$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json) Hash identifier: gKCOdGl6AVy+bfa/FGIAY0bwpdOfdioxWg1mQOZ3UTc= Subject key identifier: 7C:40:BA:28:2C:B5:FC:63:B2:8E:07:11:F6:03:B8:2E:D9:63:44:7E Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft Manifest number: 119D Signing time: Wed 20 May 2026 18:09:00 +0000 Manifest this update: Wed 20 May 2026 18:09:00 +0000 Manifest next update: Wed 27 May 2026 18:09:00 +0000 Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: aEZXD3VE6b8wt3Jbh6xe6w8s9rduTzkuJH44Vyuamm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Validity Not Before: May 20 18:09:00 2026 GMT Not After : May 27 18:09:00 2026 GMT Subject: CN=6a0df8bc-bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:65:4c:9d:3c:42:72:43:d3:c8:fa:fd:be: 7f:b1:cf:fa:fc:6f:fc:ef:67:e4:51:2b:d5:a4:60: 76:18:da:79:55:3b:2f:53:fd:c3:51:5f:cc:8c:de: 97:52:f0:40:87:8d:8b:39:6d:c2:0b:75:aa:40:fd: 94:f6:52:34:ad:5c:ce:b6:2d:97:7d:d9:dd:11:4c: 7a:7d:79:94:29:a1:bc:92:b8:2d:46:ff:71:fb:13: b5:42:9c:43:c0:0f:a0:2d:80:6d:c4:1e:16:63:a3: 5a:5b:66:8c:29:8c:4c:92:07:e8:98:bd:4e:e2:59: e6:4a:2b:e1:48:42:e6:64:b2:1d:e1:89:94:80:46: 16:b7:26:19:cf:7a:1f:7b:29:21:fb:03:8a:45:ff: 23:35:10:1c:43:49:83:b2:16:12:ed:76:4a:74:c8: fc:06:08:60:4a:cc:04:36:7c:cb:83:ad:53:7f:7f: af:ad:7d:a6:f5:78:4e:fe:76:b2:a5:45:2e:15:e7: b6:97:d5:e6:fe:1b:01:a7:95:96:46:8e:f7:e9:72: 59:08:c8:c5:b9:ca:0e:93:65:4c:8f:72:1a:5a:c3: 6c:e1:0a:bb:ea:e0:72:40:12:c4:4f:a9:7f:3b:fd: 05:25:00:4e:74:ef:64:2c:04:6f:f5:b8:6b:bf:0b: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:BA:28:2C:B5:FC:63:B2:8E:07:11:F6:03:B8:2E:D9:63:44:7E X509v3 Authority Key Identifier: keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:70:6d:03:d0:09:aa:f7:b2:30:0e:63:c2:4a:01:07:b9: 2b:8f:af:08:ff:27:71:c9:e7:40:c9:0f:04:4c:66:db:c1:4f: d9:a1:22:db:e8:fa:67:9f:25:c8:49:3d:d5:5d:cd:4a:fd:69: 79:6a:cc:e3:86:a6:d3:6d:5a:80:df:84:f8:2d:7b:71:a7:e9: fe:f7:66:68:d9:21:87:53:2e:3d:11:ac:8c:96:a6:a3:9b:a8: 96:c3:17:b5:1d:24:a8:d7:5b:15:c9:38:60:52:5c:b5:0a:43: ad:df:f5:4a:34:c7:e8:79:aa:a9:a9:04:ab:a8:80:39:dc:b6: c2:38:85:4e:07:fb:8d:1f:9a:5d:99:5a:9c:14:2e:79:87:29: 44:46:a1:15:fe:64:98:0b:4e:fb:fd:83:61:18:95:b0:7c:f0: b4:3c:7c:53:1e:6c:5e:4f:e9:e1:ff:ca:d2:61:43:c6:e0:fb: c1:b3:39:22:5d:c9:a0:1c:83:56:17:c3:b8:a7:f2:9e:8c:47: 6e:ac:b9:22:51:e8:3d:5c:6d:dc:1f:6a:20:e7:66:b0:9d:40: 22:84:26:19:57:b8:bd:0e:a2:af:e3:03:29:dc:38:a4:9c:3d: c3:0a:91:2d:ef:2d:3a:6c:cb:0b:c5:cc:47:bb:8a:8b:66:26: b1:30:82:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKDI0REFBN0E5QkFDNjU0OEQ4QUM2Q0QxMDU4MUM0QjdC RkQwNzY0NjUwHhcNMjYwNTIwMTgwOTAwWhcNMjYwNTI3MTgwOTAwWjAYMRYwFAYD VQQDEw02YTBkZjhiYy1iZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVNlTJ08QnJD08j6/b5/sc/6/G/872fkUSvVpGB2GNp5VTsvU/3DUV/MjN6X UvBAh42LOW3CC3WqQP2U9lI0rVzOti2XfdndEUx6fXmUKaG8krgtRv9x+xO1QpxD wA+gLYBtxB4WY6NaW2aMKYxMkgfomL1O4lnmSivhSELmZLId4YmUgEYWtyYZz3of eykh+wOKRf8jNRAcQ0mDshYS7XZKdMj8BghgSswENnzLg61Tf3+vrX2m9XhO/nay pUUuFee2l9Xm/hsBp5WWRo736XJZCMjFucoOk2VMj3IaWsNs4Qq76uByQBLET6l/ O/0FJQBOdO9kLARv9bhrvwvKcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxAuigs tfxjso4HEfYDuC7ZY0R+MB8GA1UdIwQYMBaAFCTap6m6xlSNisbNEFgcS3v9B2Rl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJMkt4czBRV0J4TGVfMEha R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcW5xYnJHVkkyS3hzMFFXQnhMZV8wSFpHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJ Mkt4czBRV0J4TGVfMEhaR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/dwbQPQCar3sjAOY8JKAQe5K4+vCP8nccnnQMkPBExm28FP2aEi2+j6Z58l yEk91V3NSv1peWrM44am021agN+E+C17cafp/vdmaNkhh1MuPRGsjJamo5uolsMX tR0kqNdbFck4YFJctQpDrd/1SjTH6HmqqakEq6iAOdy2wjiFTgf7jR+aXZlanBQu eYcpREahFf5kmAtO+/2DYRiVsHzwtDx8Ux5sXk/p4f/K0mFDxuD7wbM5Il3JoByD VhfDuKfynoxHbqy5IlHoPVxt3B9qIOdmsJ1AIoQmGVe4vQ6ir+MDKdw4pJw9wwqR Le8tOmzLC8XMR7uKi2YmsTCCvQ== -----END CERTIFICATE-----Generated at Thu May 21 10:39:56 2026 by rpki-client