$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: jbi5Er9ksysV7yJ6pVDtfKlUuGr3ysT3qxAji5z5bFk= Subject key identifier: 2D:E8:71:0C:E6:E9:52:7A:04:0B:2E:3A:F3:15:E0:42:E2:D1:28:FD Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1FFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1FC0 Signing time: Mon 12 Oct 2026 16:01:40 +0000 Manifest this update: Mon 12 Oct 2026 16:01:40 +0000 Manifest next update: Mon 19 Oct 2026 16:01:40 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: nkr4gGwkbahnMSSuinqxpmBUo9dOMTxbs43EwGFaYGg=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=) 3: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=) 4: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=) 5: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=) 6: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=) 7: IdrEhdbdlr4YcET9uFeEbYR_IiA.asa (hash: 6Cd7d2h8RBt0QX+FNb5dxifuxuFtkWPzJHDergP9oc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8187 (0x1ffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Oct 12 16:01:40 2026 GMT Not After : Oct 19 16:01:40 2026 GMT Subject: CN=6acd0464-ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:3b:93:0e:1d:e6:a5:a5:7b:50:c5:80:b0: 6f:ca:2c:17:f6:55:b7:32:0f:9e:04:6d:6d:64:77: 29:71:57:63:37:99:3f:58:e4:31:60:88:c1:91:5d: 09:65:7f:b1:ff:b2:49:fb:04:17:8f:76:2c:c4:83: 19:2d:9b:6d:7e:b4:87:e1:60:27:30:a5:ed:f3:55: 90:19:4b:9b:31:7f:78:63:5c:d1:ab:99:f7:2e:e7: 7d:70:3e:27:9a:d9:b8:33:a4:cf:1a:0c:50:c6:ef: d7:32:07:7c:ff:3b:21:4f:b8:0c:7f:77:5c:19:84: be:fb:16:86:5f:78:03:b9:38:39:65:1f:70:2a:9b: 45:b2:ad:0c:62:ef:5d:bf:29:6a:e1:4b:8c:1d:e8: 66:e5:ef:22:8f:ed:97:7c:bd:71:a8:eb:fb:76:1a: 39:53:c2:6e:fd:ea:5a:43:85:27:8f:fb:e1:76:f8: e3:13:31:ef:0d:a9:7b:74:55:20:10:e5:77:07:c1: 50:92:5d:97:0a:cd:34:66:52:9b:0d:88:93:a0:5b: 17:d1:de:60:44:04:4b:3d:fb:23:53:5a:79:42:05: de:08:18:cc:c9:ef:ef:b7:1b:cf:5e:d9:90:4b:91: aa:5b:92:fe:e0:cd:95:97:30:c7:c6:bf:8c:26:1a: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:71:0C:E6:E9:52:7A:04:0B:2E:3A:F3:15:E0:42:E2:D1:28:FD X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:04:27:74:6b:2c:01:6a:85:58:d4:b1:70:ad:5e:0b:5a: 87:75:4c:81:96:5b:26:71:12:be:3c:d0:3b:ba:bf:d9:4e:0c: ed:10:e0:72:b0:fe:71:6d:31:ae:23:30:38:14:28:bf:7c:fd: b9:20:8e:ca:30:ac:08:bf:b4:a7:95:bf:7e:83:1f:5f:3c:6a: 0c:0f:9e:c8:0e:ea:bc:ec:97:0a:9e:84:66:0b:ae:0b:bd:fd: c8:77:ab:d6:f3:41:e0:b7:59:96:01:42:c4:43:07:42:20:07: 44:14:88:90:d1:61:55:cc:a5:8a:80:0b:46:d6:b4:e1:04:aa: dd:30:99:dd:d2:d5:98:de:28:e4:96:ce:83:c7:1b:21:dd:8e: 2b:49:8a:9b:61:90:bf:75:9e:8b:d7:7a:00:44:4b:9c:0e:99: 2d:0f:1d:aa:58:1d:7b:c5:8d:e8:af:6d:9b:5a:5e:a9:8c:cd: a7:7c:a2:96:8a:3a:f4:c7:85:0f:26:36:d4:2b:4e:3d:3a:62: ec:7c:78:9c:1a:01:8d:eb:13:50:60:f5:9f:67:3b:89:55:1f: 5f:00:b1:8b:79:07:97:89:bd:62:c2:b5:a7:eb:3b:95:ac:22: 5c:8e:c0:97:a6:46:4a:9a:bc:d2:db:1b:63:b5:f8:8b:90:19: 47:47:72:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjYxMDEyMTYwMTQwWhcNMjYxMDE5MTYwMTQwWjAYMRYwFAYD VQQDEw02YWNkMDQ2NC1kZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LQ7kw4d5qWle1DFgLBvyiwX9lW3Mg+eBG1tZHcpcVdjN5k/WOQxYIjBkV0J ZX+x/7JJ+wQXj3YsxIMZLZttfrSH4WAnMKXt81WQGUubMX94Y1zRq5n3Lud9cD4n mtm4M6TPGgxQxu/XMgd8/zshT7gMf3dcGYS++xaGX3gDuTg5ZR9wKptFsq0MYu9d vylq4UuMHehm5e8ij+2XfL1xqOv7dho5U8Ju/epaQ4Unj/vhdvjjEzHvDal7dFUg EOV3B8FQkl2XCs00ZlKbDYiToFsX0d5gRARLPfsjU1p5QgXeCBjMye/vtxvPXtmQ S5GqW5L+4M2VlzDHxr+MJhq5CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3ocQzm 6VJ6BAsuOvMV4ELi0Sj9MB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoEEEJ3RrLAFqhVjUsXCtXgtah3VMgZZbJnESvjzQO7q/2U4M7RDgcrD+cW0x riMwOBQov3z9uSCOyjCsCL+0p5W/foMfXzxqDA+eyA7qvOyXCp6EZguuC739yHer 1vNB4LdZlgFCxEMHQiAHRBSIkNFhVcylioALRta04QSq3TCZ3dLVmN4o5JbOg8cb Id2OK0mKm2GQv3Wei9d6AERLnA6ZLQ8dqlgde8WN6K9tm1peqYzNp3yiloo69MeF DyY21CtOPTpi7Hx4nBoBjesTUGD1n2c7iVUfXwCxi3kHl4m9YsK1p+s7lawiXI7A l6ZGSpq80tsbY7X4i5AZR0dyGQ== -----END CERTIFICATE-----Generated at Tue Oct 13 22:34:38 2026 by rpki-client