$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: UbQz8Ncui2uRcdIptVXF9iKAmYYYuJBOJj1EzSrQINU= Subject key identifier: 70:AB:D0:0C:A6:D1:27:A2:64:8B:6B:7D:BA:FB:C8:70:15:7B:F1:B7 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 0262 Signing time: Fri 15 May 2026 02:16:05 +0000 Manifest this update: Fri 15 May 2026 02:16:04 +0000 Manifest next update: Fri 22 May 2026 02:16:04 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: UhDSaOMQxXLyivyMcIaMo5XdNbDbPlnpAULy8MAXaUo=) 2: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE=) 3: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 02:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: May 15 02:16:04 2026 GMT Not After : May 22 02:16:04 2026 GMT Subject: CN=6a0681e5-e61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:1a:75:b6:a5:fe:4d:ec:54:05:15:e0:1f: 5f:da:ba:d8:27:f6:ea:f3:96:c8:fc:93:1f:0a:af: 00:2d:62:7f:5f:50:02:49:f9:87:21:25:41:8f:2f: fa:da:f0:cf:d3:fc:37:97:73:e3:38:b3:db:49:7a: bb:07:49:5b:db:58:ab:9f:cf:0a:3a:15:7f:40:c9: 51:49:16:c7:e5:c5:00:a5:6c:65:86:71:36:66:3e: b4:f2:cd:82:6b:17:ae:17:7b:54:2a:a5:b8:a0:8e: 8c:3f:90:dd:fa:c8:d3:af:85:da:4b:62:73:d3:1a: 1c:48:bb:95:e4:01:96:b7:29:d4:21:91:d2:0a:37: c9:70:1c:79:c1:02:b5:d4:d3:f3:42:51:d0:83:86: a3:07:f1:89:f7:c3:43:88:b7:b8:f8:6a:21:bc:df: a5:be:61:57:24:5e:2d:b4:44:91:e5:d8:9c:19:93: 2b:0f:cd:7d:c7:4c:9b:35:41:46:ae:ab:ca:59:39: c2:c0:5d:c7:f9:ec:cc:17:67:c4:9d:f5:d2:e4:88: e0:0a:a1:35:d4:cd:1c:67:7a:53:36:54:09:e8:c9: df:f8:0a:db:de:74:d1:bd:5a:65:ff:a3:bd:0c:9b: 58:f0:39:1c:7d:86:92:04:a4:d6:d9:b5:43:a0:fe: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AB:D0:0C:A6:D1:27:A2:64:8B:6B:7D:BA:FB:C8:70:15:7B:F1:B7 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:52:1f:1d:a6:8b:b4:7c:b5:94:7d:46:10:f1:d5:55:1d:5b: e1:d4:19:32:d0:25:85:ce:fe:48:2d:49:cc:aa:9b:4e:35:94: b2:a8:53:e6:d5:54:57:6c:56:24:4e:48:c9:10:8f:58:32:73: f3:cf:e0:76:bb:e8:ff:70:49:2c:ea:c8:a4:ef:6d:17:c8:88: 03:66:de:c6:a0:01:f0:d3:2c:63:40:aa:c3:80:87:4c:64:a2: 75:ba:8b:30:f7:a3:f0:2e:af:8b:8d:10:ed:5d:e2:7e:2e:65: cd:b4:c6:ba:7c:f5:0a:52:41:7d:e1:e6:6c:e2:59:2f:77:df: 13:9d:a4:41:63:c5:56:35:c3:16:6a:2c:fa:c8:63:1b:a1:ef: 7e:1f:8a:f6:f4:55:d2:f5:69:88:c7:2f:1c:07:ff:4d:c5:38: 36:73:30:6e:8a:26:df:56:b8:53:1f:d0:d5:24:30:28:aa:20: 2b:c7:7d:ea:b1:01:b6:df:72:88:ce:68:13:a7:89:1e:57:1a: fa:0e:ae:1a:cb:e0:69:b4:f4:fd:76:e2:3b:bf:81:cf:64:08: 00:a8:83:55:95:4d:6c:01:95:74:76:1d:b5:6e:ea:7f:ed:06: 9f:17:ba:32:c4:07:6c:72:94:55:90:bf:8d:9b:da:4b:03:34: 6e:d6:29:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwNTE1MDIxNjA0WhcNMjYwNTIyMDIxNjA0WjAYMRYwFAYD VQQDEw02YTA2ODFlNS1lNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogcadbal/k3sVAUV4B9f2rrYJ/bq85bI/JMfCq8ALWJ/X1ACSfmHISVBjy/6 2vDP0/w3l3PjOLPbSXq7B0lb21irn88KOhV/QMlRSRbH5cUApWxlhnE2Zj608s2C axeuF3tUKqW4oI6MP5Dd+sjTr4XaS2Jz0xocSLuV5AGWtynUIZHSCjfJcBx5wQK1 1NPzQlHQg4ajB/GJ98NDiLe4+GohvN+lvmFXJF4ttESR5dicGZMrD819x0ybNUFG rqvKWTnCwF3H+ezMF2fEnfXS5IjgCqE11M0cZ3pTNlQJ6Mnf+Arb3nTRvVpl/6O9 DJtY8DkcfYaSBKTW2bVDoP7DoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCr0Aym 0SeiZItrfbr7yHAVe/G3MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1IfHaaLtHy1lH1GEPHVVR1b4dQZMtAlhc7+SC1JzKqbTjWUsqhT5tVUV2xW JE5IyRCPWDJz88/gdrvo/3BJLOrIpO9tF8iIA2bexqAB8NMsY0Cqw4CHTGSidbqL MPej8C6vi40Q7V3ifi5lzbTGunz1ClJBfeHmbOJZL3ffE52kQWPFVjXDFmos+shj G6Hvfh+K9vRV0vVpiMcvHAf/TcU4NnMwboom31a4Ux/Q1SQwKKogK8d96rEBtt9y iM5oE6eJHlca+g6uGsvgabT0/XbiO7+Bz2QIAKiDVZVNbAGVdHYdtW7qf+0Gnxe6 MsQHbHKUVZC/jZvaSwM0btYptA== -----END CERTIFICATE-----Generated at Fri May 15 20:45:18 2026 by rpki-client