$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: HsBcxJHqZepPVoBDiD6IgStx+JeGQxtdWMARfKgZbns= Subject key identifier: D0:E7:F2:36:FE:89:01:1F:5F:3B:35:AA:56:4F:37:12:66:7E:77:F0 Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 0134 Signing time: Mon 21 Sep 2026 05:37:00 +0000 Manifest this update: Mon 21 Sep 2026 05:36:59 +0000 Manifest next update: Mon 28 Sep 2026 05:36:59 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: 4AjseIH0P0SyU5x/L2TFiB0gClqTcAreb2CT+PisATM=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: YSAtC4mM5C5YSv0R5qArB4QbvJChkBFXu1mmC23m0YM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Sep 21 05:36:59 2026 GMT Not After : Sep 28 05:36:59 2026 GMT Subject: CN=6ab0c27c-d561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:f6:f6:f4:a4:4c:08:2e:fe:c8:fa:07:71: 7e:c0:e0:6c:ac:7c:bd:40:d3:3b:2e:c1:95:26:a0: c3:b2:1a:9f:f6:a4:58:02:38:f1:26:cc:f7:96:5f: a7:c1:bf:e5:9b:89:99:01:3f:56:e8:0d:62:37:20: 6e:c5:8d:74:74:47:b5:35:09:d4:1d:3d:4b:78:7d: 55:5c:df:d7:bc:5c:22:22:9f:7d:ae:d0:dd:b0:c2: 3e:8b:a4:7c:2f:75:fc:3b:0b:ad:5c:9f:08:20:a6: 27:61:05:76:15:54:b2:02:45:55:f0:fc:09:9a:a3: c3:85:31:d6:a3:da:fd:5b:7a:53:26:65:a8:79:d3: c0:17:ee:a5:44:8d:dc:26:07:f1:85:80:dd:11:35: 40:5d:42:44:1d:2b:71:b3:d5:23:41:d9:41:7d:f3: 61:1b:5f:a3:fd:83:56:a1:44:d2:3d:23:b0:4c:b4: 5a:02:8c:de:17:d2:59:78:ca:45:5b:61:37:21:e0: 58:1a:ad:b6:5e:0e:41:28:81:68:0c:ae:d4:2b:c5: 85:2a:a1:a2:d5:f1:e2:1a:5a:00:59:e4:9a:bb:17: 5e:e9:d6:0d:8b:c6:e7:78:17:4a:56:bf:6f:9b:aa: 8e:42:25:2f:74:82:0f:f1:ab:d9:60:67:69:1b:33: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:F2:36:FE:89:01:1F:5F:3B:35:AA:56:4F:37:12:66:7E:77:F0 X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:03:49:05:23:eb:ac:b5:48:d6:3a:7e:cc:55:be:69:fa: 09:74:aa:17:d7:a2:8e:9b:0c:42:c7:98:56:9c:ef:00:7e:61: 20:f8:28:e8:24:f4:9d:10:f6:29:a1:72:97:b7:dd:77:bb:ac: 3d:be:f9:59:a6:36:ac:6e:fe:c1:11:47:98:80:2a:b2:d0:43: 35:44:1a:c8:0d:c8:00:2f:49:e5:bd:99:f5:8d:0a:86:85:54: 93:d0:b5:a0:0f:83:fa:3d:bf:44:db:93:8b:27:53:be:b6:85: ae:30:e2:fa:20:d7:1f:1d:93:14:db:5a:22:b9:cd:6c:20:99: 86:09:2b:4f:67:56:81:1b:88:9d:57:ec:d3:ad:a4:cd:6f:72: 03:13:44:8e:c3:8b:fc:bd:c6:55:f7:b9:f9:4a:c7:33:75:26: 99:3b:40:d1:a2:58:3a:2c:3b:73:21:db:82:d2:0e:77:74:05: 73:86:72:e0:47:65:e9:9c:be:61:38:f0:db:6c:9a:e4:8d:d8: e0:a1:57:90:1b:e8:db:84:e0:b3:1c:c6:0f:2d:a4:a5:b4:ce: 33:b4:cf:85:bf:66:83:3f:b4:87:9a:19:22:89:45:0b:fb:18: d9:4a:03:41:77:ea:c5:7b:21:5a:e5:7b:c7:ca:48:a6:14:6c: cb:2f:30:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1MTIxMTAvBgNVBAUTKDhFNUVBRTRDMDNCQzNCMzQ1QkU3OEY4QzhFOUE0M0I3 Rjk4RTMzQTYwHhcNMjYwOTIxMDUzNjU5WhcNMjYwOTI4MDUzNjU5WjAYMRYwFAYD VQQDEw02YWIwYzI3Yy1kNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygj29vSkTAgu/sj6B3F+wOBsrHy9QNM7LsGVJqDDshqf9qRYAjjxJsz3ll+n wb/lm4mZAT9W6A1iNyBuxY10dEe1NQnUHT1LeH1VXN/XvFwiIp99rtDdsMI+i6R8 L3X8OwutXJ8IIKYnYQV2FVSyAkVV8PwJmqPDhTHWo9r9W3pTJmWoedPAF+6lRI3c JgfxhYDdETVAXUJEHStxs9UjQdlBffNhG1+j/YNWoUTSPSOwTLRaAozeF9JZeMpF W2E3IeBYGq22Xg5BKIFoDK7UK8WFKqGi1fHiGloAWeSauxde6dYNi8bneBdKVr9v m6qOQiUvdIIP8avZYGdpGzOwLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDn8jb+ iQEfXzs1qlZPNxJmfnfwMB8GA1UdIwQYMBaAFI5erkwDvDs0W+ePjI6aQ7f5jjOm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzUxMi9BMThBQkYyOEUz QTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96UmI1NC1NanBwRHRfbU9N NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzUxMi9BMThBQkYyOEUzQTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96 UmI1NC1NanBwRHRfbU9NNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGO8DSQUj66y1SNY6fsxVvmn6CXSqF9eijpsMQseYVpzvAH5hIPgo6CT0nRD2 KaFyl7fdd7usPb75WaY2rG7+wRFHmIAqstBDNUQayA3IAC9J5b2Z9Y0KhoVUk9C1 oA+D+j2/RNuTiydTvraFrjDi+iDXHx2TFNtaIrnNbCCZhgkrT2dWgRuInVfs062k zW9yAxNEjsOL/L3GVfe5+UrHM3UmmTtA0aJYOiw7cyHbgtIOd3QFc4Zy4Edl6Zy+ YTjw22ya5I3Y4KFXkBvo24TgsxzGDy2kpbTOM7TPhb9mgz+0h5oZIolFC/sY2UoD QXfqxXshWuV7x8pIphRsyy8wPg== -----END CERTIFICATE-----Generated at Tue Sep 22 23:01:16 2026 by rpki-client