$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json) Hash identifier: 50zjMTElCWqs/lBnnzSizpMUxG4QWAHuHvEfNxPGlsA= Subject key identifier: C3:03:C5:BA:8C:FC:EB:1E:15:16:AC:46:69:5B:AE:06:EC:56:5C:1B Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft Manifest number: 55 Signing time: Mon 01 Jun 2026 09:02:08 +0000 Manifest this update: Mon 01 Jun 2026 09:02:08 +0000 Manifest next update: Mon 08 Jun 2026 09:02:08 +0000 Files and hashes: 1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: oEyXULDQzRnRJhpUiJJfyq3452EumdTgMfi5tyY70gg=) 2: B8C57E86E40511F09F69296D616F56BC.roa (hash: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Jun 1 09:02:08 2026 GMT Not After : Jun 8 09:02:08 2026 GMT Subject: CN=6a1d4a90-5b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:fd:44:16:cd:ec:5c:c4:57:da:ee:d7:b9: 49:ce:00:df:15:ba:30:7a:90:e5:9a:36:fb:e1:45: ea:f4:e5:01:23:d5:f3:0b:e1:08:79:9f:39:3a:c8: 94:82:e3:ba:b4:40:b1:f8:b4:24:6e:6b:37:f6:f2: cc:74:6e:8c:75:4a:bc:3a:d3:73:a5:4d:a6:78:53: 3e:04:74:0b:52:9a:77:fb:01:96:39:72:d8:89:57: d4:cf:88:ca:31:01:29:5d:a6:b0:b5:19:1b:17:74: 87:ff:06:3d:24:ea:81:70:24:25:c1:1e:bd:07:95: 03:86:6d:63:bf:e3:fd:90:05:6d:30:eb:1b:91:a3: 82:d1:cc:90:0a:d9:fb:b2:a1:c3:27:dd:33:7a:64: c7:7b:a9:9e:42:c1:df:65:93:00:1e:15:5e:bf:8d: cb:41:4c:16:61:4a:3f:bd:6a:23:bb:b2:8c:95:06: 75:d1:ac:f2:e3:48:a3:8c:d5:3f:32:d3:68:81:ef: e4:3d:33:e2:53:5c:e2:a9:fb:fa:dd:f9:93:5b:f5: 46:2a:f2:d6:3f:a2:51:7f:72:9e:f9:38:04:fd:cb: 93:eb:2e:b1:23:4f:0c:90:68:58:0f:de:f9:d2:c9: ec:24:43:3d:f0:f5:32:86:8c:37:97:cc:c0:37:bd: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:C5:BA:8C:FC:EB:1E:15:16:AC:46:69:5B:AE:06:EC:56:5C:1B X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:13:7a:7d:79:7f:2c:1e:a1:c0:aa:7d:d6:9c:fb:c5:02:36: 37:eb:f6:61:a2:76:85:9e:5e:1d:48:73:04:0e:ef:06:44:09: 75:78:b8:4f:7d:3b:92:e6:a6:5c:1d:5b:0d:ae:e3:7d:64:ec: 5f:8c:32:06:44:9a:7c:9a:5c:79:fb:09:6d:ea:d2:0c:f7:4f: 0b:ed:14:15:a1:1b:28:c4:8a:8e:c4:be:f1:4a:33:54:d6:7c: 89:c6:79:02:23:c2:d9:03:9a:27:ce:e1:96:4b:bd:9d:a2:08: 08:b3:c4:72:1f:64:f9:6f:52:78:4b:bb:9c:42:e8:f8:e6:a1: 00:c2:a3:39:4a:fc:34:42:c9:5f:01:b8:90:dd:f0:8d:cf:ee: 51:90:43:f6:03:0e:c3:3c:0f:56:9e:65:fd:39:a5:f9:21:02: bc:22:b6:05:21:21:0b:ae:e9:55:dc:2a:01:5f:22:c8:16:6b: d8:f5:ff:e8:53:7e:c9:c2:d7:77:48:8e:e1:82:e5:dd:56:fc: 5d:fe:35:4d:ee:f7:13:ef:e3:27:04:f2:f3:e9:55:85:87:45: e9:56:78:4d:99:40:7c:1c:e1:f1:f5:8e:e5:7d:9e:5b:9a:a8: d4:e7:cf:cb:1b:9a:8f:d2:52:63:da:97:74:ef:bd:d2:4c:05: 8e:62:db:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNjA2MDEwOTAyMDhaFw0yNjA2MDgwOTAyMDhaMBgxFjAUBgNV BAMTDTZhMWQ0YTkwLTViMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT2/1EFs3sXMRX2u7XuUnOAN8VujB6kOWaNvvhRer05QEj1fML4Qh5nzk6yJSC 47q0QLH4tCRuazf28sx0box1Srw603OlTaZ4Uz4EdAtSmnf7AZY5ctiJV9TPiMox ASldprC1GRsXdIf/Bj0k6oFwJCXBHr0HlQOGbWO/4/2QBW0w6xuRo4LRzJAK2fuy ocMn3TN6ZMd7qZ5Cwd9lkwAeFV6/jctBTBZhSj+9aiO7soyVBnXRrPLjSKOM1T8y 02iB7+Q9M+JTXOKp+/rd+ZNb9UYq8tY/olF/cp75OAT9y5PrLrEjTwyQaFgP3vnS yewkQz3w9TKGjDeXzMA3vaVVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwwPFuoz8 6x4VFqxGaVuuBuxWXBswHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRI RkVkMGlMVkdGdjZaeUNGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHE3p9eX8sHqHAqn3WnPvFAjY36/ZhonaFnl4dSHMEDu8GRAl1eLhPfTuS5qZc HVsNruN9ZOxfjDIGRJp8mlx5+wlt6tIM908L7RQVoRsoxIqOxL7xSjNU1nyJxnkC I8LZA5onzuGWS72doggIs8RyH2T5b1J4S7ucQuj45qEAwqM5Svw0QslfAbiQ3fCN z+5RkEP2Aw7DPA9WnmX9OaX5IQK8IrYFISELrulV3CoBXyLIFmvY9f/oU37Jwtd3 SI7hguXdVvxd/jVN7vcT7+MnBPLz6VWFh0XpVnhNmUB8HOHx9Y7lfZ5bmqjU58/L G5qP0lJj2pd0773STAWOYtvn -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:01 2026 by rpki-client