$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: 4WshB8ZWosO4oQN+Hi/GbEMighVMdjFvHzba/tOQjsk= Subject key identifier: E0:BA:24:C1:40:8E:DD:06:F9:7F:50:F7:FE:5D:48:DC:93:72:19:A7 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 02A5 Signing time: Mon 21 Sep 2026 01:38:31 +0000 Manifest this update: Mon 21 Sep 2026 01:38:30 +0000 Manifest next update: Mon 28 Sep 2026 01:38:30 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: AswKyMUrBmsfI0b1epDOUy7RM+RudStvpvGHdv9BWCg=) 2: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=) 3: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: 9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=) 4: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Sep 21 01:38:30 2026 GMT Not After : Sep 28 01:38:30 2026 GMT Subject: CN=6ab08a96-7723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a8:58:28:90:8f:07:a8:ed:d7:fe:05:61:dc: 13:ce:ed:3b:a7:73:1b:fa:53:be:c4:e5:c0:a8:85: c6:d3:75:91:94:62:53:f8:6b:3c:f6:13:26:36:7c: ed:36:8b:e4:f2:de:c0:86:4d:82:32:ff:5b:9a:2a: 61:c9:d1:e8:94:af:40:73:89:84:6a:3c:18:6a:ad: 9b:ea:77:3c:19:05:f0:dc:63:e0:20:c3:22:25:b1: b8:bd:f7:3a:c5:20:cf:6d:3b:05:d6:e3:d0:e6:d8: cb:7c:7e:a7:18:70:0f:e0:90:d9:c2:34:22:ae:8c: 01:df:46:97:5b:86:09:c2:55:a7:93:19:ee:f7:f2: 8b:92:8b:0c:52:11:97:09:ec:3b:ab:fc:b9:81:9d: 85:8c:e2:65:41:4c:54:ef:9b:d0:e9:a4:41:3b:b2: c1:0f:54:f0:2d:94:03:0f:c6:f9:eb:70:44:57:d6: 40:3b:06:57:f3:0a:23:1d:1d:ec:83:45:c0:71:b0: 77:41:1e:1a:fa:7d:14:6d:f7:46:20:2c:42:e1:d6: 29:1b:b8:f5:b8:0e:f2:0e:42:91:96:93:03:f4:62: a6:af:01:e8:2a:85:92:d3:25:23:2f:d6:bf:40:3f: 3a:c8:d8:32:e7:90:11:69:d3:5f:fe:b2:22:66:16: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:24:C1:40:8E:DD:06:F9:7F:50:F7:FE:5D:48:DC:93:72:19:A7 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:3f:02:33:0d:a9:ab:9f:e0:c3:40:87:dd:69:30:bc:af:f8: a5:c9:ed:fa:83:86:30:fb:1d:fa:a7:b6:7b:45:8b:56:a3:0c: 61:aa:d2:ab:95:ef:21:8d:ff:89:f7:e9:c5:de:d1:69:a4:49: 8c:32:00:40:b5:c0:e9:63:77:9e:d7:44:f2:10:d6:01:dd:be: 49:fe:e0:96:b9:af:b7:95:fa:1c:d9:6a:0d:fc:23:75:51:26: bb:57:a4:09:2b:9b:cb:c5:67:0f:34:83:6f:d5:ca:8b:1b:27: 8e:ae:97:ad:ca:27:f6:eb:3b:a7:be:ff:b1:8e:ec:81:90:b4: e0:6a:96:42:f2:4c:e3:06:68:e1:b1:e1:02:38:ef:f6:05:65: 06:cb:28:de:85:66:bd:18:99:43:aa:58:d1:07:16:69:ac:03: 49:68:8b:a0:ed:75:c4:83:cb:e1:70:48:24:73:82:14:34:fa: 91:6d:94:f0:8d:70:4d:2a:b3:98:3c:52:43:a4:94:a6:2f:f8: 1a:c1:9c:6e:8d:04:cc:97:3f:21:0e:02:80:c2:1d:de:5a:cb: 63:53:9f:2d:5f:a6:ea:4c:0c:07:74:db:1c:34:84:c2:2d:0f: cb:67:16:d8:6b:7a:8f:9c:06:9a:a3:2d:96:35:40:49:eb:89: ea:b3:8b:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwOTIxMDEzODMwWhcNMjYwOTI4MDEzODMwWjAYMRYwFAYD VQQDEw02YWIwOGE5Ni03NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86hYKJCPB6jt1/4FYdwTzu07p3Mb+lO+xOXAqIXG03WRlGJT+Gs89hMmNnzt Novk8t7Ahk2CMv9bmiphydHolK9Ac4mEajwYaq2b6nc8GQXw3GPgIMMiJbG4vfc6 xSDPbTsF1uPQ5tjLfH6nGHAP4JDZwjQirowB30aXW4YJwlWnkxnu9/KLkosMUhGX Cew7q/y5gZ2FjOJlQUxU75vQ6aRBO7LBD1TwLZQDD8b563BEV9ZAOwZX8wojHR3s g0XAcbB3QR4a+n0UbfdGICxC4dYpG7j1uA7yDkKRlpMD9GKmrwHoKoWS0yUjL9a/ QD86yNgy55ARadNf/rIiZhanPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOC6JMFA jt0G+X9Q9/5dSNyTchmnMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVz8CMw2pq5/gw0CH3WkwvK/4pcnt+oOGMPsd+qe2e0WLVqMMYarSq5XvIY3/ iffpxd7RaaRJjDIAQLXA6WN3ntdE8hDWAd2+Sf7glrmvt5X6HNlqDfwjdVEmu1ek CSuby8VnDzSDb9XKixsnjq6Xrcon9us7p77/sY7sgZC04GqWQvJM4wZo4bHhAjjv 9gVlBsso3oVmvRiZQ6pY0QcWaawDSWiLoO11xIPL4XBIJHOCFDT6kW2U8I1wTSqz mDxSQ6SUpi/4GsGcbo0EzJc/IQ4CgMId3lrLY1OfLV+m6kwMB3TbHDSEwi0Py2cW 2Gt6j5wGmqMtljVASeuJ6rOLbQ== -----END CERTIFICATE-----Generated at Tue Sep 22 06:19:13 2026 by rpki-client