$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: PfyJEfeEWMFGA2KMCSKQ4JHlcmMqmPwNmAHd4oCgshM= Subject key identifier: 0A:F2:3F:4B:AD:39:33:FF:EB:8D:41:61:B2:80:FF:08:60:10:6F:96 Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 96 Signing time: Fri 09 Oct 2026 08:08:56 +0000 Manifest this update: Fri 09 Oct 2026 08:08:55 +0000 Manifest next update: Fri 16 Oct 2026 08:08:55 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: NX1+5+cFiuFVjbG+QhgvN2ChZhYjez8Nql7FkrwzYjM=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Oct 9 08:08:55 2026 GMT Not After : Oct 16 08:08:55 2026 GMT Subject: CN=6ac8a118-5ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:eb:9b:98:a7:3f:dc:f9:6b:04:fe:22:43: 87:23:79:f6:d9:00:cf:f2:d5:91:8a:23:4a:8a:ba: be:ba:80:8c:5b:4e:22:88:4e:98:d3:ec:f3:3a:87: 57:08:11:a6:f7:63:0c:1e:c4:ba:7d:60:f1:16:f7: 60:92:36:9d:c2:cf:f2:3f:80:83:2e:35:c1:af:e6: e4:23:68:ee:80:26:21:53:46:45:76:4c:a3:dd:3e: 6f:b3:5b:fd:1b:9d:46:9b:e6:19:68:15:d1:49:d5: 7c:4a:b8:94:f2:c2:40:af:db:1a:f4:de:52:6e:c4: f8:65:37:60:ed:64:45:7b:a7:81:76:b0:e7:63:b5: a0:13:d0:30:50:05:8a:da:05:ec:d1:82:69:63:90: 67:50:4b:16:7d:7f:58:99:6c:8a:d3:40:b4:9f:1b: 9b:9b:a6:e4:9e:08:30:11:f2:0a:58:df:95:d3:a4: ce:e3:07:a8:2f:d4:12:5f:0a:d3:cc:62:34:90:0e: 44:83:53:20:e5:f7:14:28:5a:c8:05:61:0c:21:cb: 6e:59:e5:f2:f7:28:2c:e3:9a:1b:83:82:d2:8d:56: d9:f7:fb:60:e9:eb:e5:98:99:25:fd:4b:26:75:5e: 00:c9:90:09:3e:d9:c8:76:af:35:c6:b7:f4:b6:24: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:3F:4B:AD:39:33:FF:EB:8D:41:61:B2:80:FF:08:60:10:6F:96 X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:94:02:bb:f8:92:f1:3e:ef:d8:0a:84:0c:b6:e0:ce:b1: 90:5c:f0:51:4e:f6:dd:68:5f:a2:4e:0d:93:df:65:26:51:96: df:ef:69:d3:96:2b:a7:56:66:d7:16:c0:82:25:c5:96:89:aa: e5:9f:fa:96:02:7d:83:d7:dc:1e:5e:14:d4:28:77:80:c7:a9: c6:78:47:4c:d6:73:d3:01:23:d6:94:04:a9:23:ee:72:f0:cd: 2a:e6:ba:0a:50:1e:da:28:8e:48:64:9b:0f:c9:a4:19:bb:91: f1:74:a9:fc:2e:da:e9:2d:10:31:03:1d:14:16:3b:4b:1e:fa: 65:75:46:99:db:ae:f2:ba:cf:88:ed:32:2f:6a:86:c9:c0:30: b5:02:d7:23:02:00:f1:be:4c:d9:0c:a6:c1:ff:9b:a8:51:b2: fd:16:24:03:50:13:d7:e6:d7:c3:dd:3e:fa:a4:0d:b3:70:41: 23:c8:6b:25:1d:b8:c4:4c:17:30:17:98:91:41:3b:36:f1:c4: 64:c7:f5:a4:36:91:bc:a4:ca:9d:9a:dd:7c:3c:e0:e6:6d:82: 9c:b6:06:0a:a5:8f:8d:26:31:3d:d3:32:4b:60:37:15:c2:02: 56:e8:0d:79:6a:c1:52:c8:18:a1:e2:53:f5:dd:d4:f5:9f:9c: 04:20:5d:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlGQkIxMTAvBgNVBAUTKDI0RTQ1QTQ2NzA4NjVFRDFDNTExREQyMjJENTE4NUJG QTY3MjA4NUUwHhcNMjYxMDA5MDgwODU1WhcNMjYxMDE2MDgwODU1WjAYMRYwFAYD VQQDEw02YWM4YTExOC01YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKvrm5inP9z5awT+IkOHI3n22QDP8tWRiiNKirq+uoCMW04iiE6Y0+zzOodX CBGm92MMHsS6fWDxFvdgkjadws/yP4CDLjXBr+bkI2jugCYhU0ZFdkyj3T5vs1v9 G51Gm+YZaBXRSdV8SriU8sJAr9sa9N5SbsT4ZTdg7WRFe6eBdrDnY7WgE9AwUAWK 2gXs0YJpY5BnUEsWfX9YmWyK00C0nxubm6bknggwEfIKWN+V06TO4weoL9QSXwrT zGI0kA5Eg1Mg5fcUKFrIBWEMIctuWeXy9ygs45obg4LSjVbZ9/tg6evlmJkl/Usm dV4AyZAJPtnIdq81xrf0tiSNQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAryP0ut OTP/641BYbKA/whgEG+WMB8GA1UdIwQYMBaAFCTkWkZwhl7RxRHdIi1Rhb+mcghe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUZCQi9CQTlBOUU2OEU0 MDQxMUYwQTY2MTlDNjA2MTZGNTZCQy9KT1JhUm5DR1h0SEZFZDBpTFZHRnY2WnlD RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUZCQi9CQTlBOUU2OEU0MDQxMUYwQTY2MTlDNjA2MTZGNTZCQy9KT1JhUm5DR1h0 SEZFZDBpTFZHRnY2WnlDRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/+UArv4kvE+79gKhAy24M6xkFzwUU723Whfok4Nk99lJlGW3+9p05Yrp1Zm 1xbAgiXFlomq5Z/6lgJ9g9fcHl4U1Ch3gMepxnhHTNZz0wEj1pQEqSPucvDNKua6 ClAe2iiOSGSbD8mkGbuR8XSp/C7a6S0QMQMdFBY7Sx76ZXVGmduu8rrPiO0yL2qG ycAwtQLXIwIA8b5M2Qymwf+bqFGy/RYkA1AT1+bXw90++qQNs3BBI8hrJR24xEwX MBeYkUE7NvHEZMf1pDaRvKTKnZrdfDzg5m2CnLYGCqWPjSYxPdMyS2A3FcICVugN eWrBUsgYoeJT9d3U9Z+cBCBd5g== -----END CERTIFICATE-----Generated at Sat Oct 10 16:54:40 2026 by rpki-client