$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft File: JGgod4ICzbuCxWclO6nDnDy51Cs.mft (raw, json) Hash identifier: 6NvT+/xUFoBz6N9k1BOokKnA5XJfpL5VMllkpxh8elc= Subject key identifier: 83:F3:94:82:4D:67:C3:2F:92:AA:01:5D:FA:FC:B4:69:AB:6D:8A:43 Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B Certificate issuer: /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft Manifest number: 33 Signing time: Mon 21 Sep 2026 08:40:13 +0000 Manifest this update: Mon 21 Sep 2026 08:40:12 +0000 Manifest next update: Mon 28 Sep 2026 08:40:12 +0000 Files and hashes: 1: JGgod4ICzbuCxWclO6nDnDy51Cs.crl (hash: MinUopd0BxCVArh9vdFG4ITRW+CWZE7t/lPXYcFwSyE=) 2: 0F812C446F9211F1BD55685D6CA30FBC.roa (hash: bHHRKzCejdw2U0vQu39U0T3o7ItJZ6r4kG6fcSW5tNo=) 3: 7ZsDllYmRJDDzKykoQ_Po5y8-fk.asa (hash: lZnxC85PE/4oBWnZK7QXBmfu0GWZJBsWrS9vGM6BoC8=) 4: 4D9099E66F9411F18CD406106EA30FBC.roa (hash: KhV4pO08T7ByOxUr4S8oxiImOdoh9Kqbs9FBQHAW+9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B Validity Not Before: Sep 21 08:40:12 2026 GMT Not After : Sep 28 08:40:12 2026 GMT Subject: CN=6ab0ed6d-2f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:69:a9:96:e6:4a:44:08:60:77:1c:69:01: 10:c2:95:4a:c7:82:38:d6:df:d4:12:a1:5a:75:e6: 44:45:e9:e8:fd:b5:0d:e3:ec:16:92:0e:d0:8d:c9: 86:36:ef:f2:ef:fb:ca:40:d1:c2:9b:93:83:4b:15: 19:90:fd:b4:37:e1:b8:c7:7c:af:34:bd:71:8e:c0: 7c:db:2d:f7:76:35:c2:f0:5d:25:5d:17:e5:02:d8: f6:51:4e:14:6d:d9:7c:5d:64:26:83:8c:5c:1e:91: 01:6a:fa:a3:bb:01:20:c2:28:25:7d:6e:30:87:d7: e4:d6:13:78:8d:c3:d3:a5:a0:28:ca:50:00:d8:f7: 03:36:49:d4:90:d2:8d:8a:f0:46:a1:18:c8:31:be: 04:f9:e8:4f:74:41:f7:b5:7e:8a:07:c2:a8:1e:5c: 2c:97:93:91:19:88:ac:74:48:f2:fb:2c:ae:d2:7a: a2:b4:e4:0b:33:b7:7d:57:11:3f:aa:d5:b2:48:54: 1f:16:66:15:40:ea:c6:df:57:0d:8c:8d:01:61:d2: e7:30:eb:6a:d3:c1:b8:3b:73:ee:c8:55:70:ef:15: 9f:bd:71:f6:11:0e:3e:52:ee:ea:d1:5f:4c:87:fb: 34:d2:0e:87:95:49:24:c9:81:8a:2a:25:61:f5:0a: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:94:82:4D:67:C3:2F:92:AA:01:5D:FA:FC:B4:69:AB:6D:8A:43 X509v3 Authority Key Identifier: keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:63:a4:d6:65:af:02:01:38:3d:26:ed:e3:95:09:2b:89: a2:f0:03:2d:39:70:97:e7:0c:97:67:e5:98:f7:ef:cf:47:c5: 68:ca:39:e7:99:3e:d3:ed:4d:12:20:5c:81:a9:45:37:d1:19: 86:3b:2a:1c:32:65:ed:e9:aa:05:a6:c3:e2:c1:ef:7a:3a:93: 6e:0b:ab:95:1a:6b:57:d7:f0:39:cf:fe:7b:cd:31:92:77:f4: 04:f4:7d:e6:6f:c6:4b:30:1e:d2:ba:38:8a:8c:91:a9:2b:41: e0:0a:e1:d9:6f:f5:a7:54:d9:45:d8:cb:2a:bb:b2:0b:54:b2: 35:fb:0e:aa:82:0c:34:ea:f3:7a:a7:b7:45:b4:08:2b:63:37: 68:00:0f:d6:51:b9:72:31:0b:36:c9:6d:b5:41:3e:13:02:90: ff:70:0c:fc:f4:ff:28:12:08:09:1e:2c:ab:6f:e7:71:62:c6: 4f:d5:cd:59:a3:76:33:65:35:26:10:5a:7b:11:70:7f:ec:cf: ea:59:86:ba:f4:fe:bd:32:8e:c8:23:85:36:f6:62:ef:1b:6c: a1:a5:ea:df:67:c6:69:65:01:6b:a4:43:4b:b3:37:f3:d6:00: 1c:5d:9f:36:7d:f0:68:09:ee:01:52:33:3e:d5:23:5b:76:45: bc:32:e2:82 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODMyQjExMC8GA1UEBRMoMjQ2ODI4Nzc4MjAyQ0RCQjgyQzU2NzI1M0JBOUMzOUMz Q0I5RDQyQjAeFw0yNjA5MjEwODQwMTJaFw0yNjA5MjgwODQwMTJaMBgxFjAUBgNV BAMTDTZhYjBlZDZkLTJmNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDicmmpluZKRAhgdxxpARDClUrHgjjW39QSoVp15kRF6ej9tQ3j7BaSDtCNyYY2 7/Lv+8pA0cKbk4NLFRmQ/bQ34bjHfK80vXGOwHzbLfd2NcLwXSVdF+UC2PZRThRt 2XxdZCaDjFwekQFq+qO7ASDCKCV9bjCH1+TWE3iNw9OloCjKUADY9wM2SdSQ0o2K 8EahGMgxvgT56E90Qfe1fooHwqgeXCyXk5EZiKx0SPL7LK7SeqK05Aszt31XET+q 1bJIVB8WZhVA6sbfVw2MjQFh0ucw62rTwbg7c+7IVXDvFZ+9cfYRDj5S7urRX0yH +zTSDoeVSSTJgYoqJWH1Cu6RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUg/OUgk1n wy+SqgFd+vy0aattikMwHwYDVR0jBBgwFoAUJGgod4ICzbuCxWclO6nDnDy51Csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzJCL0RGMTZBMDRDNkY4 RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1Q3hXY2xPNm5EbkR5NTFD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkdnb2Q0SUN6YnVDeFdjbE82bkRuRHk1MUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzJCL0RGMTZBMDRDNkY4RDExRjE5MkVCQTAyMzZCQTMwRkJDL0pHZ29kNElDemJ1 Q3hXY2xPNm5EbkR5NTFDcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJImOk1mWvAgE4PSbt45UJK4mi8AMtOXCX5wyXZ+WY9+/PR8VoyjnnmT7T7U0S IFyBqUU30RmGOyocMmXt6aoFpsPiwe96OpNuC6uVGmtX1/A5z/57zTGSd/QE9H3m b8ZLMB7SujiKjJGpK0HgCuHZb/WnVNlF2Msqu7ILVLI1+w6qggw06vN6p7dFtAgr YzdoAA/WUblyMQs2yW21QT4TApD/cAz89P8oEggJHiyrb+dxYsZP1c1Zo3YzZTUm EFp7EXB/7M/qWYa69P69Mo7II4U29mLvG2yhperfZ8ZpZQFrpENLszfz1gAcXZ82 ffBoCe4BUjM+1SNbdkW8MuKC -----END CERTIFICATE-----Generated at Mon Sep 21 21:26:17 2026 by rpki-client