$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: 9A6+Of6sIZSTxWsm+WuU5ZdzOTrhM490XxO06Zut/hY= Subject key identifier: 22:8B:E2:1B:73:DA:F2:CF:D2:5C:9D:41:9E:4D:A0:1A:17:7F:50:29 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 07DF Signing time: Tue 22 Sep 2026 21:10:30 +0000 Manifest this update: Tue 22 Sep 2026 21:10:29 +0000 Manifest next update: Tue 29 Sep 2026 21:10:29 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: hqEmgoKwnZVqfaJtPwCVzLjZ9yOjNVwniGNgxvAHGyo=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: W8q2ly/PPCr3lwwKvrJUMlu8idGuOCMWK2eAe3nph+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Sep 22 21:10:29 2026 GMT Not After : Sep 29 21:10:29 2026 GMT Subject: CN=6ab2eec6-2d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:4d:60:b5:d7:82:0e:cc:d6:33:33:e8:34: 67:f4:3c:86:b0:ec:b7:c6:34:dd:a9:f6:61:cd:f7: 45:3b:e7:d8:4c:96:ac:88:7e:ac:98:59:e7:a7:8c: aa:78:ac:bf:d9:c0:4f:65:ef:e3:27:7b:c5:d8:c5: df:af:02:d1:89:64:02:fb:d5:1a:26:27:aa:d0:0b: a4:e9:e7:c6:78:1b:06:28:06:5e:be:10:34:45:fc: 72:e6:11:b2:01:d0:de:a8:e4:ee:4b:47:ab:61:65: 5d:ce:4d:c7:fe:d5:02:5b:ab:ca:3d:98:59:5f:8e: b4:0d:dc:73:a6:37:29:4e:f5:2a:a9:8a:7e:8e:a2: 75:f0:ff:8d:ec:be:b2:f4:38:ee:27:27:77:a2:94: b4:a1:8c:0e:91:e0:c9:8f:91:8c:a8:5a:b1:ed:79: 86:cb:ba:e7:6f:03:60:83:c0:44:e9:c2:dd:10:5c: 7e:e9:52:6f:72:29:57:9f:91:32:b9:e0:a6:76:e2: 7c:e6:50:69:aa:cc:03:ad:3d:88:62:09:8d:21:f3: 18:59:71:56:8b:a4:1d:e7:1e:4a:b9:af:a0:48:cc: 84:1e:74:d0:e5:0c:c3:96:5b:d5:01:86:ff:c0:03: 43:91:a8:13:78:ca:26:a4:e6:e8:98:36:fa:62:8b: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:E2:1B:73:DA:F2:CF:D2:5C:9D:41:9E:4D:A0:1A:17:7F:50:29 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:53:95:ae:7b:c9:ec:58:43:0d:47:f0:9d:25:74:7c:d0:52: aa:a5:99:47:72:db:83:bc:fb:5f:1e:0b:e6:3e:88:86:ff:a8: 51:6c:52:6d:ca:93:83:e4:76:48:9f:29:b4:81:01:af:b5:d3: d2:2f:22:34:bc:53:0f:bf:14:db:c6:be:db:1f:3f:57:69:25: 41:34:2c:3c:e7:ae:d4:ef:c1:fa:0c:74:7c:35:72:0e:62:d4: 36:ad:f5:52:f4:26:eb:9e:06:41:47:e5:16:6b:59:79:af:69: 59:dd:f6:4e:2e:a4:d5:48:ff:98:6b:fe:3d:de:d1:21:aa:8e: 9f:e6:8e:48:73:13:ed:c5:fa:68:90:0f:4a:74:c3:85:d6:5b: 82:54:89:bf:ba:5f:2b:43:28:c1:53:07:31:c2:4a:2d:44:ff: 2a:05:49:f5:4d:1e:21:4d:43:d9:ef:7a:2f:15:0a:b5:13:75: 7a:39:4e:29:0c:20:f8:93:ae:27:7f:0b:7b:c2:e8:5b:95:28: 36:65:19:a9:b2:18:6c:b0:67:52:75:ac:c8:63:e1:88:01:7a: b4:ef:ac:d2:92:93:a0:0e:73:f5:e1:ce:00:b2:8a:59:31:8f: f5:b8:20:01:ea:45:8e:25:b7:80:77:5c:58:e2:2d:c8:17:6c: c1:e6:ed:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjYwOTIyMjExMDI5WhcNMjYwOTI5MjExMDI5WjAYMRYwFAYD VQQDEw02YWIyZWVjNi0yZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA269NYLXXgg7M1jMz6DRn9DyGsOy3xjTdqfZhzfdFO+fYTJasiH6smFnnp4yq eKy/2cBPZe/jJ3vF2MXfrwLRiWQC+9UaJieq0Auk6efGeBsGKAZevhA0Rfxy5hGy AdDeqOTuS0erYWVdzk3H/tUCW6vKPZhZX460DdxzpjcpTvUqqYp+jqJ18P+N7L6y 9DjuJyd3opS0oYwOkeDJj5GMqFqx7XmGy7rnbwNgg8BE6cLdEFx+6VJvcilXn5Ey ueCmduJ85lBpqswDrT2IYgmNIfMYWXFWi6Qd5x5Kua+gSMyEHnTQ5QzDllvVAYb/ wANDkagTeMompObomDb6YosIbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKL4htz 2vLP0lydQZ5NoBoXf1ApMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALVOVrnvJ7FhDDUfwnSV0fNBSqqWZR3Lbg7z7Xx4L5j6Ihv+oUWxSbcqTg+R2 SJ8ptIEBr7XT0i8iNLxTD78U28a+2x8/V2klQTQsPOeu1O/B+gx0fDVyDmLUNq31 UvQm654GQUflFmtZea9pWd32Ti6k1Uj/mGv+Pd7RIaqOn+aOSHMT7cX6aJAPSnTD hdZbglSJv7pfK0MowVMHMcJKLUT/KgVJ9U0eIU1D2e96LxUKtRN1ejlOKQwg+JOu J38Le8LoW5UoNmUZqbIYbLBnUnWsyGPhiAF6tO+s0pKToA5z9eHOALKKWTGP9bgg AepFjiW3gHdcWOItyBdswebtTA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:17 2026 by rpki-client