$ rpki-client -vvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft File: JGgod4ICzbuCxWclO6nDnDy51Cs.mft (raw, json) Hash identifier: RW5WjmqK8DOmLRP9lLSC0D28oDOOUhH3nEg9eue6luk= Subject key identifier: F0:F4:3D:1D:B1:65:25:C9:26:1D:40:D8:C1:F1:FE:A7:6E:87:B9:75 Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B Certificate issuer: /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft Manifest number: 08 Signing time: Fri 03 Jul 2026 10:06:24 +0000 Manifest this update: Fri 03 Jul 2026 10:06:23 +0000 Manifest next update: Fri 10 Jul 2026 10:06:23 +0000 Files and hashes: 1: JGgod4ICzbuCxWclO6nDnDy51Cs.crl (hash: wfA81rSb+jj5OsXe077w+/RydnGdWu5NSK069xtHmHA=) 2: 4D9099E66F9411F18CD406106EA30FBC.roa (hash: AUe4L3FSY7eR7HjxCrv4iq3eH0yBUYRwMyqn5Ail/2M=) 3: 0F812C446F9211F1BD55685D6CA30FBC.roa (hash: YwJ14wQPrluxMG8y0+xVPUcy3WYqth03Og/uswEsc3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 10:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Validity Not Before: Jul 3 10:06:23 2026 GMT Not After : Jul 10 10:06:23 2026 GMT Subject: CN=6a4789a0-ea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:30:dd:c7:0e:90:2a:79:0e:8d:f1:83:cf: 25:a6:a2:9f:15:8f:1a:03:9d:71:e4:ac:f4:2f:7f: 0c:5b:f5:14:67:ee:86:ec:f4:06:bb:e5:23:2d:a8: 3e:77:a3:9d:5f:e0:02:87:df:ca:c4:43:b9:e3:93: 24:c0:b6:56:3c:14:09:61:7f:71:b5:5a:7f:4e:aa: 0d:b3:68:23:3a:84:ab:bd:57:84:d8:3b:eb:86:50: 7b:da:56:02:a9:b6:8a:c6:5e:5e:19:d1:63:9c:87: 1a:0c:04:81:53:1d:5d:ae:52:84:f8:4c:29:3c:86: 4f:27:77:8b:7e:c1:e6:02:1c:70:b8:38:6e:a3:2d: 0a:ce:1b:84:59:e2:c3:c0:68:d3:6e:52:39:b5:9e: e1:0b:f4:6d:c9:1f:9c:41:0e:b9:10:4b:b7:6e:ff: 03:9d:2f:1e:19:ab:ee:b6:fa:57:a3:70:56:96:63: b3:11:68:29:06:78:d1:67:f7:b7:43:6d:65:b8:a1: 4f:6a:4b:89:a6:5a:90:cf:5b:f2:a5:79:a0:10:22: 8b:51:3d:66:32:77:d0:b5:43:09:75:6a:5a:89:71: ef:17:3b:c5:f8:c9:69:10:32:1e:66:1e:ed:fe:8a: 5c:67:f9:f2:53:d8:cd:c5:de:9a:e1:1c:cc:e4:9a: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F4:3D:1D:B1:65:25:C9:26:1D:40:D8:C1:F1:FE:A7:6E:87:B9:75 X509v3 Authority Key Identifier: keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:b0:8a:a1:ad:d8:1b:0c:ba:97:63:2a:ae:bd:f3:9a:36: bf:ea:eb:76:a8:01:8c:ad:b1:f8:c2:f0:85:11:5c:b4:6d:63: 23:b8:b2:09:fa:58:23:9f:30:b1:b3:4d:c1:1e:f9:0e:f0:c0: b9:a0:c7:ba:ef:99:c8:7f:05:33:cc:a5:a9:49:e9:d3:97:4c: a4:3a:16:ab:f5:18:e1:d4:00:c5:4a:f6:fb:53:58:72:ae:85: 05:19:2b:33:a0:22:87:2d:a8:fd:33:10:27:03:d0:15:fe:a0: d7:49:c4:d9:a9:54:0c:30:e2:a8:e6:6f:91:6b:2d:b7:b6:01: 1b:83:9a:6a:a3:e0:38:6e:49:85:1c:a4:9f:19:eb:77:e5:1e: d5:fa:ba:3d:c4:0a:e4:10:df:96:2c:7c:0c:a2:02:fa:d0:57: 0a:2a:25:cf:f2:98:c6:b0:0e:f7:c9:c6:43:74:92:9d:95:58: af:3a:57:c4:f0:2f:05:2a:f9:87:45:37:89:9a:74:27:8f:f7: d0:5e:62:7b:e7:34:29:3e:91:68:c2:f5:c2:5e:31:23:93:e3: c9:ef:6a:74:ac:69:7f:14:ef:72:32:7b:98:44:07:3b:31:a4: f4:3a:33:5f:eb:c2:0f:18:c4:07:3e:43:ce:79:94:3f:f7:73: d4:a7:c5:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODMyQjExMC8GA1UEBRMoMjQ2ODI4Nzc4MjAyQ0RCQjgyQzU2NzI1M0JBOUMzOUMz Q0I5RDQyQjAeFw0yNjA3MDMxMDA2MjNaFw0yNjA3MTAxMDA2MjNaMBgxFjAUBgNV BAMTDTZhNDc4OWEwLWVhMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/kjDdxw6QKnkOjfGDzyWmop8VjxoDnXHkrPQvfwxb9RRn7obs9Aa75SMtqD53 o51f4AKH38rEQ7njkyTAtlY8FAlhf3G1Wn9Oqg2zaCM6hKu9V4TYO+uGUHvaVgKp torGXl4Z0WOchxoMBIFTHV2uUoT4TCk8hk8nd4t+weYCHHC4OG6jLQrOG4RZ4sPA aNNuUjm1nuEL9G3JH5xBDrkQS7du/wOdLx4Zq+62+lejcFaWY7MRaCkGeNFn97dD bWW4oU9qS4mmWpDPW/KleaAQIotRPWYyd9C1Qwl1alqJce8XO8X4yWkQMh5mHu3+ ilxn+fJT2M3F3prhHMzkmsgzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8PQ9HbFl JckmHUDYwfH+p26HuXUwHwYDVR0jBBgwFoAUJGgod4ICzbuCxWclO6nDnDy51Csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzJCL0RGMTZBMDRDNkY4 RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1Q3hXY2xPNm5EbkR5NTFD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkdnb2Q0SUN6YnVDeFdjbE82bkRuRHk1MUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzJCL0RGMTZBMDRDNkY4RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1 Q3hXY2xPNm5EbkR5NTFDcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANerCKoa3YGwy6l2Mqrr3zmja/6ut2qAGMrbH4wvCFEVy0bWMjuLIJ+lgjnzCx s03BHvkO8MC5oMe675nIfwUzzKWpSenTl0ykOhar9Rjh1ADFSvb7U1hyroUFGSsz oCKHLaj9MxAnA9AV/qDXScTZqVQMMOKo5m+Ray23tgEbg5pqo+A4bkmFHKSfGet3 5R7V+ro9xArkEN+WLHwMogL60FcKKiXP8pjGsA73ycZDdJKdlVivOlfE8C8FKvmH RTeJmnQnj/fQXmJ75zQpPpFowvXCXjEjk+PJ72p0rGl/FO9yMnuYRAc7MaT0OjNf 68IPGMQHPkPOeZQ/93PUp8Xn -----END CERTIFICATE-----Generated at Sun Jul 5 08:35:43 2026 by rpki-client