$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft File: JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json) Hash identifier: upo5o+IWr/V2UlJHq/1RgxIBdpGA/p306CNRmWVkKaM= Subject key identifier: 2F:D1:00:80:3B:9F:01:CD:A4:5E:3C:39:B8:3C:17:9C:CF:31:88:02 Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Certificate serial: 0DB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft Manifest number: 0D8C Signing time: Tue 28 Jul 2026 18:08:12 +0000 Manifest this update: Tue 28 Jul 2026 18:08:11 +0000 Manifest next update: Tue 04 Aug 2026 18:08:11 +0000 Files and hashes: 1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: +ToI9zLlpaT0vh5N0BSnFo7f54OpcPwueDVyZ5DeyNo=) 2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: 2j8ZEZZDC+v0AsplIrNRFX86JLUI1D1lZouNpF7eL1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Validity Not Before: Jul 28 18:08:11 2026 GMT Not After : Aug 4 18:08:11 2026 GMT Subject: CN=6a68f00c-cfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:53:20:2d:08:79:f8:15:fe:21:4e:0a:b0: f0:91:94:ec:98:ca:c2:cb:71:6e:2b:72:47:cf:48: 12:65:1d:2e:50:fd:72:9b:79:6f:81:d5:8b:5a:ae: 05:6d:20:3a:6e:aa:b9:c0:a2:0b:bc:fd:73:fa:8f: 55:bd:e0:70:4f:2c:a3:d2:98:e3:2c:b8:f7:42:a0: 24:79:58:a2:8d:13:04:05:05:b8:28:9a:92:d2:72: ea:40:6e:59:52:7a:73:4e:7d:47:6c:e2:e7:6e:e4: c7:bc:7d:55:e9:0f:77:e0:0f:50:a2:0e:b3:f9:5f: a1:eb:c1:70:3a:fe:72:b5:b1:f9:1f:e0:fb:66:ce: b8:47:09:27:18:6a:bd:51:52:92:92:c2:48:52:87: 18:68:e2:ce:8e:e0:f9:e3:2d:27:ad:ee:06:3c:a6: 30:2c:18:77:31:3f:8a:e9:cb:e8:07:ed:a6:6a:8d: d5:b9:f9:00:62:5d:b6:b2:f4:c9:a5:5c:f5:33:fb: 69:72:93:ef:09:1a:7c:a0:a5:aa:f4:7c:3e:74:86: e3:87:75:f5:b8:ba:f0:42:14:24:5f:da:b2:49:52: 9f:ff:79:e9:68:7b:57:42:77:81:27:29:73:11:7c: 89:9c:41:ca:81:c1:ee:8c:15:c0:53:50:c9:5e:e5: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:00:80:3B:9F:01:CD:A4:5E:3C:39:B8:3C:17:9C:CF:31:88:02 X509v3 Authority Key Identifier: keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:78:9b:44:88:86:8a:04:4a:87:42:49:70:93:24:60:3d:75: 88:4f:fe:6b:3c:d3:9d:2a:25:09:be:f2:df:a7:4c:56:40:28: 43:93:c9:09:ba:b2:a3:00:68:9c:20:0a:1b:ca:b1:a2:0b:6f: 10:eb:8b:ba:1c:6f:69:e6:a5:82:17:c1:4c:90:a2:b6:fb:bf: 74:e0:04:c8:02:f2:de:90:38:33:2e:6e:df:1a:ba:4c:42:7b: 54:3e:43:1f:10:19:97:f7:92:b2:15:eb:d0:84:97:d3:76:c6: 55:0b:c6:71:3d:21:6b:93:c3:2c:a2:87:a9:4e:05:e9:7c:fe: ad:f8:d0:39:c0:a0:15:6b:7a:8e:96:41:c1:a8:94:cb:ff:80: 55:7d:e9:e8:fe:cf:d8:62:f2:e7:e8:b5:6e:74:aa:98:04:07: 25:74:71:f7:82:05:f9:7a:c9:58:25:fc:3b:29:f4:3a:85:54: b5:47:45:b5:d7:07:04:72:2f:c6:9b:85:fa:6e:d3:d5:8f:8c: 75:14:2a:c5:a2:c0:04:91:97:7f:83:d4:67:8c:84:99:fd:f8: 4b:de:41:1b:3a:a4:ed:af:61:36:0e:c6:3f:ba:6e:b8:e4:4c: 4e:73:a3:ad:1b:5f:fa:ad:c8:9e:28:7f:43:1b:32:94:16:ab: 89:c6:1a:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5MTgxMTAvBgNVBAUTKDI1MDM3NzVGQUMzQTZGNDcyMzRDQjgzMkE2MzdGQzEw ODJBNDdDNDQwHhcNMjYwNzI4MTgwODExWhcNMjYwODA0MTgwODExWjAYMRYwFAYD VQQDEw02YTY4ZjAwYy1jZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo1TIC0IefgV/iFOCrDwkZTsmMrCy3FuK3JHz0gSZR0uUP1ym3lvgdWLWq4F bSA6bqq5wKILvP1z+o9VveBwTyyj0pjjLLj3QqAkeViijRMEBQW4KJqS0nLqQG5Z UnpzTn1HbOLnbuTHvH1V6Q934A9Qog6z+V+h68FwOv5ytbH5H+D7Zs64RwknGGq9 UVKSksJIUocYaOLOjuD54y0nre4GPKYwLBh3MT+K6cvoB+2mao3VufkAYl22svTJ pVz1M/tpcpPvCRp8oKWq9Hw+dIbjh3X1uLrwQhQkX9qySVKf/3npaHtXQneBJylz EXyJnEHKgcHujBXAU1DJXuVcPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/RAIA7 nwHNpF48Obg8F5zPMYgCMB8GA1UdIwQYMBaAFCUDd1+sOm9HI0y4MqY3/BCCpHxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODkxOC9FOThGREZENEY2 NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIwY2pUTGd5cGpmOEVJS2tm RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRTjNYNnc2YjBjalRMZ3lwamY4RUlLa2ZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODkxOC9FOThGREZENEY2NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIw Y2pUTGd5cGpmOEVJS2tmRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG3ibRIiGigRKh0JJcJMkYD11iE/+azzTnSolCb7y36dMVkAoQ5PJCbqyowBo nCAKG8qxogtvEOuLuhxvaealghfBTJCitvu/dOAEyALy3pA4My5u3xq6TEJ7VD5D HxAZl/eSshXr0ISX03bGVQvGcT0ha5PDLKKHqU4F6Xz+rfjQOcCgFWt6jpZBwaiU y/+AVX3p6P7P2GLy5+i1bnSqmAQHJXRx94IF+XrJWCX8Oyn0OoVUtUdFtdcHBHIv xpuF+m7T1Y+MdRQqxaLABJGXf4PUZ4yEmf34S95BGzqk7a9hNg7GP7puuORMTnOj rRtf+q3Inih/QxsylBaricYahg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:45:01 2026 by rpki-client