$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: i35sr6xZ0UwcAfeAk09RennAsYqOx5IDqsL6bJYEo24= Subject key identifier: 3B:F3:D8:EF:CD:CA:D0:85:3D:89:4F:E2:08:A1:18:F4:EC:F7:66:BF Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 17D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 17AA Signing time: Sat 26 Sep 2026 16:37:46 +0000 Manifest this update: Sat 26 Sep 2026 16:37:45 +0000 Manifest next update: Sat 03 Oct 2026 16:37:45 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: PLgtREGg6viSbCRSbV057kNshCTS3gx1rDVNBwwVJqk=) 2: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=) 3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM=) 4: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6102 (0x17d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Sep 26 16:37:45 2026 GMT Not After : Oct 3 16:37:45 2026 GMT Subject: CN=6ab7f4da-5072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:78:90:d8:bb:d5:e0:0a:f9:d2:91:ce:70: 91:1b:2e:7d:9d:22:e3:9f:83:8b:cb:50:05:4f:2b: 33:8d:f7:f4:72:58:30:f0:6b:8e:4e:44:bf:05:a4: b5:72:a0:49:34:c5:13:e4:c3:c4:75:be:a3:8c:f0: 9a:72:fc:58:3e:45:4b:e5:e7:6a:06:4e:93:48:59: f1:bf:50:29:e2:b8:0b:e0:c4:d2:88:13:b6:47:6b: 0b:a4:3f:23:fe:77:98:64:91:32:0b:5b:06:f7:f9: 25:6f:1f:3a:b6:22:61:2d:04:d8:a6:eb:bb:f7:81: a8:14:d8:b9:fc:ad:6a:27:6b:0c:2e:3f:47:f9:0d: 5b:3f:dc:1f:4b:bd:0b:15:d2:0d:ee:34:9e:38:29: 67:3e:6b:37:7f:24:e9:35:a1:23:e0:5b:ab:2e:8a: c6:d1:4e:50:bf:92:89:18:b2:69:e7:ab:55:33:b3: b2:26:0d:ca:44:8e:72:8a:ea:0e:8a:15:14:8b:23: 30:2b:44:d1:75:36:4a:4f:61:30:e6:38:e4:0b:6c: a4:50:35:b5:8b:ce:e5:4c:8b:bc:77:24:99:15:fa: fe:e9:52:16:00:ce:d7:8a:54:a8:87:40:60:a7:c1: 6d:8c:a9:d1:2c:a6:86:c7:cb:20:b5:13:39:d5:27: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F3:D8:EF:CD:CA:D0:85:3D:89:4F:E2:08:A1:18:F4:EC:F7:66:BF X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fa:8b:eb:5d:8a:ab:4d:95:49:ce:9f:dd:27:0a:5d:30:a0: 05:6f:94:b7:9c:22:25:dd:ae:bf:12:b9:bf:0b:ab:8d:dd:c6: 67:0a:bd:aa:4e:c6:4f:5c:ca:00:37:49:3d:aa:3e:ee:2d:91: 69:5b:f5:76:dd:dd:b5:87:a3:9f:fe:d8:bd:cb:8a:32:ba:40: 89:9e:88:db:fe:36:73:32:3c:54:21:c0:35:63:a4:04:03:3e: b9:59:13:d2:5a:a9:48:07:25:83:05:af:e3:17:e4:29:be:6b: ca:fb:52:ea:99:d8:0a:5e:24:e4:6e:00:6f:f4:42:62:2f:ed: 9e:3a:c2:a8:d3:42:e3:0a:5a:c9:5b:13:e0:84:df:fe:18:fa: 89:b6:89:2c:55:de:27:fa:b9:1e:87:74:be:17:59:cd:e4:55: 99:c4:1d:35:99:61:da:de:3d:18:9d:58:f2:c3:c5:69:de:5e: 38:54:68:ab:1d:8d:2d:1f:c6:4e:d1:9e:6d:78:4f:98:5b:c2: fb:e3:af:4e:07:c3:7b:a4:1d:dd:72:0f:3f:a8:80:b2:1d:0b: c7:c2:69:5d:c9:d5:dc:c5:5a:c5:74:bf:77:66:d3:cc:9b:b4: 61:af:4a:82:66:dd:3a:58:39:25:76:7c:38:ea:35:bd:5d:e9: 67:a8:66:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjYwOTI2MTYzNzQ1WhcNMjYxMDAzMTYzNzQ1WjAYMRYwFAYD VQQDEw02YWI3ZjRkYS01MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2J4kNi71eAK+dKRznCRGy59nSLjn4OLy1AFTyszjff0clgw8GuOTkS/BaS1 cqBJNMUT5MPEdb6jjPCacvxYPkVL5edqBk6TSFnxv1Ap4rgL4MTSiBO2R2sLpD8j /neYZJEyC1sG9/klbx86tiJhLQTYpuu794GoFNi5/K1qJ2sMLj9H+Q1bP9wfS70L FdIN7jSeOClnPms3fyTpNaEj4FurLorG0U5Qv5KJGLJp56tVM7OyJg3KRI5yiuoO ihUUiyMwK0TRdTZKT2Ew5jjkC2ykUDW1i87lTIu8dySZFfr+6VIWAM7XilSoh0Bg p8FtjKnRLKaGx8sgtRM51SfYcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvz2O/N ytCFPYlP4gihGPTs92a/MB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEvqL612Kq02VSc6f3ScKXTCgBW+Ut5wiJd2uvxK5vwurjd3GZwq9qk7GT1zK ADdJPao+7i2RaVv1dt3dtYejn/7YvcuKMrpAiZ6I2/42czI8VCHANWOkBAM+uVkT 0lqpSAclgwWv4xfkKb5ryvtS6pnYCl4k5G4Ab/RCYi/tnjrCqNNC4wpayVsT4ITf /hj6ibaJLFXeJ/q5Hod0vhdZzeRVmcQdNZlh2t49GJ1Y8sPFad5eOFRoqx2NLR/G TtGebXhPmFvC++OvTgfDe6Qd3XIPP6iAsh0Lx8JpXcnV3MVaxXS/d2bTzJu0Ya9K gmbdOlg5JXZ8OOo1vV3pZ6hmzA== -----END CERTIFICATE-----Generated at Sun Sep 27 00:19:53 2026 by rpki-client