$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: 1hGmONiH7k3nc+XFTU9nPrOy7e351sYz1gaxYV1Qy+c= Subject key identifier: F8:E5:B2:E9:68:A8:B5:A3:F4:2B:BA:17:83:71:8B:19:B3:7C:A3:10 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A43 Signing time: Fri 04 Sep 2026 19:36:23 +0000 Manifest this update: Fri 04 Sep 2026 19:36:23 +0000 Manifest next update: Fri 11 Sep 2026 19:36:23 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: S/VYp/2l+1K7T4TctodmUUaDPWgSepF5b/eN+xBY6zA=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Sep 4 19:36:23 2026 GMT Not After : Sep 11 19:36:23 2026 GMT Subject: CN=6a9b1db7-2d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:8d:24:2d:7b:2a:db:7a:9a:55:70:7f:91: 16:03:2f:e0:47:b5:62:15:da:9c:df:bf:22:b6:64: 14:85:46:3c:72:9d:5c:1f:52:7a:8d:af:51:05:cb: 80:16:ec:8d:6e:17:ea:19:8e:ba:4a:1e:6d:b5:fe: 92:b2:fb:23:62:85:c7:78:40:eb:b6:9f:95:ce:8b: 7a:26:58:c9:0c:a2:c1:3d:bb:15:aa:42:e5:00:1e: 62:77:24:d8:1d:b2:f9:8a:a1:8e:d2:27:56:a9:90: fa:e4:27:f5:26:7f:8e:1a:0c:17:e9:af:b8:35:5b: 3a:0b:f1:93:de:44:ab:56:5b:32:bf:23:1b:97:2b: bd:da:61:5c:e8:5e:0f:ac:e5:2d:d9:10:70:55:e5: af:4d:38:ad:f4:c3:7e:fc:b1:db:3f:9a:6d:c8:53: dd:7e:80:1e:cf:48:07:80:93:56:e1:1e:bb:d1:ec: 7a:5b:37:e1:ef:3f:0d:f7:e3:68:b6:2b:8d:a1:63: b2:ff:d5:00:59:6b:3e:41:15:65:67:c9:b0:18:48: 45:ac:59:eb:10:f7:0f:01:47:1d:63:e5:8c:9b:84: 8a:f4:05:ca:65:2f:45:0a:cd:c1:66:37:f1:f9:00: a4:d7:25:5c:fa:3c:c7:9c:a3:20:ac:cb:e0:78:37: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E5:B2:E9:68:A8:B5:A3:F4:2B:BA:17:83:71:8B:19:B3:7C:A3:10 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:2e:de:63:bc:f3:cc:60:df:7d:3c:86:fa:26:86:36:41:70: 69:0c:4f:73:6b:47:be:b1:1f:6d:70:bb:3e:50:0c:9b:a3:91: 7f:0d:e0:2f:dc:d3:3f:af:63:80:10:ba:dc:03:8f:be:c9:f0: 54:99:2e:b9:7b:23:77:12:ab:c5:ff:da:03:7c:fe:5d:0e:8c: 07:b6:dc:9c:55:16:58:36:41:81:3a:df:22:af:98:58:7b:3b: dc:f4:55:f4:9a:fd:d2:98:a4:4d:26:7d:71:8a:eb:35:f6:ff: 11:f5:29:5c:12:20:b2:e0:84:cd:23:62:c8:50:fd:cf:c0:c4: e3:58:7c:91:ed:d1:23:ce:66:8f:2d:b4:24:2b:74:27:22:c2: 9c:10:13:3e:3f:b4:0f:5b:6d:4f:5e:6b:87:83:bc:ba:4a:b7: 60:e2:cb:15:0a:12:7d:57:a6:0c:9e:9c:11:7a:c1:97:d3:b6: bc:b6:96:b9:15:5d:26:51:ca:fc:3a:dd:9f:21:3a:58:a0:67: ca:32:64:c5:bf:52:1a:f3:05:32:e1:77:d3:3e:9c:92:99:cf: 4e:e4:48:b2:f9:65:bd:49:1b:a1:61:3c:b5:5a:89:56:3d:b4: 89:6b:2c:98:b3:b2:18:de:a3:31:f1:54:a8:01:e0:aa:d7:c9: a6:59:bb:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwOTA0MTkzNjIzWhcNMjYwOTExMTkzNjIzWjAYMRYwFAYD VQQDEw02YTliMWRiNy0yZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQCNJC17Ktt6mlVwf5EWAy/gR7ViFdqc378itmQUhUY8cp1cH1J6ja9RBcuA FuyNbhfqGY66Sh5ttf6SsvsjYoXHeEDrtp+Vzot6JljJDKLBPbsVqkLlAB5idyTY HbL5iqGO0idWqZD65Cf1Jn+OGgwX6a+4NVs6C/GT3kSrVlsyvyMblyu92mFc6F4P rOUt2RBwVeWvTTit9MN+/LHbP5ptyFPdfoAez0gHgJNW4R670ex6Wzfh7z8N9+No tiuNoWOy/9UAWWs+QRVlZ8mwGEhFrFnrEPcPAUcdY+WMm4SK9AXKZS9FCs3BZjfx +QCk1yVc+jzHnKMgrMvgeDejYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjlsulo qLWj9Cu6F4NxixmzfKMQMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxS7eY7zzzGDffTyG+iaGNkFwaQxPc2tHvrEfbXC7PlAMm6ORfw3gL9zTP69j gBC63AOPvsnwVJkuuXsjdxKrxf/aA3z+XQ6MB7bcnFUWWDZBgTrfIq+YWHs73PRV 9Jr90pikTSZ9cYrrNfb/EfUpXBIgsuCEzSNiyFD9z8DE41h8ke3RI85mjy20JCt0 JyLCnBATPj+0D1ttT15rh4O8ukq3YOLLFQoSfVemDJ6cEXrBl9O2vLaWuRVdJlHK /DrdnyE6WKBnyjJkxb9SGvMFMuF30z6ckpnPTuRIsvllvUkboWE8tVqJVj20iWss mLOyGN6jMfFUqAHgqtfJplm7WA== -----END CERTIFICATE-----Generated at Sat Sep 5 11:45:19 2026 by rpki-client