$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: fAoN7+B4m40TC/MtEHn+SfC5y6eZW3JFexOAb0qGxPI= Subject key identifier: 57:ED:D2:D1:82:2B:9C:FD:03:4C:4D:E1:80:A0:37:C6:DF:D3:B7:A5 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: 01A9 Signing time: Mon 21 Sep 2026 04:10:29 +0000 Manifest this update: Mon 21 Sep 2026 04:10:29 +0000 Manifest next update: Mon 28 Sep 2026 04:10:29 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 2VNF0NgcDTreEODlJoTOzXbVkqHeeNHarsXABsk3FVo=) 2: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: RG0OKbgyfMnZsT4Mffpyz2So5ShlFuRTqS038sdC92A=) 3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: wTJyMr91GllJkZWLd+qrpsF1jIX1E/NLLlPclqDy6ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Sep 21 04:10:29 2026 GMT Not After : Sep 28 04:10:29 2026 GMT Subject: CN=6ab0ae35-db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:b1:83:45:76:f2:d6:c0:f1:6d:7a:9f:fa: c7:e9:65:ee:4f:47:34:ef:52:68:a2:ff:f3:ea:73: d5:de:0f:45:9c:c1:b5:25:87:ed:3b:34:73:4d:51: 04:33:3a:31:67:ad:59:d1:79:87:5b:f0:d9:d5:fb: ab:e9:9f:f9:28:9b:dc:cc:59:d2:e5:11:40:69:f8: 56:f8:fb:b2:0b:f4:07:06:fd:5b:c4:76:42:02:e7: 7b:c0:d3:3b:a3:e4:bd:0d:09:3e:dd:08:8a:98:b5: 6a:62:30:a8:4d:8d:f4:81:bf:5d:3f:a9:b0:fe:1f: e8:4c:e5:ac:f6:58:2d:7b:d2:63:74:e9:e9:e0:11: 96:57:7a:01:f3:df:db:7d:e6:19:bb:67:cb:7f:08: 5e:cb:d9:43:38:1c:23:e4:eb:20:35:c8:f7:38:ef: a1:90:f3:8b:42:b5:b1:06:dc:50:18:64:2b:b5:3b: f6:ea:73:e5:13:6f:0c:85:ce:91:35:37:50:32:56: 83:3a:de:59:69:6f:6f:02:4c:ce:74:a8:5e:59:e5: aa:04:e0:19:dd:4c:71:be:a8:72:8d:70:1d:0b:5d: d6:96:5a:95:1e:00:c0:e1:22:ed:1d:57:1d:4d:e2: 73:ce:99:7a:7c:79:e2:74:53:85:8d:39:40:da:bc: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:D2:D1:82:2B:9C:FD:03:4C:4D:E1:80:A0:37:C6:DF:D3:B7:A5 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1d:53:05:d1:bf:0b:07:cb:33:9e:c5:4a:a3:6f:20:50:79: f6:23:24:69:ad:4d:50:81:72:dc:48:c8:99:33:ef:2a:84:63: 53:d3:c5:52:0b:19:b7:8e:cc:7c:26:84:0d:8a:62:87:5b:80: 70:99:d8:78:5d:f2:93:81:22:d7:3b:43:a2:24:be:04:b1:ed: 1b:0d:b4:0d:a3:24:14:eb:a7:89:63:7b:13:b9:b1:db:41:db: 0d:ef:1b:f2:da:b6:ee:d3:84:f9:63:6e:a7:5d:e3:d6:9c:28: 8a:db:6f:51:34:22:7f:c3:29:32:c2:71:0a:55:65:72:e9:25: d2:4f:80:44:3d:6b:e7:40:11:47:54:ef:c7:3b:03:46:f4:36: 81:ce:1c:76:4d:0b:be:c8:31:6a:a5:92:e0:05:ff:6b:4a:3a: eb:d4:78:05:92:24:9a:27:ee:bf:49:b3:e6:a9:10:eb:09:60: 38:90:0f:c2:14:99:3c:d6:e5:84:77:b5:d5:b5:d8:b7:22:ee: 7b:3f:35:73:69:82:e2:14:b0:c0:bb:be:e6:b1:b8:0e:ae:bd: 8c:f0:e0:54:c5:36:15:76:9f:6d:10:03:e7:fc:4e:4a:6f:a2: 28:df:30:68:c3:a4:d4:ba:ee:8b:07:d0:12:3d:a0:f0:78:ed: 19:60:f8:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjYwOTIxMDQxMDI5WhcNMjYwOTI4MDQxMDI5WjAYMRYwFAYD VQQDEw02YWIwYWUzNS1kYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6yxg0V28tbA8W16n/rH6WXuT0c071Joov/z6nPV3g9FnMG1JYftOzRzTVEE MzoxZ61Z0XmHW/DZ1fur6Z/5KJvczFnS5RFAafhW+PuyC/QHBv1bxHZCAud7wNM7 o+S9DQk+3QiKmLVqYjCoTY30gb9dP6mw/h/oTOWs9lgte9JjdOnp4BGWV3oB89/b feYZu2fLfwhey9lDOBwj5OsgNcj3OO+hkPOLQrWxBtxQGGQrtTv26nPlE28Mhc6R NTdQMlaDOt5ZaW9vAkzOdKheWeWqBOAZ3UxxvqhyjXAdC13WllqVHgDA4SLtHVcd TeJzzpl6fHnidFOFjTlA2ryyXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFft0tGC K5z9A0xN4YCgN8bf07elMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGx1TBdG/CwfLM57FSqNvIFB59iMkaa1NUIFy3EjImTPvKoRjU9PFUgsZt47M fCaEDYpih1uAcJnYeF3yk4Ei1ztDoiS+BLHtGw20DaMkFOuniWN7E7mx20HbDe8b 8tq27tOE+WNup13j1pwoittvUTQif8MpMsJxClVlcukl0k+ARD1r50ARR1TvxzsD RvQ2gc4cdk0LvsgxaqWS4AX/a0o669R4BZIkmifuv0mz5qkQ6wlgOJAPwhSZPNbl hHe11bXYtyLuez81c2mC4hSwwLu+5rG4Dq69jPDgVMU2FXafbRAD5/xOSm+iKN8w aMOk1LruiwfQEj2g8HjtGWD4NA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:14:20 2026 by rpki-client