$ rpki-client -vvvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft File: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json) Hash identifier: +W1fWr/qIYHFfyaotnr2EEzOpJNWAdF/98BX728ygjI= Subject key identifier: 71:A8:D8:53:D2:FA:31:5A:E1:92:68:2F:0A:4B:56:1E:FC:B8:EA:47 Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft Manifest number: C9 Signing time: Sat 19 Sep 2026 07:03:13 +0000 Manifest this update: Sat 19 Sep 2026 07:03:12 +0000 Manifest next update: Sat 26 Sep 2026 07:03:12 +0000 Files and hashes: 1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: URdd/qKr9atCOjTOcaND8wkCocSJBxds1yH4K1Nyzk8=) 2: 65009C2C081D11F19944049E323D8C67.roa (hash: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=) 3: 14546D12FF3F11F0805DCCBD8DEE528E.roa (hash: Q1csuSiprpfO+YLO7DTZ4z2P7rX3W4WGdzmbPVATNiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Validity Not Before: Sep 19 07:03:12 2026 GMT Not After : Sep 26 07:03:12 2026 GMT Subject: CN=6aae33b1-6f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:c5:a2:d8:f5:2e:1b:b6:f9:73:dc:04:f9: 20:6a:f3:f3:0e:da:59:30:61:bc:9c:a2:c8:34:9c: 96:8f:73:95:cf:3c:ad:7f:6c:34:f2:4e:06:fc:88: dd:02:fc:cd:e9:4e:3f:62:bc:2f:b2:0d:b6:68:88: 8d:fd:4d:5e:22:b0:a0:00:6d:51:46:8c:df:32:c7: 13:30:f7:ce:d3:68:d4:03:6a:f0:6e:2e:c9:e0:e8: 0c:f0:ae:de:ff:81:ff:bd:91:f6:43:ca:cc:d1:d5: 56:14:1e:b6:55:b9:c3:8f:69:6e:c5:d4:58:0e:e0: 74:bb:98:43:b9:59:df:18:71:e4:c4:85:be:23:46: 37:78:b4:d1:c8:48:84:9c:c8:05:f1:78:86:c6:68: 50:2e:1e:4a:a8:82:a5:12:eb:a8:f9:3b:31:33:3a: 26:0c:0a:8a:9b:db:3a:bb:ed:c5:ed:2b:97:73:da: 36:53:28:8d:a8:90:46:43:89:0b:2e:85:d8:18:72: d0:d8:82:96:b0:ad:99:d2:02:3b:bd:b3:b3:7d:0c: 46:d9:d2:e7:2f:27:b4:2e:bc:9f:98:28:2c:40:e0: 16:55:9f:55:2b:4c:ac:43:39:78:b4:85:fb:fe:81: c2:5e:9a:b3:c2:cb:0c:bd:a4:48:40:a3:da:ed:d5: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A8:D8:53:D2:FA:31:5A:E1:92:68:2F:0A:4B:56:1E:FC:B8:EA:47 X509v3 Authority Key Identifier: keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d9:1a:50:bf:cd:45:18:ef:41:fa:10:a4:4c:ae:32:2c:04: 14:e9:7f:f4:79:be:9b:16:7e:a6:83:3c:a8:4b:e9:1d:9c:18: ec:f4:74:ef:12:9c:15:ee:77:c1:0e:25:65:a2:19:6b:c6:4d: fc:bb:4f:53:80:ff:b6:9c:3c:2e:6d:4e:cc:c1:8f:c5:13:e6: af:69:8d:a6:53:da:29:6f:46:1d:f5:3d:1d:df:f6:3c:d7:5b: a7:a2:fd:78:f2:44:18:e5:27:51:b1:df:aa:98:f4:f6:63:8a: 92:27:83:48:d7:0a:a2:63:86:43:d9:f6:7f:60:5f:f9:ff:59: 05:d3:7d:3f:a6:61:fd:d6:06:86:d0:f5:5e:8d:1b:7c:ce:4e: b4:31:4b:5c:80:68:29:46:e7:64:ab:04:80:b4:26:6c:0d:cb: 1a:85:eb:4a:7f:fd:53:ec:c5:9c:b6:c3:d6:49:a2:f1:ba:1a: a8:70:35:fa:78:3b:2d:3d:56:aa:9b:35:17:6a:93:c4:c7:b6: 8b:b3:00:45:72:18:9e:dc:d2:6a:ba:76:c4:46:92:3b:6b:e5: 4c:25:e8:a7:56:d1:d1:8b:06:d5:ae:d1:56:95:b8:7b:13:8c: 73:b9:36:37:0f:c3:aa:6a:69:94:9a:9f:7a:2d:81:ad:c7:8e: 0c:b1:54:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RTcxMTAvBgNVBAUTKDhDNUJDM0RCRUZEN0Q3RTg2NDJBOEY4OTc5RUZCNjcz RjBFMUYzMTcwHhcNMjYwOTE5MDcwMzEyWhcNMjYwOTI2MDcwMzEyWjAYMRYwFAYD VQQDEw02YWFlMzNiMS02Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QDFotj1Lhu2+XPcBPkgavPzDtpZMGG8nKLINJyWj3OVzzytf2w08k4G/Ijd AvzN6U4/Yrwvsg22aIiN/U1eIrCgAG1RRozfMscTMPfO02jUA2rwbi7J4OgM8K7e /4H/vZH2Q8rM0dVWFB62VbnDj2luxdRYDuB0u5hDuVnfGHHkxIW+I0Y3eLTRyEiE nMgF8XiGxmhQLh5KqIKlEuuo+TsxMzomDAqKm9s6u+3F7SuXc9o2UyiNqJBGQ4kL LoXYGHLQ2IKWsK2Z0gI7vbOzfQxG2dLnLye0LryfmCgsQOAWVZ9VK0ysQzl4tIX7 /oHCXpqzwssMvaRIQKPa7dVz/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGo2FPS +jFa4ZJoLwpLVh78uOpHMB8GA1UdIwQYMBaAFIxbw9vv19foZCqPiXnvtnPw4fMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZFNy9BQ0I1Rjc0NjlE RDQxMUYwQTY5RkM2M0ZDNEY5QUUwMi9qRnZEMi1fWDEtaGtLby1KZWUtMmNfRGg4 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGdkQyLV9YMS1oa0tvLUplZS0yY19EaDh4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZFNy9BQ0I1Rjc0NjlERDQxMUYwQTY5RkM2M0ZDNEY5QUUwMi9qRnZEMi1fWDEt aGtLby1KZWUtMmNfRGg4eGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9kaUL/NRRjvQfoQpEyuMiwEFOl/9Hm+mxZ+poM8qEvpHZwY7PR07xKcFe53 wQ4lZaIZa8ZN/LtPU4D/tpw8Lm1OzMGPxRPmr2mNplPaKW9GHfU9Hd/2PNdbp6L9 ePJEGOUnUbHfqpj09mOKkieDSNcKomOGQ9n2f2Bf+f9ZBdN9P6Zh/dYGhtD1Xo0b fM5OtDFLXIBoKUbnZKsEgLQmbA3LGoXrSn/9U+zFnLbD1kmi8boaqHA1+ng7LT1W qps1F2qTxMe2i7MARXIYntzSarp2xEaSO2vlTCXop1bR0YsG1a7RVpW4exOMc7k2 Nw/DqmpplJqfei2BrceODLFUQA== -----END CERTIFICATE-----Generated at Mon Sep 21 08:01:19 2026 by rpki-client