$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: QnuWt2aMcFXV2mRbvR6b2FbNA0SN8EKvBvcUhpGRXqI= Subject key identifier: E2:AF:0F:8E:6F:5D:70:FA:94:5D:FD:A7:1B:1D:DC:B2:7A:A0:5D:D5 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 73 Signing time: Sat 03 Oct 2026 08:38:14 +0000 Manifest this update: Sat 03 Oct 2026 08:38:13 +0000 Manifest next update: Sat 10 Oct 2026 08:38:13 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: e5uu3K2LHrRov/0uPDsK5e9LZQPiXSoOQZvEU7KI3pU=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Oct 3 08:38:13 2026 GMT Not After : Oct 10 08:38:13 2026 GMT Subject: CN=6ac0bef5-6b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:72:24:37:99:89:04:e7:f1:23:56:2e:13: 21:30:48:8e:29:08:3c:33:b5:05:89:32:4e:bc:6f: 50:b6:55:58:11:62:f2:2c:bd:31:54:e0:9c:fc:7b: 5b:a9:31:fb:2d:05:49:de:6d:45:5c:bc:a8:bb:36: c6:45:65:b7:c7:55:2a:d1:69:53:5c:2f:68:50:86: 56:fb:78:10:ea:66:d4:20:d8:6a:3f:96:9f:43:06: b4:aa:66:45:d6:96:e4:c2:41:91:9f:3e:85:7b:55: e9:02:da:11:cd:06:89:77:0b:a1:cd:f3:58:d1:d6: 8d:82:3c:28:cb:c7:0d:77:b5:e0:31:0a:60:ee:ff: 33:da:1f:a3:88:cb:74:52:e8:96:44:ba:60:1b:a4: 21:05:11:1c:cc:5a:e5:e1:72:ef:27:99:0f:02:9f: 8d:07:9c:a3:4b:f1:1e:f0:44:9a:e8:43:4c:ba:ba: 4c:ea:5e:cd:7b:fd:2f:da:97:43:4b:ab:80:22:1d: 82:72:6f:cf:d3:c3:42:bc:de:12:9c:c3:88:64:7d: 0c:d2:99:ca:e8:fd:93:cb:de:2c:1a:ae:ec:be:07: 1b:71:1b:99:3f:da:e3:72:b0:26:67:fc:e2:cc:e8: 0c:6f:b5:02:e4:10:08:84:94:35:b9:49:ef:44:1c: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AF:0F:8E:6F:5D:70:FA:94:5D:FD:A7:1B:1D:DC:B2:7A:A0:5D:D5 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:be:d5:7c:8c:8f:e9:33:45:ea:f7:8c:f3:2d:08:cf:12: e6:5f:fb:6f:79:10:bc:2f:48:c7:4b:9c:82:34:b7:ab:b6:b9: 6e:58:f9:56:2b:99:79:91:84:06:37:3d:0f:fd:65:26:4e:dc: 99:cd:b7:f5:c6:c4:17:a8:b6:30:5a:3d:c6:de:ba:31:fc:cd: fa:e0:ae:a6:3e:c9:ed:9a:b8:4c:1b:f7:bf:f0:de:d3:b0:fd: 7b:f1:df:1e:65:0e:0c:f5:bd:e4:f9:ee:05:cf:c2:a2:58:af: 2f:08:a3:f7:77:fa:ae:dc:f3:fa:08:dc:45:ac:7b:da:b1:9b: cb:25:ee:0e:ff:33:39:85:ad:19:db:75:60:a7:4b:05:28:26: 15:86:7c:84:31:36:d1:86:30:05:9d:8b:bc:49:d2:e6:c0:a0: 95:11:33:d1:95:21:71:30:9b:5a:3e:e5:f0:03:e4:c6:b8:f3: 55:54:1e:3c:47:a5:8f:0f:ed:5f:4b:3c:c2:c7:52:a2:24:3f: e0:c2:fd:ec:48:39:0a:98:70:2d:f8:b2:d5:f9:bf:96:c5:3b: a5:b6:0e:c4:2c:ee:ab:86:3c:2f:32:7b:21:a2:6b:89:2e:f8: 44:a7:07:c3:92:e7:56:f1:e0:63:64:5e:5d:db:49:ed:29:a6: 9b:db:5c:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjEwMDMwODM4MTNaFw0yNjEwMTAwODM4MTNaMBgxFjAUBgNV BAMTDTZhYzBiZWY1LTZiMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOwnIkN5mJBOfxI1YuEyEwSI4pCDwztQWJMk68b1C2VVgRYvIsvTFU4Jz8e1up MfstBUnebUVcvKi7NsZFZbfHVSrRaVNcL2hQhlb7eBDqZtQg2Go/lp9DBrSqZkXW luTCQZGfPoV7VekC2hHNBol3C6HN81jR1o2CPCjLxw13teAxCmDu/zPaH6OIy3RS 6JZEumAbpCEFERzMWuXhcu8nmQ8Cn40HnKNL8R7wRJroQ0y6ukzqXs17/S/al0NL q4AiHYJyb8/Tw0K83hKcw4hkfQzSmcro/ZPL3iwaruy+BxtxG5k/2uNysCZn/OLM 6AxvtQLkEAiElDW5Se9EHLx1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4q8Pjm9d cPqUXf2nGx3csnqgXdUwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByc77VfIyP6TNF6veM8y0IzxLmX/tveRC8L0jHS5yCNLertrluWPlWK5l5kYQG Nz0P/WUmTtyZzbf1xsQXqLYwWj3G3rox/M364K6mPsntmrhMG/e/8N7TsP178d8e ZQ4M9b3k+e4Fz8KiWK8vCKP3d/qu3PP6CNxFrHvasZvLJe4O/zM5ha0Z23Vgp0sF KCYVhnyEMTbRhjAFnYu8SdLmwKCVETPRlSFxMJtaPuXwA+TGuPNVVB48R6WPD+1f SzzCx1KiJD/gwv3sSDkKmHAt+LLV+b+WxTultg7ELO6rhjwvMnshomuJLvhEpwfD kudW8eBjZF5d20ntKaab21zb -----END CERTIFICATE-----Generated at Sat Oct 3 15:46:21 2026 by rpki-client