$ rpki-client -vvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft File: JGgod4ICzbuCxWclO6nDnDy51Cs.mft (raw, json) Hash identifier: dm0oB+NbpuyP52Q1W/MmABluJKQeYjdR/I6Yao3lf5U= Subject key identifier: 1C:55:03:5D:92:23:7F:EB:2B:A6:3D:D2:D8:B2:3F:F7:51:B8:1C:E8 Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B Certificate issuer: /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft Manifest number: 1F Signing time: Wed 19 Aug 2026 09:38:45 +0000 Manifest this update: Wed 19 Aug 2026 09:38:44 +0000 Manifest next update: Wed 26 Aug 2026 09:38:44 +0000 Files and hashes: 1: JGgod4ICzbuCxWclO6nDnDy51Cs.crl (hash: m6AX2YYrvZQKHzi7FZLiP7zVihC0E64OVEk8ZvUWhz8=) 2: 0F812C446F9211F1BD55685D6CA30FBC.roa (hash: YwJ14wQPrluxMG8y0+xVPUcy3WYqth03Og/uswEsc3c=) 3: 4D9099E66F9411F18CD406106EA30FBC.roa (hash: AUe4L3FSY7eR7HjxCrv4iq3eH0yBUYRwMyqn5Ail/2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Validity Not Before: Aug 19 09:38:44 2026 GMT Not After : Aug 26 09:38:44 2026 GMT Subject: CN=6a8579a5-e9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:de:c1:29:f6:4b:ea:eb:c8:2e:5c:46:8c: 1e:6e:45:11:2d:37:e9:13:8e:39:de:fe:20:e2:a9: 54:1b:11:60:c1:67:52:f2:82:1c:9b:77:fc:a4:65: a1:66:d8:d3:2e:8e:7c:95:ae:92:cc:37:ff:5c:3e: 32:ad:78:64:02:35:33:1b:c1:7c:1e:fd:2a:a9:a5: f2:5e:b5:11:fb:fa:c0:da:6e:c7:b0:85:23:73:ef: 0f:7e:23:b8:d6:c2:3f:9f:39:66:4a:b2:86:45:2d: 90:49:2b:99:42:13:5d:91:d1:0a:3a:0b:82:96:95: b7:53:aa:4f:35:e6:76:e7:a9:6f:ae:47:33:db:3e: 4c:8a:22:5b:ac:5d:c1:03:98:3e:12:29:a6:84:44: 54:09:47:c0:2c:b5:75:0a:b8:c3:20:60:07:a5:a0: 71:9d:86:c6:25:3b:e6:df:10:48:5f:6f:d6:0b:93: 0e:36:d2:c4:0f:16:d2:c7:8a:e6:90:6f:53:c3:c1: c2:3e:86:b3:cb:8c:b7:12:75:7f:45:7f:86:c7:8d: 8c:c2:f0:12:b2:77:3d:6f:6b:39:e6:5f:29:da:62: e3:17:42:4b:aa:60:56:a6:42:be:09:46:b0:88:ce: f1:e5:f2:aa:3d:97:5e:70:6a:fc:9a:a7:93:e7:c4: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:03:5D:92:23:7F:EB:2B:A6:3D:D2:D8:B2:3F:F7:51:B8:1C:E8 X509v3 Authority Key Identifier: keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ad:d3:67:57:c8:c5:dc:9a:d3:a2:fb:e4:d9:73:46:ca:9b: 87:42:30:e5:a6:0d:d5:dd:0d:6a:38:f3:d7:1a:57:15:53:f0: 00:00:d2:b8:96:49:bf:10:35:2b:92:dd:82:c9:d2:8f:b3:c5: 33:1d:50:3a:60:31:0f:ba:4b:96:8a:ed:77:3c:2b:50:f3:cd: f1:4f:88:e0:5a:8f:30:a2:90:c1:ef:f6:ef:8d:b5:8d:55:11: b8:90:1a:a2:65:63:19:79:e5:d8:96:49:55:a4:a8:56:7a:fd: 53:f7:72:34:3c:95:88:b7:1c:62:cd:a9:d6:dc:9b:42:0f:ab: 2c:49:c5:3e:6c:c8:00:3c:1e:dc:6f:67:02:b8:dd:f6:6f:1c: d9:98:bc:24:0d:ca:fe:43:d1:4d:80:67:24:24:27:7b:d0:de: 3b:c7:50:12:5e:46:ab:80:be:b1:28:de:30:7b:fa:2e:f8:25: 3b:08:18:69:9e:ef:1d:08:5f:c8:52:9c:1a:59:5a:40:ed:88: 8e:bc:6a:a7:2b:34:fe:e7:a5:cd:09:cc:e8:79:54:e8:bb:8c: 9f:8a:83:3f:ac:b5:eb:11:62:88:96:d1:35:de:ea:c3:03:b6: 06:e7:e5:e0:a1:6c:fb:e9:47:e8:6c:af:8b:5c:98:5b:b7:c7: 3c:69:79:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODMyQjExMC8GA1UEBRMoMjQ2ODI4Nzc4MjAyQ0RCQjgyQzU2NzI1M0JBOUMzOUMz Q0I5RDQyQjAeFw0yNjA4MTkwOTM4NDRaFw0yNjA4MjYwOTM4NDRaMBgxFjAUBgNV BAMTDTZhODU3OWE1LWU5YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1kN7BKfZL6uvILlxGjB5uRREtN+kTjjne/iDiqVQbEWDBZ1Lyghybd/ykZaFm 2NMujnyVrpLMN/9cPjKteGQCNTMbwXwe/SqppfJetRH7+sDabsewhSNz7w9+I7jW wj+fOWZKsoZFLZBJK5lCE12R0Qo6C4KWlbdTqk815nbnqW+uRzPbPkyKIlusXcED mD4SKaaERFQJR8AstXUKuMMgYAeloHGdhsYlO+bfEEhfb9YLkw420sQPFtLHiuaQ b1PDwcI+hrPLjLcSdX9Ff4bHjYzC8BKydz1vaznmXynaYuMXQkuqYFamQr4JRrCI zvHl8qo9l15wavyap5PnxORFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHFUDXZIj f+srpj3S2LI/91G4HOgwHwYDVR0jBBgwFoAUJGgod4ICzbuCxWclO6nDnDy51Csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzJCL0RGMTZBMDRDNkY4 RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1Q3hXY2xPNm5EbkR5NTFD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkdnb2Q0SUN6YnVDeFdjbE82bkRuRHk1MUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzJCL0RGMTZBMDRDNkY4RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1 Q3hXY2xPNm5EbkR5NTFDcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdrdNnV8jF3JrTovvk2XNGypuHQjDlpg3V3Q1qOPPXGlcVU/AAANK4lkm/EDUr kt2CydKPs8UzHVA6YDEPukuWiu13PCtQ883xT4jgWo8wopDB7/bvjbWNVRG4kBqi ZWMZeeXYlklVpKhWev1T93I0PJWItxxizanW3JtCD6ssScU+bMgAPB7cb2cCuN32 bxzZmLwkDcr+Q9FNgGckJCd70N47x1ASXkargL6xKN4we/ou+CU7CBhpnu8dCF/I UpwaWVpA7YiOvGqnKzT+56XNCczoeVTou4yfioM/rLXrEWKIltE13urDA7YG5+Xg oWz76UfobK+LXJhbt8c8aXnD -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:34 2026 by rpki-client