$ rpki-client -vvvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft File: JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json) Hash identifier: 4vlExNYPFvrvKNNh/phCNjCPzJ+ox96qZ/rSO6AfWeI= Subject key identifier: 9D:C3:60:68:6E:D5:BB:2D:7F:10:EF:49:00:8B:53:6E:8D:8C:64:52 Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft Manifest number: 011C Signing time: Wed 23 Sep 2026 05:44:30 +0000 Manifest this update: Wed 23 Sep 2026 05:44:29 +0000 Manifest next update: Wed 30 Sep 2026 05:44:29 +0000 Files and hashes: 1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: HfL0ROOoLxBYBnpGmGw0tCMnOZs4enoTh2KtKTWS4hA=) 2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Validity Not Before: Sep 23 05:44:29 2026 GMT Not After : Sep 30 05:44:29 2026 GMT Subject: CN=6ab3673d-44c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:56:81:c3:21:54:b9:30:6e:bf:b1:4d:24: 85:0b:24:ed:b3:49:b0:63:21:25:f4:66:6f:4a:e4: c0:f6:e7:d2:09:c5:c2:c4:dc:88:f0:78:f8:e5:d8: 19:16:9c:fe:5f:fb:d2:57:08:a9:00:39:cf:a1:1c: 25:54:7b:4d:b3:b7:cb:06:c9:01:de:06:af:9c:7c: 99:6c:42:17:95:de:55:19:39:be:9c:8c:ab:df:fc: 30:d1:ab:6b:8a:b2:08:f6:9c:75:7c:fe:3d:08:7b: 1e:03:0e:da:32:89:b3:bb:df:ff:26:df:eb:28:55: d5:36:17:a5:a9:16:f3:1a:e5:b5:a3:ac:a4:28:a0: 30:de:56:a5:09:b0:2b:20:36:50:da:77:a7:92:cf: b8:39:04:a9:1a:98:90:71:52:67:0e:79:bb:d9:8f: 6e:a8:39:a4:13:23:a6:1b:0c:20:9e:53:5a:54:3a: d7:84:22:a9:22:ba:bc:cc:ab:87:c0:00:70:a7:70: d6:6e:17:ee:59:aa:c4:ad:90:51:c0:42:f4:2a:25: 24:11:68:16:1b:6d:14:f8:c5:e2:c9:67:09:ed:02: 49:fb:93:d9:91:e8:e6:2d:9d:b3:03:3b:0d:56:77: ab:e8:81:f0:38:8c:61:f6:ec:d0:55:c4:0f:f9:73: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:60:68:6E:D5:BB:2D:7F:10:EF:49:00:8B:53:6E:8D:8C:64:52 X509v3 Authority Key Identifier: keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c1:ea:0e:2d:42:d0:57:b6:de:bc:b3:7d:38:e6:f3:2c:d4: e3:38:5d:33:49:2d:38:e8:6a:cd:8f:f1:58:b9:67:c5:44:95: da:31:22:8d:21:ff:90:a8:3a:98:66:5a:ff:37:13:86:1a:e9: d1:8c:7b:49:64:c7:b3:06:a3:7e:a5:4b:27:f5:67:01:f3:d5: b7:07:1e:dd:f6:65:a1:38:60:fd:b4:22:20:a2:c4:ca:f5:d9: 02:f5:c9:d3:50:1a:4c:07:22:04:58:a7:e1:8b:51:a6:c3:49: 58:8d:8e:58:22:f3:de:39:40:53:de:01:b0:11:b9:ec:64:b6: e5:19:47:f4:da:64:37:cb:b6:d4:ea:4e:55:c1:35:43:2e:5e: 6a:27:95:a7:08:a3:96:8b:2d:e4:4d:fa:5a:f7:b8:92:f6:d7: 7d:8e:5a:b8:d2:a8:fe:3f:04:20:ed:d3:e5:7e:32:4c:15:a4: bb:d7:9b:8b:d8:b4:91:9b:c8:8a:2d:e1:69:e9:66:cc:10:70: 2e:9f:04:2e:ee:6f:f5:4b:a6:51:44:9c:e3:f7:de:b1:95:38: 91:52:1f:17:e2:52:c9:e1:5f:24:83:c5:25:e8:06:5d:4b:91: 91:eb:c6:49:7f:e9:e3:f4:e7:ae:ae:7a:20:87:17:5d:3b:58: d6:40:ea:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1 RjUzQzVEMDkwHhcNMjYwOTIzMDU0NDI5WhcNMjYwOTMwMDU0NDI5WjAYMRYwFAYD VQQDEw02YWIzNjczZC00NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8BWgcMhVLkwbr+xTSSFCyTts0mwYyEl9GZvSuTA9ufSCcXCxNyI8Hj45dgZ Fpz+X/vSVwipADnPoRwlVHtNs7fLBskB3gavnHyZbEIXld5VGTm+nIyr3/ww0atr irII9px1fP49CHseAw7aMomzu9//Jt/rKFXVNhelqRbzGuW1o6ykKKAw3lalCbAr IDZQ2nenks+4OQSpGpiQcVJnDnm72Y9uqDmkEyOmGwwgnlNaVDrXhCKpIrq8zKuH wABwp3DWbhfuWarErZBRwEL0KiUkEWgWG20U+MXiyWcJ7QJJ+5PZkejmLZ2zAzsN Vner6IHwOIxh9uzQVcQP+XPL8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3DYGhu 1bstfxDvSQCLU26NjGRSMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDQy9CREQ0QUYzQzBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3 TEhyRDBwQVQ2UTFmVThYUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARcHqDi1C0Fe23ryzfTjm8yzU4zhdM0ktOOhqzY/xWLlnxUSV2jEijSH/kKg6 mGZa/zcThhrp0Yx7SWTHswajfqVLJ/VnAfPVtwce3fZloThg/bQiIKLEyvXZAvXJ 01AaTAciBFin4YtRpsNJWI2OWCLz3jlAU94BsBG57GS25RlH9NpkN8u21OpOVcE1 Qy5eaieVpwijlost5E36Wve4kvbXfY5auNKo/j8EIO3T5X4yTBWku9ebi9i0kZvI ii3haelmzBBwLp8ELu5v9UumUUSc4/fesZU4kVIfF+JSyeFfJIPFJegGXUuRkevG SX/p4/Tnrq56IIcXXTtY1kDqAg== -----END CERTIFICATE-----Generated at Thu Sep 24 09:25:18 2026 by rpki-client