:21: 54:f6:1b:30:85:da:91:c0:5a:61:30:40:0c:45:53: e5:38:37:33:81:5a:dd:dc:eb:ca:60:c3:0f:c0:3f: 98:1c:72:7c:44:49:0c:5e:b2:e4:50:c1:1f:ec:15: 79:2f:69:70:09:4c:d1:ef:46:f0:69:27:20:73:55: 1b:f2:09:36:b2:b9:d4:7b:95:78:55:05:79:73:e1: ed:32:5b:6d:f7:4a:5d:04:75:2d:10:63:c5:a8:1f: 64:dc:ae:b9:c8:6e:1f:9f:ee:f7:79:55:df:e6:d6: 9c:8b:0e:65:af:16:25:ed:dd:7c:54:d6:91:ea:6b: 8b:50:3a:88:1d:ac:4d:5f:5f:71:9e:3d:96:b5:3f: 00:05:46:1d:42:72:c9:94:bb:20:d9:e3:77:bd:b8: a3:63:9e:01:dc:d0:e8:0a:11:28:b1:d1:e3:9b:cd: 3b:e6:3e:f0:23:57:f4:6d:c4:21:f8:5c:7a:0e:e9: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0D:27:E7:2C:12:52:3E:AE:14:B9:9C:69:B1:BE:75:26:1B:28:78 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f8:31:2c:02:22:47:c7:0e:15:f1:bb:27:d7:6a:c8:36:6c: 8e:3f:e6:18:f3:01:e4:03:fb:25:98:0f:c5:23:19:08:78:83: 52:19:b1:fd:a5:9f:4a:48:36:14:7b:f9:7b:f6:2f:7c:60:f1: 9e:4e:07:dc:66:23:2e:7c:d1:35:a2:3e:56:8c:69:6f:3d:e8: 70:a6:de:03:f7:b7:fd:95:c1:4e:e5:47:bd:c7:35:38:97:40: 95:41:59:e8:7f:5d:b0:b3:0f:7c:b5:ac:4a:bc:96:7e:cd:ba: 82:da:ee:24:d1:3f:76:a1:27:a3:2a:3a:6d:12:bb:30:d9:de: 2c:4d:26:c0:d4:09:8d:8d:3b:58:79:d2:5a:2e:61:ad:ec:61: fe:d3:b2:bc:45:a0:c3:36:f0:1e:a2:95:a2:ea:61:e1:51:06: f8:04:42:e5:4f:00:ce:cc:73:99:17:e6:0f:23:ff:69:c7:1d: d4:7c:46:b9:e6:d9:ad:8d:4f:ce:0b:b2:2d:74:68:38:44:6a: 48:3f:07:7c:d4:23:f8:4f:45:51:f8:63:bc:ca:e5:fc:4f:5b: a4:3c:88:60:01:80:48:2e:bb:2a:22:72:5b:f8:f3:e6:9a:d2: 81:e1:95:e9:73:8b:85:5d:0f:a8:9e:e1:0b:69:7d:5f:9f:82: 08:af:e7:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYwOTExMDMxMzI4WhcNMjYwOTE4MDMxMzI4WjAYMRYwFAYD VQQDEw02YWEzNzFkOS01NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+XIVvIiJj16SHxI41SO50v+nRF80XwECl135T4iOcJG/1d8T99AWL6l8Itg NWNy3BNiBui8GIAHUj1TJ5rl8lRVGf1a3ZyUWiFU9hswhdqRwFphMEAMRVPlODcz gVrd3OvKYMMPwD+YHHJ8REkMXrLkUMEf7BV5L2lwCUzR70bwaScgc1Ub8gk2srnU e5V4VQV5c+HtMltt90pdBHUtEGPFqB9k3K65yG4fn+73eVXf5taciw5lrxYl7d18 VNaR6muLUDqIHaxNX19xnj2WtT8ABUYdQnLJlLsg2eN3vbijY54B3NDoChEosdHj m8075j7wI1f0bcQh+Fx6Dun+VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwNJ+cs ElI+rhS5nGmxvnUmGyh4MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaPgxLAIiR8cOFfG7J9dqyDZsjj/mGPMB5AP7JZgPxSMZCHiDUhmx/aWfSkg2 FHv5e/YvfGDxnk4H3GYjLnzRNaI+Voxpbz3ocKbeA/e3/ZXBTuVHvcc1OJdAlUFZ 6H9dsLMPfLWsSryWfs26gtruJNE/dqEnoyo6bRK7MNneLE0mwNQJjY07WHnSWi5h rexh/tOyvEWgwzbwHqKVouph4VEG+ARC5U8AzsxzmRfmDyP/accd1HxGuebZrY1P zguyLXRoOERqSD8HfNQj+E9FUfhjvMrl/E9bpDyIYAGASC67KiJyW/jz5prSgeGV 6XOLhV0PqJ7hC2l9X5+CCK/nbQ== -----END CERTIFICATE-----Generated at Fri Sep 11 14:20:49 2026 by rpki-client