$ rpki-client -vvvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: gBeCcsYIEMP13TM4Nps6xbhpeEf/OF3OZVPYJ+v80bU= Subject key identifier: C9:C9:1E:B5:9F:CB:A1:91:3B:98:4D:66:90:EF:12:39:18:7F:BA:10 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 01F8 Signing time: Fri 25 Sep 2026 03:20:23 +0000 Manifest this update: Fri 25 Sep 2026 03:20:23 +0000 Manifest next update: Fri 02 Oct 2026 03:20:23 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: dA66zTaklLgSlov9cyPojPh0KjLYuHZ6zYUY0oJZgoI=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Sep 25 03:20:23 2026 GMT Not After : Oct 2 03:20:23 2026 GMT Subject: CN=6ab5e877-4dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:61:ce:79:93:13:ed:52:33:6d:0c:41:6a: 6e:f5:ef:10:e5:3e:2d:03:44:3f:b9:98:28:11:87: b3:fa:94:39:02:db:ed:77:0c:ed:09:8f:da:40:43: 64:84:55:c5:16:1a:17:ca:47:2c:93:2e:fa:10:36: ca:0b:8d:c8:c1:41:b9:a9:63:dc:06:f2:a0:11:43: 49:47:10:5f:cf:e3:0a:85:36:df:09:7d:76:8d:48: 60:0d:d5:38:db:dc:b7:e3:94:33:1d:10:a1:aa:f5: 9b:11:d3:39:57:b4:77:1e:9d:b9:8f:07:6a:55:4d: 38:5b:b6:7d:d4:cd:64:bc:bb:d4:5b:1d:ba:e9:4f: c3:17:5b:e5:ec:f9:3e:b3:18:0f:c6:c7:1f:88:e7: 6e:74:12:f8:18:4d:a9:93:40:23:9b:2d:fe:ab:3c: e8:63:09:1e:d9:9a:1c:e7:ee:54:48:7f:a6:e6:71: e1:e1:b0:5b:1f:2b:90:6b:85:f1:7f:c9:b2:23:38: 55:85:bc:65:bd:2d:3a:ca:d9:62:35:7e:cf:e6:ca: 9a:9e:dd:99:f3:6e:81:63:ed:23:c5:73:ee:a8:16: 74:1c:52:9d:15:6c:7e:6f:c2:6c:75:0a:b2:aa:a8: 1a:46:81:0b:d5:49:8d:e7:4f:d9:2a:57:ea:4f:ee: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:1E:B5:9F:CB:A1:91:3B:98:4D:66:90:EF:12:39:18:7F:BA:10 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:cd:95:8c:55:37:93:3c:f3:d8:cb:24:c5:af:b1:3e:3e: f9:92:0a:20:bf:34:01:57:eb:45:d3:ca:13:ba:68:08:4e:e1: 01:fa:9f:5f:30:6a:3f:66:b0:4f:8d:29:93:dc:92:dc:c0:c6: 21:02:89:47:56:53:7b:d4:3b:1a:35:62:fc:57:3a:e3:1d:95: ad:b7:3b:c7:73:7a:e5:84:84:53:84:74:40:da:7b:11:70:01: 5b:1a:5c:58:60:3b:5d:79:62:68:97:e8:03:65:fa:ef:6b:c1: 42:4a:c9:9d:4a:46:a6:ee:38:9a:77:fc:bc:8a:f5:34:b0:5c: a4:b3:1e:30:32:b4:fd:14:f4:c6:e2:e9:9e:ab:73:60:bc:2e: 5c:70:54:24:d8:55:50:53:8c:4d:fb:17:f9:a7:b0:dc:ba:2c: 0d:d7:5b:24:9a:ed:60:06:f1:df:4b:38:55:05:1c:0c:37:91: 43:e5:d6:75:c2:1a:1c:7c:26:16:6f:05:b6:fb:7b:67:e9:c5: 50:a1:f0:4d:12:3a:45:43:79:d6:4f:99:ec:c8:8e:60:65:b5: 76:73:fd:0d:a9:67:0a:9f:09:ab:0d:e4:af:53:18:b6:e7:0d: d5:c9:ca:92:35:1a:98:c2:91:16:51:8b:03:c1:76:fb:49:98: c1:1d:9f:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjYwOTI1MDMyMDIzWhcNMjYxMDAyMDMyMDIzWjAYMRYwFAYD VQQDEw02YWI1ZTg3Ny00ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyZhznmTE+1SM20MQWpu9e8Q5T4tA0Q/uZgoEYez+pQ5AtvtdwztCY/aQENk hFXFFhoXykcsky76EDbKC43IwUG5qWPcBvKgEUNJRxBfz+MKhTbfCX12jUhgDdU4 29y345QzHRChqvWbEdM5V7R3Hp25jwdqVU04W7Z91M1kvLvUWx266U/DF1vl7Pk+ sxgPxscfiOdudBL4GE2pk0Ajmy3+qzzoYwke2Zoc5+5USH+m5nHh4bBbHyuQa4Xx f8myIzhVhbxlvS06ytliNX7P5sqant2Z826BY+0jxXPuqBZ0HFKdFWx+b8JsdQqy qqgaRoEL1UmN50/ZKlfqT+427QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnJHrWf y6GRO5hNZpDvEjkYf7oQMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABIHNlYxVN5M889jLJMWvsT4++ZIKIL80AVfrRdPKE7poCE7hAfqfXzBqP2aw T40pk9yS3MDGIQKJR1ZTe9Q7GjVi/Fc64x2Vrbc7x3N65YSEU4R0QNp7EXABWxpc WGA7XXliaJfoA2X672vBQkrJnUpGpu44mnf8vIr1NLBcpLMeMDK0/RT0xuLpnqtz YLwuXHBUJNhVUFOMTfsX+aew3LosDddbJJrtYAbx30s4VQUcDDeRQ+XWdcIaHHwm Fm8Ftvt7Z+nFUKHwTRI6RUN51k+Z7MiOYGW1dnP9DalnCp8Jqw3kr1MYtucN1cnK kjUamMKRFlGLA8F2+0mYwR2fng== -----END CERTIFICATE-----Generated at Sat Sep 26 05:51:39 2026 by rpki-client