$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json) Hash identifier: T/gYKTIjeWECUH9JucyDePCUom7IUBxmzZVdW8695F4= Subject key identifier: 5C:0C:D2:65:97:A9:05:AD:6A:B4:FE:DD:FA:9D:4D:0B:1B:DB:6C:F4 Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft Manifest number: 01E4 Signing time: Mon 21 Sep 2026 03:36:59 +0000 Manifest this update: Mon 21 Sep 2026 03:36:59 +0000 Manifest next update: Mon 28 Sep 2026 03:36:59 +0000 Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: KyFqcJaUy9szXLkby+QdwTQvBfrs2npGaHXCfqEjOZ0=) 2: 683E73BA664A11F183E2ACC07047A888.roa (hash: zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=) 3: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Validity Not Before: Sep 21 03:36:59 2026 GMT Not After : Sep 28 03:36:59 2026 GMT Subject: CN=6ab0a65b-6c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:f1:9d:4d:bb:15:13:95:ce:8a:cb:84:31: 26:1c:a7:0b:02:21:31:67:1e:6f:d5:58:63:01:20: 6d:05:72:9a:86:78:c7:6c:20:20:21:43:75:c2:c0: 21:5a:1e:58:e9:f0:42:08:50:e4:1c:a4:3a:c8:19: f2:e6:a1:35:04:58:a3:70:84:a3:ba:3f:23:a6:ae: 61:4a:f2:48:4e:44:9d:03:42:30:00:5f:a5:a3:25: ef:3e:60:bb:4e:4f:b0:f7:af:f7:00:b0:01:57:c6: 93:78:43:42:2d:27:d6:90:8c:9f:60:17:40:5b:6f: 88:16:ca:23:42:dd:cd:e7:16:d6:fa:9a:ff:97:0f: 5d:d5:e9:c7:7f:0c:b4:0c:cd:cb:8a:7d:a8:22:b2: a4:40:c4:98:23:34:d3:80:a2:09:f6:26:6a:9d:6f: d1:85:b7:44:16:db:70:0a:b1:bf:f9:4d:86:ec:c1: db:0a:f5:07:3a:1b:f8:f4:4d:7c:98:2d:da:2d:b0: 65:e7:fc:e2:8e:7f:22:2e:a4:c6:3d:3e:6a:bc:d4: a2:24:84:93:45:21:b6:26:df:99:6b:74:c7:ab:28: c8:0a:10:73:9c:9e:3e:d6:a9:63:10:1b:24:d5:c4: 9f:1d:c6:ae:f8:55:af:49:3b:79:cb:6d:15:5f:ae: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0C:D2:65:97:A9:05:AD:6A:B4:FE:DD:FA:9D:4D:0B:1B:DB:6C:F4 X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b9:4b:e9:49:70:15:00:f2:98:ad:de:8b:87:13:cb:3f:a0: b2:82:15:0e:f2:24:ee:50:44:4d:c5:19:ae:ea:6d:36:f9:53: 70:71:27:db:39:28:02:5b:23:e5:ae:5c:9d:c1:5a:1a:0c:d9: a3:b1:ec:6f:d1:ce:c9:0b:d3:44:5b:49:4a:9b:ce:59:ee:c6: af:44:c2:fc:d5:ef:41:28:d4:be:05:3d:68:41:15:f1:df:a5: 8a:e9:92:a4:cd:1e:d9:f8:7a:33:ee:6b:2c:22:06:85:05:d1: 95:c1:1a:a2:dc:17:06:c5:4e:30:f2:95:3f:47:da:51:22:f9: e5:a1:bd:dd:57:82:88:c3:36:ab:c0:8b:45:73:2b:c2:ac:12: b7:dc:29:78:18:84:b3:c9:4c:dd:47:14:39:4f:0d:39:09:44: dd:da:61:e4:14:a1:e1:89:2e:73:d3:ba:d3:f7:d4:0c:25:d4: d3:81:86:d4:6e:25:c7:5c:dd:9d:6f:f2:1a:08:a0:51:96:a3: 25:4e:22:a1:ae:16:7e:49:da:bc:a3:c7:11:8c:23:46:27:e5: 53:75:a1:35:b6:16:f3:00:94:80:17:34:5f:07:98:3b:53:8e: d0:c7:88:39:9b:f3:f2:d2:bc:ca:bf:48:f7:b9:8f:30:65:40: 39:2f:9e:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw MEJENjhFMzIwHhcNMjYwOTIxMDMzNjU5WhcNMjYwOTI4MDMzNjU5WjAYMRYwFAYD VQQDEw02YWIwYTY1Yi02YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pbxnU27FROVzorLhDEmHKcLAiExZx5v1VhjASBtBXKahnjHbCAgIUN1wsAh Wh5Y6fBCCFDkHKQ6yBny5qE1BFijcISjuj8jpq5hSvJITkSdA0IwAF+loyXvPmC7 Tk+w96/3ALABV8aTeENCLSfWkIyfYBdAW2+IFsojQt3N5xbW+pr/lw9d1enHfwy0 DM3Lin2oIrKkQMSYIzTTgKIJ9iZqnW/RhbdEFttwCrG/+U2G7MHbCvUHOhv49E18 mC3aLbBl5/zijn8iLqTGPT5qvNSiJISTRSG2Jt+Za3THqyjIChBznJ4+1qljEBsk 1cSfHcau+FWvSTt5y20VX67OkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwM0mWX qQWtarT+3fqdTQsb22z0MB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1 M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjg2RC82RjA1ODIwRUU1M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RF MXNseUJrNlJ4cThBdldqakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLlL6UlwFQDymK3ei4cTyz+gsoIVDvIk7lBETcUZruptNvlTcHEn2zkoAlsj 5a5cncFaGgzZo7Hsb9HOyQvTRFtJSpvOWe7Gr0TC/NXvQSjUvgU9aEEV8d+liumS pM0e2fh6M+5rLCIGhQXRlcEaotwXBsVOMPKVP0faUSL55aG93VeCiMM2q8CLRXMr wqwSt9wpeBiEs8lM3UcUOU8NOQlE3dph5BSh4Ykuc9O60/fUDCXU04GG1G4lx1zd nW/yGgigUZajJU4ioa4WfknavKPHEYwjRiflU3WhNbYW8wCUgBc0XweYO1OO0MeI OZvz8tK8yr9I97mPMGVAOS+eHw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:41:27 2026 by rpki-client