$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: CSGmD7ujt7FTdeXSfXlDjb8b+eMr/+187sowJSGaNV0= Subject key identifier: 61:CF:1F:56:82:F0:3C:C7:81:22:E4:8B:7A:41:DF:06:4A:A2:92:40 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 3598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 358B Signing time: Thu 24 Sep 2026 15:05:23 +0000 Manifest this update: Thu 24 Sep 2026 15:05:22 +0000 Manifest next update: Thu 01 Oct 2026 15:05:22 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: C/tM55At+pvGvQHgaD9nqDXOehtXrXALpPlIldrXlm4=) 2: QZtxquwpYDoRbsQozqbgPWRGMhc.asa (hash: oV6xv1MVqgozeeJElPGU8MdoVN6LRwbSdSusktILKpU=) 3: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: rcFyozuFtBU24Fj/puD3Y3gAMLE1tFWBMfsBdsY0Lgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Sep 24 15:05:22 2026 GMT Not After : Oct 1 15:05:22 2026 GMT Subject: CN=6ab53c33-acbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:3a:6d:2f:e0:4e:94:09:6f:73:85:46:8b: d8:9d:0c:c7:04:1e:50:9a:92:be:76:6a:8d:a7:85: 54:72:8d:5b:c8:f3:e4:99:48:4e:2d:ef:b2:65:54: c8:cc:9f:3b:12:00:97:e8:f6:eb:a9:76:3e:3b:f8: be:2a:63:c3:02:b1:87:c9:7c:57:d0:8c:56:b2:a7: c1:fe:36:3c:6a:e8:fa:e4:c0:b0:f8:7d:36:31:e9: ef:f4:b1:b8:b7:9b:fb:bd:2e:bc:84:68:42:f7:36: c1:be:4a:b9:38:57:aa:25:07:cf:3a:08:9e:21:78: 87:93:f9:ee:00:c5:7f:ea:5e:27:04:d5:43:e3:7f: cc:6f:7f:59:bc:67:8b:b4:a6:ea:c7:62:a0:6d:55: c5:fd:d0:91:04:3a:77:fb:02:da:85:4b:4d:90:32: 7d:ad:b2:fd:df:d5:c4:74:e0:3b:aa:a9:12:6b:41: c8:4b:b9:a8:58:86:14:2e:ff:4e:93:43:9c:6a:e7: 56:0e:42:11:90:3f:b6:d2:ae:e3:66:2f:5f:0d:67: d9:06:b7:ac:05:90:2b:a0:80:4e:51:c9:54:c3:c2: 29:92:e7:52:32:01:96:d9:42:b9:af:be:85:87:62: 2d:cf:23:4a:0c:7d:8f:06:eb:8e:9e:6f:86:08:ec: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:1F:56:82:F0:3C:C7:81:22:E4:8B:7A:41:DF:06:4A:A2:92:40 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:93:2f:39:8b:37:ef:ae:00:41:51:f4:e8:02:c9:81:de: fc:84:66:88:46:da:4e:75:14:0e:c6:d5:19:73:27:5f:1f:e6: 02:82:93:71:59:42:af:e1:73:10:f4:67:01:2c:c1:04:7f:24: 64:55:89:ae:1f:b1:2d:20:43:de:a6:d5:67:fd:7c:26:58:db: 1e:72:96:9c:7c:37:03:1b:9a:ef:41:e1:f5:fe:57:d9:c2:6e: 98:5a:1f:e4:0c:03:18:84:b2:f6:43:76:a5:7f:9b:6d:23:c7: ec:e0:62:81:74:08:66:b3:f6:2a:3f:3e:aa:df:39:d1:8c:2a: aa:23:b7:34:03:3b:6f:78:8a:1b:d6:d9:6e:13:f5:b5:b8:a2: ca:ab:75:75:95:d7:e2:0d:c3:e8:62:eb:b4:5b:80:46:e6:ec: 8b:0d:e1:7c:cb:28:e3:48:ae:f9:b9:26:22:cf:44:31:99:73: d6:68:e7:4c:92:83:c0:99:b9:b3:fd:68:23:0d:16:e2:2c:dd: 07:59:ad:f6:de:61:97:16:90:12:ba:2f:92:a9:d0:6e:62:87: f8:1f:62:78:0d:81:d1:4e:0c:7a:c4:38:5f:62:89:81:f9:d7: 52:70:1c:51:9b:88:ec:2f:c4:be:d6:e2:37:6b:e9:93:86:0b: a3:76:33:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjYwOTI0MTUwNTIyWhcNMjYxMDAxMTUwNTIyWjAYMRYwFAYD VQQDEw02YWI1M2MzMy1hY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWs6bS/gTpQJb3OFRovYnQzHBB5QmpK+dmqNp4VUco1byPPkmUhOLe+yZVTI zJ87EgCX6PbrqXY+O/i+KmPDArGHyXxX0IxWsqfB/jY8auj65MCw+H02Menv9LG4 t5v7vS68hGhC9zbBvkq5OFeqJQfPOgieIXiHk/nuAMV/6l4nBNVD43/Mb39ZvGeL tKbqx2KgbVXF/dCRBDp3+wLahUtNkDJ9rbL939XEdOA7qqkSa0HIS7moWIYULv9O k0OcaudWDkIRkD+20q7jZi9fDWfZBresBZAroIBOUclUw8IpkudSMgGW2UK5r76F h2ItzyNKDH2PBuuOnm+GCOzLNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHPH1aC 8DzHgSLki3pB3wZKopJAMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKW6TLzmLN++uAEFR9OgCyYHe/IRmiEbaTnUUDsbVGXMnXx/mAoKTcVlCr+Fz EPRnASzBBH8kZFWJrh+xLSBD3qbVZ/18JljbHnKWnHw3Axua70Hh9f5X2cJumFof 5AwDGISy9kN2pX+bbSPH7OBigXQIZrP2Kj8+qt850YwqqiO3NAM7b3iKG9bZbhP1 tbiiyqt1dZXX4g3D6GLrtFuARubsiw3hfMso40iu+bkmIs9EMZlz1mjnTJKDwJm5 s/1oIw0W4izdB1mt9t5hlxaQErovkqnQbmKH+B9ieA2B0U4MesQ4X2KJgfnXUnAc UZuI7C/EvtbiN2vpk4YLo3Yzyw== -----END CERTIFICATE-----Generated at Fri Sep 25 05:35:21 2026 by rpki-client