$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: jvPAOwmAJWLYCgX/1sdq3lJQpKEDntpAzP80wwBCgcw= Subject key identifier: 5D:AA:39:34:6A:C2:24:A1:C7:CF:33:3C:9B:B2:DE:F9:10:6F:92:C2 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 037E Signing time: Tue 27 Oct 2026 00:40:59 +0000 Manifest this update: Tue 27 Oct 2026 00:40:58 +0000 Manifest next update: Tue 03 Nov 2026 00:40:58 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: o0KexH2aqzMrBXMZGy3ZSs7EAGk1L6zQEGHR5qvsIkQ=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: knDy628uBHc0xyl65AH5Q4Dg6SIjdEf/qj441Xa26zI=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: Y517FjnOIlJoEuMsljxEPUYQv1AnUzE1TBfadkK2NDY=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: 3tR98Qpp+cElPjcCs79m4oSOnnMvkWLHmAoCd/9m2C8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Oct 27 00:40:58 2026 GMT Not After : Nov 3 00:40:58 2026 GMT Subject: CN=6adff31b-57ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:c9:15:24:9a:c4:76:c9:6a:27:55:87:04: 51:32:a3:57:b8:cc:0f:58:58:e8:ca:48:ef:3e:20: ad:05:d0:dd:75:f5:45:ec:bb:d3:a7:b7:92:9f:fd: b2:7e:8d:79:26:21:4f:e2:92:4b:82:ee:1d:ca:da: ca:84:32:59:7a:d0:b9:44:56:72:0e:f9:39:cf:ba: dc:22:fb:50:28:88:fa:51:8b:ce:38:2c:31:b0:05: 82:a1:f2:70:b3:ba:28:fb:9c:1a:a8:48:58:ec:59: 29:63:91:37:5a:56:f1:2b:8f:0d:19:ab:a4:26:2c: bb:bd:a6:68:e3:f0:9c:ee:8a:75:00:e0:22:79:2b: d7:23:4d:28:00:73:9b:48:fe:3c:5a:a3:94:26:e9: 68:f9:30:07:83:3c:20:59:66:72:3a:00:b2:b9:54: 60:ee:13:9a:e3:0e:63:e3:da:a1:e7:34:94:74:3d: 66:e9:42:f9:9d:d3:8e:5b:3b:3f:00:b3:c6:70:3c: bd:fa:01:fd:44:08:c6:22:22:e0:e1:8a:e8:3d:9c: b0:d2:78:9d:3f:bc:2b:4b:68:a2:75:f9:0a:77:31: be:c2:e8:88:48:b8:c0:95:77:45:8a:62:e5:68:0d: f8:f8:17:f9:e6:7a:69:39:55:3e:86:fa:d4:59:c0: 3e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AA:39:34:6A:C2:24:A1:C7:CF:33:3C:9B:B2:DE:F9:10:6F:92:C2 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:29:a1:f0:3f:4d:ff:ac:98:ae:50:1c:74:c4:fd:4d:81:76: db:74:c1:2c:12:95:72:9c:19:f4:22:65:66:5e:ea:a6:9e:6b: bb:0b:5d:55:fb:e7:72:5e:e8:29:39:6c:a7:15:8e:1e:65:69: 51:6f:35:b8:de:e3:0a:91:97:5d:80:ee:b1:33:19:95:74:27: 17:5a:39:7f:78:29:af:af:63:e2:92:35:71:97:73:aa:ab:cb: 0d:91:5b:1c:ac:dc:57:0c:c1:41:74:31:e6:51:19:e0:04:99: 6d:48:4d:83:a7:e2:f9:2a:b5:bf:aa:f8:3b:1d:b2:d0:e4:c4: 87:02:2a:1e:57:5f:49:fe:a5:c6:01:5a:11:8a:8a:2a:ab:fd: d2:51:2d:4e:63:05:ae:fb:37:97:c1:2d:07:e0:d2:4e:67:e2: e7:e7:df:cd:8d:ce:6e:4c:19:80:59:1e:ed:cb:88:01:19:1e: ed:d6:f8:a4:47:cc:7c:08:ca:e5:42:f4:3c:17:1d:3f:e3:9e: 62:d1:4c:a0:e3:9f:75:f0:2b:95:e9:1b:c1:97:a3:b6:c3:a8: 30:61:cb:0c:e3:8d:76:05:eb:90:b7:c3:a5:47:3c:63:df:03: a0:c2:b2:a2:d0:8c:9d:7c:b7:47:54:45:90:a8:9c:e3:c0:c8: be:70:68:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYxMDI3MDA0MDU4WhcNMjYxMTAzMDA0MDU4WjAYMRYwFAYD VQQDEw02YWRmZjMxYi01N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28vJFSSaxHbJaidVhwRRMqNXuMwPWFjoykjvPiCtBdDddfVF7LvTp7eSn/2y fo15JiFP4pJLgu4dytrKhDJZetC5RFZyDvk5z7rcIvtQKIj6UYvOOCwxsAWCofJw s7oo+5waqEhY7FkpY5E3WlbxK48NGaukJiy7vaZo4/Cc7op1AOAieSvXI00oAHOb SP48WqOUJulo+TAHgzwgWWZyOgCyuVRg7hOa4w5j49qh5zSUdD1m6UL5ndOOWzs/ ALPGcDy9+gH9RAjGIiLg4YroPZyw0nidP7wrS2iidfkKdzG+wuiISLjAlXdFimLl aA34+Bf55nppOVU+hvrUWcA+8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2qOTRq wiShx88zPJuy3vkQb5LCMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCmh8D9N/6yYrlAcdMT9TYF223TBLBKVcpwZ9CJlZl7qpp5ruwtdVfvncl7o KTlspxWOHmVpUW81uN7jCpGXXYDusTMZlXQnF1o5f3gpr69j4pI1cZdzqqvLDZFb HKzcVwzBQXQx5lEZ4ASZbUhNg6fi+Sq1v6r4Ox2y0OTEhwIqHldfSf6lxgFaEYqK Kqv90lEtTmMFrvs3l8EtB+DSTmfi5+ffzY3ObkwZgFke7cuIARke7db4pEfMfAjK 5UL0PBcdP+OeYtFMoOOfdfArlekbwZejtsOoMGHLDOONdgXrkLfDpUc8Y98DoMKy otCMnXy3R1RFkKic48DIvnBoBw== -----END CERTIFICATE-----Generated at Tue Oct 27 08:53:35 2026 by rpki-client