$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json) Hash identifier: +U38+5VpGCnvwHoJeeLhpV2/QFldyOZKrH4OE6H8bTE= Subject key identifier: 39:0F:33:AD:5F:CE:B8:12:DA:75:0B:16:F3:63:7F:9E:7E:98:72:32 Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft Manifest number: BA Signing time: Mon 21 Sep 2026 06:57:11 +0000 Manifest this update: Mon 21 Sep 2026 06:57:10 +0000 Manifest next update: Mon 28 Sep 2026 06:57:10 +0000 Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: 6VE1MQZpH1l+HhhAP8iNy6ulOKKNqZWg6+9OZDCeCZ0=) 2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Validity Not Before: Sep 21 06:57:10 2026 GMT Not After : Sep 28 06:57:10 2026 GMT Subject: CN=6ab0d547-45f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:54:e0:60:d6:9d:c2:e0:4e:89:29:eb:2b: b3:80:09:83:db:9a:e9:0a:f7:a4:ec:fc:28:ac:46: 98:40:51:54:d1:27:a6:24:74:42:af:26:23:3a:e5: b3:ca:0b:bf:71:12:fc:5e:2b:bd:bf:ed:b5:e2:57: dd:b7:3f:03:69:44:c6:5d:65:5e:1b:33:b4:f8:d8: 47:be:9d:b3:d5:81:89:63:2c:d6:14:a6:81:9f:2d: a7:57:a2:59:d2:57:4a:1c:ca:5c:c6:97:3b:ca:86: 5a:59:25:9d:96:5d:b7:9d:ec:99:53:f3:e6:ae:01: d3:7c:6f:d3:74:f4:f8:d9:e9:90:f6:4b:c9:b9:15: 29:6f:8f:67:80:b3:2d:11:2e:b8:83:1c:13:bc:84: e1:e6:a6:62:86:4c:37:e8:02:8a:57:20:9c:01:da: 14:fe:d4:f1:1d:d5:46:41:67:24:25:46:64:5a:2c: 2a:04:cc:75:0c:ed:bf:0a:a7:26:27:ce:47:e6:f2: b5:5a:fb:ee:56:b4:eb:78:37:36:27:ea:01:b8:fa: aa:bc:be:fe:ef:d4:77:0a:ca:6d:35:7a:52:33:9b: 79:30:76:a7:f0:37:ac:f0:ed:6e:0a:c4:1f:af:cc: 6e:4d:e0:56:4e:29:1f:7a:41:e9:ad:5f:12:f8:49: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:33:AD:5F:CE:B8:12:DA:75:0B:16:F3:63:7F:9E:7E:98:72:32 X509v3 Authority Key Identifier: keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ce:c9:18:16:fa:a1:72:97:c0:51:55:a4:1e:67:60:ed:18: 68:b8:bb:f9:2f:7e:81:43:24:03:44:bd:c5:29:61:5a:d7:32: c1:19:d6:36:47:eb:97:d1:b5:a5:c1:74:b4:1b:66:c8:4f:aa: 41:31:ae:c2:1d:2a:f1:39:f1:b7:45:7a:24:e5:0b:df:01:46: f0:03:aa:48:f7:03:c6:3c:33:43:ea:19:af:6f:0f:ce:30:08: 41:95:fd:46:94:04:f8:36:27:30:30:84:18:0b:d9:ec:e8:e7: 85:5e:7b:22:6c:2a:47:88:93:c8:07:6d:48:a4:0b:4c:6c:47: 25:03:73:1f:7e:e7:87:16:8d:f7:f1:91:2b:78:13:fb:69:97: 4f:19:b2:a4:ae:dd:da:01:7e:85:39:ae:ad:4e:2c:4b:43:6f: bc:38:0c:fd:de:da:2d:e7:7d:fb:85:56:69:89:29:4d:9e:b6: 7f:a5:59:1e:03:4f:c3:ac:9c:ca:6b:2f:d0:1f:32:94:c2:e2: d1:59:1d:4f:4e:93:62:49:5c:bf:bd:45:94:c9:d4:7c:61:6b: c7:57:91:b9:1a:fb:53:cb:da:a2:07:35:aa:82:0a:3d:2e:30: 40:1b:9a:33:3c:6e:91:e9:42:2e:8d:e2:6f:d6:94:90:30:98: 4b:45:d0:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0Q0QxMTAvBgNVBAUTKDhEMUNENjU5RTYxREI2NDk1QjM2Q0U2OUM0OUY1QTgz MkVEQkQ1OUQwHhcNMjYwOTIxMDY1NzEwWhcNMjYwOTI4MDY1NzEwWjAYMRYwFAYD VQQDEw02YWIwZDU0Ny00NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn31U4GDWncLgTokp6yuzgAmD25rpCvek7PworEaYQFFU0SemJHRCryYjOuWz ygu/cRL8Xiu9v+214lfdtz8DaUTGXWVeGzO0+NhHvp2z1YGJYyzWFKaBny2nV6JZ 0ldKHMpcxpc7yoZaWSWdll23neyZU/PmrgHTfG/TdPT42emQ9kvJuRUpb49ngLMt ES64gxwTvITh5qZihkw36AKKVyCcAdoU/tTxHdVGQWckJUZkWiwqBMx1DO2/Cqcm J85H5vK1WvvuVrTreDc2J+oBuPqqvL7+79R3CsptNXpSM5t5MHan8Des8O1uCsQf r8xuTeBWTikfekHprV8S+EnbbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkPM61f zrgS2nULFvNjf55+mHIyMB8GA1UdIwQYMBaAFI0c1lnmHbZJWzbOacSfWoMu29Wd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8zNkFGOTQ3MjlF QzgxMUYwOENEMkFDN0JDNEY5QUUwMi9qUnpXV2VZZHRrbGJOczVweEo5YWd5N2Ix WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8zNkFGOTQ3MjlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi9qUnpXV2VZZHRr bGJOczVweEo5YWd5N2IxWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABM7JGBb6oXKXwFFVpB5nYO0YaLi7+S9+gUMkA0S9xSlhWtcywRnWNkfrl9G1 pcF0tBtmyE+qQTGuwh0q8Tnxt0V6JOUL3wFG8AOqSPcDxjwzQ+oZr28PzjAIQZX9 RpQE+DYnMDCEGAvZ7OjnhV57ImwqR4iTyAdtSKQLTGxHJQNzH37nhxaN9/GRK3gT +2mXTxmypK7d2gF+hTmurU4sS0NvvDgM/d7aLed9+4VWaYkpTZ62f6VZHgNPw6yc ymsv0B8ylMLi0VkdT06TYklcv71FlMnUfGFrx1eRuRr7U8vaogc1qoIKPS4wQBua MzxukelCLo3ib9aUkDCYS0XQpw== -----END CERTIFICATE-----Generated at Mon Sep 21 21:55:14 2026 by rpki-client