$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: QEQ0a8Un4RQ/c52PJXGe9GmxuHQ49r2tjZULntFB9Ps= Subject key identifier: 54:5D:89:66:D9:64:F8:89:8F:DF:A0:4E:FC:00:73:1E:D0:91:75:C4 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 01EF Signing time: Sun 25 Oct 2026 03:57:06 +0000 Manifest this update: Sun 25 Oct 2026 03:57:06 +0000 Manifest next update: Sun 01 Nov 2026 03:57:06 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: hprlP3jUOezPqcnTjTQhlP0CRvdham3P3nXgvHUwjKE=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: usejeAbfaCrnya4BmIxpNANwrvKrHGDPWrTfazFyZ+A=) 3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: rIc4xpour7cATeZsp1B1Ry8Mz3CLrgcG3IJVLB+LmQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Oct 25 03:57:06 2026 GMT Not After : Nov 1 03:57:06 2026 GMT Subject: CN=6add7e12-2537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:08:99:e4:e8:1d:00:96:b0:e1:23:20:44: 53:fa:8f:e0:f1:d2:a9:bf:d3:e1:e9:c4:cc:d2:da: 5b:7b:7f:23:37:89:8b:2e:f9:13:3e:14:e6:15:58: 08:fd:04:27:44:a5:06:e5:32:04:a6:81:5c:ba:37: a4:28:46:60:81:ea:05:4f:a6:89:e4:97:12:aa:86: 27:7f:1b:53:d3:48:ab:d5:ce:4c:d8:cc:78:95:8b: 91:4f:8c:fa:b7:5f:3c:41:34:e3:af:39:ff:24:10: f8:55:04:ae:ae:df:23:02:38:02:6c:9c:d4:22:0b: 1f:98:aa:5a:76:68:89:5b:55:0e:93:73:fd:7c:91: 99:33:a9:a8:fd:01:d4:f0:48:e8:b7:18:62:21:ef: b4:e7:32:cd:5d:e4:0d:eb:a6:df:d2:44:60:3c:a1: 8f:07:75:a2:f9:ea:c3:a6:4f:dc:a2:73:f6:a0:40: a1:b9:a4:45:88:61:c0:cb:b8:a8:5e:05:51:da:fa: 52:a1:07:c0:a9:9c:e4:f4:bd:88:f2:58:fe:7f:85: b7:2c:5d:5d:21:0e:f2:f0:05:b6:f8:5f:d6:dc:25: 6f:73:0d:fd:e7:57:2d:10:4c:f7:e9:33:99:09:38: 23:d1:30:6a:88:50:d0:c8:e4:a6:7d:b1:d6:17:6b: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5D:89:66:D9:64:F8:89:8F:DF:A0:4E:FC:00:73:1E:D0:91:75:C4 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:90:eb:be:7c:fa:f1:71:a7:aa:04:d7:00:bb:a3:4e:48:73: 17:04:bd:66:28:6e:81:6c:55:d5:db:f7:74:51:7b:8d:2f:c0: 33:2d:31:cf:d3:93:3a:ba:41:c4:9c:d1:29:da:35:eb:47:b4: 50:51:2a:15:c7:b1:a6:9e:cf:ad:81:d7:2c:f7:9f:87:d7:92: 0f:00:5a:66:c7:ee:cb:2f:1b:24:97:c4:af:16:e5:4b:0b:01: 36:fe:ad:06:5a:9c:3d:c0:66:11:3a:44:c1:88:3a:e8:3c:41: 1c:1e:81:64:35:5c:a2:76:2c:85:3e:0c:89:8e:43:16:9f:94: 8c:62:af:86:8f:da:8b:8f:ef:d8:13:79:64:60:75:b0:ab:6f: e9:16:c5:b6:43:6a:2e:e6:28:15:e1:73:18:7c:b7:c5:02:ac: 76:f3:e2:54:63:2c:e3:ce:e0:41:12:d2:c5:0a:64:be:21:4a: 1e:91:b3:f3:49:7b:02:34:95:93:ff:97:5c:b8:7b:5b:d4:bd: 67:21:d0:b7:32:8d:ce:b4:e7:4f:58:ae:7d:eb:37:d3:ce:ab: b9:16:f7:00:b4:a1:b0:05:1e:61:f4:e7:5c:37:b8:33:50:5a: 54:00:55:6e:5a:ad:73:c5:1c:6b:d0:4f:08:46:fe:7a:97:02: 48:8b:b9:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjYxMDI1MDM1NzA2WhcNMjYxMTAxMDM1NzA2WjAYMRYwFAYD VQQDEw02YWRkN2UxMi0yNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqMImeToHQCWsOEjIERT+o/g8dKpv9Ph6cTM0tpbe38jN4mLLvkTPhTmFVgI /QQnRKUG5TIEpoFcujekKEZggeoFT6aJ5JcSqoYnfxtT00ir1c5M2Mx4lYuRT4z6 t188QTTjrzn/JBD4VQSurt8jAjgCbJzUIgsfmKpadmiJW1UOk3P9fJGZM6mo/QHU 8EjotxhiIe+05zLNXeQN66bf0kRgPKGPB3Wi+erDpk/conP2oEChuaRFiGHAy7io XgVR2vpSoQfAqZzk9L2I8lj+f4W3LF1dIQ7y8AW2+F/W3CVvcw3951ctEEz36TOZ CTgj0TBqiFDQyOSmfbHWF2vD3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRdiWbZ ZPiJj9+gTvwAcx7QkXXEMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJDrvnz68XGnqgTXALujTkhzFwS9ZihugWxV1dv3dFF7jS/AMy0xz9OTOrpB xJzRKdo160e0UFEqFcexpp7PrYHXLPefh9eSDwBaZsfuyy8bJJfErxblSwsBNv6t BlqcPcBmETpEwYg66DxBHB6BZDVconYshT4MiY5DFp+UjGKvho/ai4/v2BN5ZGB1 sKtv6RbFtkNqLuYoFeFzGHy3xQKsdvPiVGMs487gQRLSxQpkviFKHpGz80l7AjSV k/+XXLh7W9S9ZyHQtzKNzrTnT1iufes3086ruRb3ALShsAUeYfTnXDe4M1BaVABV blqtc8Uca9BPCEb+epcCSIu5iQ== -----END CERTIFICATE-----Generated at Sun Oct 25 19:45:58 2026 by rpki-client