$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: aaNwP2gKQz3YwjinDjWa2PqhtfSOuXkt1lb4qDLkfLI= Subject key identifier: AB:7D:3F:54:9F:9B:EE:E1:9A:B9:70:A8:20:35:FB:AB:B1:43:8B:D0 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0BBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0BA2 Signing time: Sun 20 Sep 2026 19:02:54 +0000 Manifest this update: Sun 20 Sep 2026 19:02:54 +0000 Manifest next update: Sun 27 Sep 2026 19:02:54 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: YNkh0zHDtAhLt1xDDq4xpvYkWJxw9gBcfEGmai7Z2ZM=) 2: C6766086579811EAA245BE5EC4F9AE02.roa (hash: 6McwifOEsChy78SbBd4r2bAdhC4Hhk5/bZNr5Apkj8E=) 3: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: P0XyvHwBGggVbQZbOe1bIJujZu5ouX/vYydjKa177IM=) 4: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: +Jnq3fWUlBiBnB5IyzqavBaEae0mnvwuiwcKw5QbKqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Sep 20 19:02:54 2026 GMT Not After : Sep 27 19:02:54 2026 GMT Subject: CN=6ab02dde-3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0d:05:a6:72:71:6c:06:63:58:4e:f2:da:1a: 6c:cf:fb:5f:1e:33:17:82:1d:1e:ac:b3:ce:32:55: 62:98:20:ff:d1:51:e0:b2:85:08:02:48:a8:cf:e4: 33:21:05:77:ef:88:6d:91:d7:4d:9e:78:68:34:70: e7:54:83:8c:29:5f:5d:e4:54:f6:26:59:00:05:c0: 04:1e:9f:0e:d2:6d:50:9d:4b:e9:2f:26:4b:58:a4: fa:99:ca:e4:7e:0c:34:b3:c8:e1:ee:79:f2:e9:a3: ef:92:1b:25:ce:27:51:c6:ad:93:1f:c0:bf:cb:d8: c3:a1:4d:5a:aa:68:f6:13:0d:82:e9:9a:54:55:49: 3b:d3:07:a6:0d:6e:e9:4a:f6:83:09:3f:50:0c:d8: e7:2f:3e:61:d5:12:4d:3d:69:ae:e1:13:0a:13:6b: eb:f7:08:ac:4a:83:b3:19:62:9f:e3:59:cb:db:8c: 0c:5f:26:c7:26:47:73:61:e2:d7:01:84:dc:ff:6d: 3d:4f:ec:d7:33:53:76:6e:a2:0f:62:f2:72:44:7d: 12:15:64:28:fe:87:29:28:05:18:23:11:70:e5:cc: d6:40:de:40:59:14:f4:ea:0e:7b:24:1c:d9:6a:fc: 05:34:63:5c:f0:87:11:f5:a3:35:d6:06:43:72:2c: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:3F:54:9F:9B:EE:E1:9A:B9:70:A8:20:35:FB:AB:B1:43:8B:D0 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:35:21:2d:11:ea:45:77:da:f3:58:d1:55:e8:eb:f9:6c:55: dc:c6:54:16:99:43:10:a3:83:1c:1b:3c:a2:ab:27:76:6c:3a: 01:53:cc:b3:94:b7:6c:1d:b9:a4:1d:a5:31:4a:50:29:5c:93: 80:23:55:24:9c:74:a4:12:bb:d3:a9:ec:7a:9a:70:1d:b2:00: 04:0e:0f:20:89:b6:90:82:ae:d1:2c:b3:66:9a:2d:db:f5:e1: 8b:c2:e0:a1:bf:f5:d9:c3:b3:2e:f3:08:9e:ee:c6:26:b5:7c: 83:b8:cb:26:69:15:b6:08:2c:f0:9b:77:da:e7:de:b5:33:cf: 97:72:c0:42:34:1e:91:02:c7:ce:9d:89:60:c4:47:81:4b:29: 8b:42:a3:35:4e:a6:0d:0c:8c:24:45:21:a6:ce:c3:ff:6b:e1: ee:ee:4c:17:3f:a7:17:2f:da:c0:f1:84:78:f9:73:bd:43:9b: 93:10:2c:dc:c3:4f:ec:5e:00:06:aa:a5:d0:a7:98:1b:7c:65: b3:d0:d9:17:75:12:6b:c3:57:c4:28:0e:97:ba:00:08:8d:0b: 9d:e3:ba:90:ce:90:fc:17:92:2e:e5:0b:1c:f6:6b:49:45:5a: 3a:d5:09:3a:57:ee:48:32:36:29:98:47:2d:bf:bc:5d:57:3f: 7b:b5:e1:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjYwOTIwMTkwMjU0WhcNMjYwOTI3MTkwMjU0WjAYMRYwFAYD VQQDEw02YWIwMmRkZS0zZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhg0FpnJxbAZjWE7y2hpsz/tfHjMXgh0erLPOMlVimCD/0VHgsoUIAkioz+Qz IQV374htkddNnnhoNHDnVIOMKV9d5FT2JlkABcAEHp8O0m1QnUvpLyZLWKT6mcrk fgw0s8jh7nny6aPvkhslzidRxq2TH8C/y9jDoU1aqmj2Ew2C6ZpUVUk70wemDW7p SvaDCT9QDNjnLz5h1RJNPWmu4RMKE2vr9wisSoOzGWKf41nL24wMXybHJkdzYeLX AYTc/209T+zXM1N2bqIPYvJyRH0SFWQo/ocpKAUYIxFw5czWQN5AWRT06g57JBzZ avwFNGNc8IcR9aM11gZDciyNQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKt9P1Sf m+7hmrlwqCA1+6uxQ4vQMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYTUhLRHqRXfa81jRVejr+WxV3MZUFplDEKODHBs8oqsndmw6AVPMs5S3bB25 pB2lMUpQKVyTgCNVJJx0pBK706nseppwHbIABA4PIIm2kIKu0SyzZpot2/Xhi8Lg ob/12cOzLvMInu7GJrV8g7jLJmkVtggs8Jt32ufetTPPl3LAQjQekQLHzp2JYMRH gUspi0KjNU6mDQyMJEUhps7D/2vh7u5MFz+nFy/awPGEePlzvUObkxAs3MNP7F4A Bqql0KeYG3xls9DZF3USa8NXxCgOl7oACI0LneO6kM6Q/BeSLuULHPZrSUVaOtUJ OlfuSDI2KZhHLb+8XVc/e7XhKg== -----END CERTIFICATE-----Generated at Tue Sep 22 14:48:35 2026 by rpki-client