$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: Jw1rtWBshErsD52ZQPI/2FysJFW6TMvUD+bKFZVYeTU= Subject key identifier: B4:A1:A0:F4:E6:6E:5B:EF:8E:27:29:7A:16:05:33:90:6E:CD:6A:6E Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 209C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 203D Signing time: Sun 20 Sep 2026 15:57:00 +0000 Manifest this update: Sun 20 Sep 2026 15:56:59 +0000 Manifest next update: Sun 27 Sep 2026 15:56:59 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: 6oc+TkS8B0NJaDsKV4p48/Ql+AuBPuAtDBqSuXcaBow=) 2: YzA9ZVsqvw1-8XWmtPk4xT91c4w.asa (hash: b5KuP1dyVMqyI8BVVHz6+QkOSV1b34yUsC+RPMa5M0Q=) 3: BC6CE974A76011F19E77BBC67BEE528E.roa (hash: WBg74k3aA0swlePdFjLpH7JHUBKooZ7R34qJXjEBIwA=) 4: B6uB0uLFo5kCYXHSVGA76mH8H9I.asa (hash: 0eEwtHlDTp8oTQdpYlosgQpn7/bbRaaZ4LW9p58Em2g=) 5: QddJQ9AU1DejB9kWQxSe_-RAcwk.asa (hash: MNzb7V3axwNjOOorQnNwsquV2ScuC0xOrQ5fGHkrViU=) 6: E4AEC0ACA75F11F19F6EA77F3611F970.roa (hash: jAX/VFWI/LGqcl+oM9q5+Phgjxnh7/enJfNQUBHHpkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8348 (0x209c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Sep 20 15:56:59 2026 GMT Not After : Sep 27 15:56:59 2026 GMT Subject: CN=6ab0024b-41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:19:f8:90:58:02:dc:f0:a1:12:92:be:ba: cb:18:b4:f7:af:c1:75:0a:1c:a2:34:ab:13:66:1d: 09:87:5f:e2:bd:2d:26:cb:d5:17:e3:47:a3:6f:a0: 8b:8b:c0:55:18:10:09:e3:03:83:4d:4d:e9:a5:f8: 47:d7:40:5c:85:53:78:a7:ac:29:ab:6f:65:65:6b: 6c:b8:06:22:d9:bf:9a:6a:48:f0:e9:39:ec:cb:50: 76:e4:54:30:61:90:c9:1d:55:7e:0f:aa:fc:0f:a5: 7d:09:d6:bf:50:19:db:79:eb:b0:b1:f9:19:4e:b8: 25:80:78:bc:99:da:75:da:e8:4a:bb:a1:19:8a:48: 47:4d:1e:13:24:19:89:77:8f:54:b8:a0:3b:4a:b0: a7:73:e5:24:a7:25:8b:97:ff:61:47:0a:ef:cc:fa: 1b:ea:bc:61:6d:db:28:8c:e5:8b:c8:fc:03:f4:f8: cd:46:76:7e:c1:f1:9c:32:de:00:93:47:b8:62:7e: c5:18:da:d9:e6:e9:d7:22:7b:6d:2e:62:60:42:22: 86:08:87:64:51:c7:f6:55:58:76:ce:c1:e7:88:eb: 28:65:e1:0d:3d:31:6d:98:44:f3:02:94:2c:1a:37: af:dd:3b:53:ea:7e:1e:9b:32:2e:57:2a:c7:ee:42: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A1:A0:F4:E6:6E:5B:EF:8E:27:29:7A:16:05:33:90:6E:CD:6A:6E X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c9:34:fb:ff:21:1d:28:38:ce:f2:f5:9f:7f:5b:90:a7:07: 96:1e:f4:62:41:02:b3:b0:67:06:48:46:eb:e8:30:49:2d:07: 88:45:79:15:a5:9f:af:92:1b:47:a8:b0:02:4c:ae:e8:e0:04: 61:b3:1e:b7:e5:c9:73:91:47:6d:10:bd:10:d5:2a:05:cd:1e: d8:20:57:b0:3d:cd:5e:f5:08:e5:df:0a:c7:46:05:37:78:42: 2a:68:93:69:d8:9b:8d:ab:99:d5:f7:7d:2e:a3:66:2f:6b:98: 30:38:a4:d6:bd:8c:90:a4:80:34:33:99:f8:14:3c:33:52:6e: 31:a0:44:de:38:f5:b5:51:49:75:6c:04:c9:37:88:6c:a0:1e: e2:f2:03:a7:fe:4f:ac:fe:fc:72:50:77:f6:0f:a1:17:10:bd: 77:3e:6f:0f:42:2e:2f:8f:7f:9a:f6:6d:e4:11:8f:09:dc:fa: 33:fd:6a:56:40:89:5e:da:3c:f6:82:44:0e:91:2f:4c:00:b5: fb:c4:d8:14:cf:69:55:4f:41:af:30:71:52:11:2f:1d:47:30: e8:5d:3e:09:51:7f:8a:e8:19:1c:98:e0:11:48:a3:c6:88:6e: 47:68:af:5e:f7:17:4a:86:1e:0e:aa:33:e0:5b:c6:db:6f:45: eb:f5:e2:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjYwOTIwMTU1NjU5WhcNMjYwOTI3MTU1NjU5WjAYMRYwFAYD VQQDEw02YWIwMDI0Yi00MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n4Z+JBYAtzwoRKSvrrLGLT3r8F1ChyiNKsTZh0Jh1/ivS0my9UX40ejb6CL i8BVGBAJ4wODTU3ppfhH10BchVN4p6wpq29lZWtsuAYi2b+aakjw6Tnsy1B25FQw YZDJHVV+D6r8D6V9Cda/UBnbeeuwsfkZTrglgHi8mdp12uhKu6EZikhHTR4TJBmJ d49UuKA7SrCnc+UkpyWLl/9hRwrvzPob6rxhbdsojOWLyPwD9PjNRnZ+wfGcMt4A k0e4Yn7FGNrZ5unXInttLmJgQiKGCIdkUcf2VVh2zsHniOsoZeENPTFtmETzApQs Gjev3TtT6n4emzIuVyrH7kLKEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLShoPTm blvvjicpehYFM5BuzWpuMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb8k0+/8hHSg4zvL1n39bkKcHlh70YkECs7BnBkhG6+gwSS0HiEV5FaWfr5Ib R6iwAkyu6OAEYbMet+XJc5FHbRC9ENUqBc0e2CBXsD3NXvUI5d8Kx0YFN3hCKmiT adibjauZ1fd9LqNmL2uYMDik1r2MkKSANDOZ+BQ8M1JuMaBE3jj1tVFJdWwEyTeI bKAe4vIDp/5PrP78clB39g+hFxC9dz5vD0IuL49/mvZt5BGPCdz6M/1qVkCJXto8 9oJEDpEvTAC1+8TYFM9pVU9BrzBxUhEvHUcw6F0+CVF/iugZHJjgEUijxohuR2iv XvcXSoYeDqoz4FvG229F6/XiqQ== -----END CERTIFICATE-----Generated at Mon Sep 21 18:13:05 2026 by rpki-client