$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json) Hash identifier: eJyEZP6XrUbohLS+crkvBd9uLC2KBlb3RIib5F1JLCU= Subject key identifier: C2:0C:76:9C:AC:53:B2:11:81:3F:19:99:DA:D5:DF:5A:2E:80:0D:AA Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft Manifest number: 0244 Signing time: Mon 21 Sep 2026 02:35:01 +0000 Manifest this update: Mon 21 Sep 2026 02:35:01 +0000 Manifest next update: Mon 28 Sep 2026 02:35:01 +0000 Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: pXgCWJlz1kIrpi1KU+NvQKVd8TL3vJhjocTdmT4/xC8=) 2: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=) 3: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=) 4: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Validity Not Before: Sep 21 02:35:01 2026 GMT Not After : Sep 28 02:35:01 2026 GMT Subject: CN=6ab097d5-3a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:72:58:c5:ad:92:c2:4a:92:b2:f0:d2:dc: 6b:68:ed:0a:df:8c:d4:38:a4:3f:f8:30:f5:d9:1b: 83:6f:78:94:3c:5c:53:9b:14:a2:3f:a3:4a:37:c1: 15:95:5a:2b:e0:28:65:2d:b8:73:6a:de:36:08:a4: 74:bc:27:09:5d:2d:9c:e7:bf:16:74:21:97:ec:08: 1a:0d:b3:d1:be:68:48:cf:89:ea:7c:8d:38:20:a4: 25:50:7a:fc:b1:dd:b0:11:42:20:0d:95:d2:52:cc: 97:f6:13:d0:fd:ea:ce:01:12:db:38:87:b6:00:7e: 43:11:35:f8:7c:2c:a9:cc:a6:a3:09:7d:d3:bf:d2: 2a:31:78:c9:ec:71:7e:b8:05:1a:62:af:1a:c6:c0: 46:e7:1f:a5:1f:40:91:79:d1:2e:5c:7c:93:44:f9: e4:71:fd:fc:ce:bd:0a:82:94:96:27:35:f9:db:98: 76:2f:dc:b3:6e:db:69:ba:66:ee:6f:a8:86:7b:1a: 29:a4:ed:0d:09:1c:e8:a1:14:70:4c:94:19:3c:82: b9:4b:93:07:92:e3:72:b8:b5:96:fa:b9:de:ab:c1: af:23:19:a5:d4:7d:e5:76:b7:64:90:e4:0a:c7:5a: 6a:12:d3:54:ca:b5:64:b7:2c:7a:3b:8a:38:5e:69: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:76:9C:AC:53:B2:11:81:3F:19:99:DA:D5:DF:5A:2E:80:0D:AA X509v3 Authority Key Identifier: keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:00:2a:26:d6:f1:30:e3:e0:0c:1e:6a:e2:13:0c:98:be: b7:5f:e9:7c:6d:e0:86:95:1f:e5:0f:f2:a8:c9:22:88:22:1f: 2b:31:7e:b2:6f:79:d4:9b:13:89:54:f5:f9:65:19:0e:ee:94: d9:95:48:1e:d0:27:a8:50:de:95:c7:9d:2a:52:90:6a:b9:c1: 42:61:f3:37:5f:70:5e:eb:d5:ee:3a:95:a5:f0:dd:4c:8b:c2: 2a:11:0e:0a:60:1e:01:3d:d2:15:8f:f6:96:ac:53:f9:f6:14: 31:78:d7:93:5c:0a:0b:51:42:ff:56:24:9f:56:6c:4f:45:0e: 9e:ab:94:ed:3b:89:30:4b:44:14:1a:ea:b2:a4:bf:cb:4e:1c: 39:ff:37:62:55:8c:75:b4:ee:36:e8:bf:a5:1e:91:45:94:e0: aa:4f:c0:54:ba:8a:e9:87:0e:0a:0e:a1:f5:b5:75:69:b6:31: 0d:af:9a:1e:ff:79:1a:43:91:1a:70:d0:37:d0:1d:57:dc:2c: b8:e3:d6:01:2d:7d:5e:60:12:7c:8b:f1:1d:2a:aa:c2:cd:a2: 84:05:de:2a:1e:b2:6b:ca:3c:1f:a6:2b:26:51:78:0e:70:dc: 13:08:fd:db:d2:45:95:6e:08:bc:17:d8:44:91:07:89:db:e5: 18:e6:f5:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD MEExOEYzOTQwHhcNMjYwOTIxMDIzNTAxWhcNMjYwOTI4MDIzNTAxWjAYMRYwFAYD VQQDEw02YWIwOTdkNS0zYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SdyWMWtksJKkrLw0txraO0K34zUOKQ/+DD12RuDb3iUPFxTmxSiP6NKN8EV lVor4ChlLbhzat42CKR0vCcJXS2c578WdCGX7AgaDbPRvmhIz4nqfI04IKQlUHr8 sd2wEUIgDZXSUsyX9hPQ/erOARLbOIe2AH5DETX4fCypzKajCX3Tv9IqMXjJ7HF+ uAUaYq8axsBG5x+lH0CRedEuXHyTRPnkcf38zr0KgpSWJzX525h2L9yzbttpumbu b6iGexoppO0NCRzooRRwTJQZPIK5S5MHkuNyuLWW+rneq8GvIxml1H3ldrdkkOQK x1pqEtNUyrVktyx6O4o4Xmlj7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIMdpys U7IRgT8ZmdrV31ougA2qMB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgo0AKibW8TDj4AweauITDJi+t1/pfG3ghpUf5Q/yqMkiiCIfKzF+sm951JsT iVT1+WUZDu6U2ZVIHtAnqFDelcedKlKQarnBQmHzN19wXuvV7jqVpfDdTIvCKhEO CmAeAT3SFY/2lqxT+fYUMXjXk1wKC1FC/1Ykn1ZsT0UOnquU7TuJMEtEFBrqsqS/ y04cOf83YlWMdbTuNui/pR6RRZTgqk/AVLqK6YcOCg6h9bV1abYxDa+aHv95GkOR GnDQN9AdV9wsuOPWAS19XmASfIvxHSqqws2ihAXeKh6ya8o8H6YrJlF4DnDcEwj9 29JFlW4IvBfYRJEHidvlGOb1ww== -----END CERTIFICATE-----Generated at Tue Sep 22 20:29:30 2026 by rpki-client