$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: fezXNECW+adi9e4hF1Rnfwa3e7AwIKivDwmThLssWcE= Subject key identifier: E5:BB:15:D3:73:78:27:E7:96:CF:28:0C:A5:9C:7A:D1:BB:7A:90:BB Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F68 Signing time: Tue 22 Sep 2026 17:26:17 +0000 Manifest this update: Tue 22 Sep 2026 17:26:16 +0000 Manifest next update: Tue 29 Sep 2026 17:26:16 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: Uuex1HSYrtlI37GKUognYki5BueFkdh1aV6+1fHDxSM=) 2: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) 3: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Sep 22 17:26:16 2026 GMT Not After : Sep 29 17:26:16 2026 GMT Subject: CN=6ab2ba39-923b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:4b:58:7a:7e:4e:49:90:1d:bf:28:31:b3: 2c:1a:aa:67:d8:48:35:0f:58:1c:cd:f5:07:64:d1: fb:9d:6d:15:5b:40:9f:23:4b:93:64:16:c8:ab:3c: 50:d7:66:53:43:9f:6c:e8:1f:ff:9e:2d:e3:b9:cb: 13:a1:de:11:ce:b2:88:eb:77:04:58:8b:bc:bf:ae: ff:75:9e:36:fb:93:7a:72:10:f7:ff:21:81:c1:f6: 33:c1:ee:41:e4:11:8f:06:fb:82:96:01:61:3c:56: fd:55:a8:04:63:63:15:b9:57:23:7f:0b:de:01:07: 64:1c:fe:c4:de:1e:cc:5c:ae:76:01:ef:14:e1:3b: db:3e:af:c4:e7:12:29:b1:be:cf:1b:df:7d:d0:47: dc:16:17:1c:b7:91:a4:10:45:30:ee:32:18:d4:2b: dc:ad:85:41:6c:e4:2c:aa:2f:27:8e:1c:1f:d1:60: 9e:c7:44:4b:5c:ce:dc:65:ee:b9:f1:e5:f8:5e:61: d4:82:b3:a3:42:d4:8e:0f:35:e7:cd:86:0d:b3:e1: 07:2a:c5:1f:6e:36:13:c5:5e:07:19:bd:28:c3:6b: b8:99:9d:a8:2f:c2:0f:11:43:bb:d5:2d:50:46:9c: 17:f2:e9:53:57:0d:a0:2e:3e:24:95:3d:43:94:3a: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BB:15:D3:73:78:27:E7:96:CF:28:0C:A5:9C:7A:D1:BB:7A:90:BB X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:50:50:03:cf:e3:d3:e1:1a:ce:db:41:70:67:24:ea:75: 17:5c:a1:9a:c5:7c:63:6e:e2:76:14:c7:34:0d:aa:1b:82:6a: c9:ae:dc:5a:c7:e1:e3:f6:66:39:ae:6e:68:3b:7a:45:44:9e: 7e:59:31:39:6a:5e:e0:87:c6:d9:80:02:31:b1:01:b8:17:f0: ef:33:1d:ba:28:20:0b:6f:36:be:07:8d:5a:db:27:e6:64:9e: 6b:db:e0:11:15:f5:27:87:67:18:1a:70:97:a0:55:73:04:74: 5b:74:a5:a4:95:b3:dc:2d:9f:e0:db:91:67:0a:d8:01:a7:a7: e7:c4:0e:21:00:b2:42:17:84:54:29:8f:94:94:32:6a:34:75: 7a:92:15:da:95:f5:8e:70:dc:ba:ab:73:d3:d5:9f:be:89:55: 9c:a7:6b:1e:b2:a9:83:fa:61:a8:64:b9:3e:ad:f7:c9:5f:cc: c5:8c:3c:ac:34:31:e6:e8:af:5f:9d:c9:53:ad:3d:81:e4:e8: 16:85:6c:0b:6a:09:78:6a:d4:d8:8c:90:73:c7:2a:55:69:c9: 73:f3:c8:d9:ad:2b:f6:ff:d6:01:c8:17:f8:d0:c0:e7:7e:2c: 15:99:04:15:3e:dc:f3:6b:34:3f:b0:ff:71:31:3c:f0:14:2f: c6:41:bf:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwOTIyMTcyNjE2WhcNMjYwOTI5MTcyNjE2WjAYMRYwFAYD VQQDEw02YWIyYmEzOS05MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zNLWHp+TkmQHb8oMbMsGqpn2Eg1D1gczfUHZNH7nW0VW0CfI0uTZBbIqzxQ 12ZTQ59s6B//ni3jucsTod4RzrKI63cEWIu8v67/dZ42+5N6chD3/yGBwfYzwe5B 5BGPBvuClgFhPFb9VagEY2MVuVcjfwveAQdkHP7E3h7MXK52Ae8U4TvbPq/E5xIp sb7PG9990EfcFhcct5GkEEUw7jIY1CvcrYVBbOQsqi8njhwf0WCex0RLXM7cZe65 8eX4XmHUgrOjQtSODzXnzYYNs+EHKsUfbjYTxV4HGb0ow2u4mZ2oL8IPEUO71S1Q RpwX8ulTVw2gLj4klT1DlDrk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOW7FdNz eCfnls8oDKWcetG7epC7MB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASsJQUAPP49PhGs7bQXBnJOp1F1yhmsV8Y27idhTHNA2qG4Jqya7cWsfh4/Zm Oa5uaDt6RUSeflkxOWpe4IfG2YACMbEBuBfw7zMduiggC282vgeNWtsn5mSea9vg ERX1J4dnGBpwl6BVcwR0W3SlpJWz3C2f4NuRZwrYAaen58QOIQCyQheEVCmPlJQy ajR1epIV2pX1jnDcuqtz09WfvolVnKdrHrKpg/phqGS5Pq33yV/MxYw8rDQx5uiv X53JU609geToFoVsC2oJeGrU2IyQc8cqVWnJc/PI2a0r9v/WAcgX+NDA534sFZkE FT7c82s0P7D/cTE88BQvxkG/bg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:40:51 2026 by rpki-client