$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: 4sRuG4kvHPGrpAMCkNnTLOOU+t1Ej1ckG0Lbh04egkk= Subject key identifier: 89:E6:B5:A2:13:36:32:53:6E:57:D4:1B:B6:CB:11:9E:FD:1B:34:16 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0211 Signing time: Wed 07 Oct 2026 03:29:35 +0000 Manifest this update: Wed 07 Oct 2026 03:29:34 +0000 Manifest next update: Wed 14 Oct 2026 03:29:34 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: qTE9xgqxau/i/2qO1ICtmZGa8dQJw23XhYW8Bp4Fya4=) 2: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) 3: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Oct 7 03:29:34 2026 GMT Not After : Oct 14 03:29:34 2026 GMT Subject: CN=6ac5bc9e-3515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:af:7a:f4:14:dd:63:b7:bc:8f:a1:ba:53: c4:02:34:8e:0d:de:38:8f:1a:c6:05:bf:c3:14:21: 1e:22:46:7d:f4:32:b0:94:f2:06:79:1f:8e:9a:16: b0:e3:a0:f8:52:77:1d:1e:17:ac:93:08:db:48:54: c3:2f:98:81:fb:08:27:d1:ec:14:f3:fb:d0:28:98: a3:0f:7b:2e:5a:41:ae:63:1f:ef:06:6f:a2:f9:5c: 92:aa:16:a7:88:ba:62:f4:61:e6:46:67:ce:12:e9: 6e:10:74:d9:0d:ba:7d:ee:05:9f:e1:2b:fd:f9:10: 09:a2:46:7c:8e:cf:39:6c:62:51:7f:5e:a0:e9:e9: c9:9c:88:a0:82:b1:10:a9:46:22:8b:01:f6:c1:3a: 7b:5b:67:36:75:c2:15:63:4c:d9:e5:58:5e:b8:5d: 5c:9b:9b:65:c5:6c:80:48:12:01:9f:ae:ca:1c:8b: 2e:50:c5:79:fe:64:09:8c:41:c2:b2:a4:e6:1d:9f: ac:a5:bb:e7:9a:c3:5c:d9:14:63:dd:29:3c:64:a2: 57:a5:fa:e6:67:73:09:90:44:36:c1:f1:0a:3e:2e: 97:6d:7c:5d:da:e3:e7:e9:95:b2:46:cb:f2:84:a1: 10:d0:f3:3f:37:9a:d1:51:45:7a:f2:a7:aa:09:f9: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E6:B5:A2:13:36:32:53:6E:57:D4:1B:B6:CB:11:9E:FD:1B:34:16 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7e:c4:bf:0b:17:eb:27:36:3e:c2:6e:32:8d:da:c8:a3:a4: 28:e6:ab:05:f6:fd:ae:27:48:65:23:6e:c7:4c:7b:c9:8c:9b: 46:ef:fe:f3:ca:53:5d:c6:a2:66:4b:60:0c:5b:9f:df:74:17: 72:76:56:88:d2:32:fb:82:d6:c8:c8:3f:98:9d:51:cc:39:97: 8c:3e:04:53:48:d6:da:95:1a:45:7a:10:6c:e4:58:c0:56:2e: 3d:88:02:77:94:fe:86:47:c4:3b:fb:22:c9:92:30:d2:54:23: e3:38:93:94:70:7d:50:4f:46:0d:b4:f7:ee:fa:bb:87:96:97: 7b:34:78:84:05:ad:08:d7:25:e5:b8:06:f4:a9:22:52:fe:17: b5:1e:8d:b8:f5:41:49:44:48:0c:02:31:e4:01:68:ac:fb:3a: 6c:5b:a8:27:37:d3:bd:63:ec:7c:6a:62:32:47:a6:83:e8:8a: c2:2f:7e:62:bf:bf:2f:b3:dd:17:cb:38:89:da:ae:1d:16:d6: a4:d5:03:3a:d7:b1:20:2f:24:37:65:3f:d7:7c:42:fa:b2:da: 6b:1d:68:72:d5:76:05:fb:e6:de:f7:78:79:b9:2e:86:2f:4c: 84:67:02:84:e5:50:a0:b7:22:fb:e1:77:c6:fe:30:88:25:e3: bd:04:0a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYxMDA3MDMyOTM0WhcNMjYxMDE0MDMyOTM0WjAYMRYwFAYD VQQDEw02YWM1YmM5ZS0zNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5d2vevQU3WO3vI+hulPEAjSODd44jxrGBb/DFCEeIkZ99DKwlPIGeR+Omhaw 46D4UncdHheskwjbSFTDL5iB+wgn0ewU8/vQKJijD3suWkGuYx/vBm+i+VySqhan iLpi9GHmRmfOEuluEHTZDbp97gWf4Sv9+RAJokZ8js85bGJRf16g6enJnIiggrEQ qUYiiwH2wTp7W2c2dcIVY0zZ5VheuF1cm5tlxWyASBIBn67KHIsuUMV5/mQJjEHC sqTmHZ+spbvnmsNc2RRj3Sk8ZKJXpfrmZ3MJkEQ2wfEKPi6XbXxd2uPn6ZWyRsvy hKEQ0PM/N5rRUUV68qeqCfmHqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInmtaIT NjJTblfUG7bLEZ79GzQWMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn37EvwsX6yc2PsJuMo3ayKOkKOarBfb9ridIZSNux0x7yYybRu/+88pTXcai ZktgDFuf33QXcnZWiNIy+4LWyMg/mJ1RzDmXjD4EU0jW2pUaRXoQbORYwFYuPYgC d5T+hkfEO/siyZIw0lQj4ziTlHB9UE9GDbT37vq7h5aXezR4hAWtCNcl5bgG9Kki Uv4XtR6NuPVBSURIDAIx5AForPs6bFuoJzfTvWPsfGpiMkemg+iKwi9+Yr+/L7Pd F8s4idquHRbWpNUDOtexIC8kN2U/13xC+rLaax1octV2Bfvm3vd4ebkuhi9MhGcC hOVQoLci++F3xv4wiCXjvQQK+Q== -----END CERTIFICATE-----Generated at Thu Oct 8 15:56:14 2026 by rpki-client