$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: ik+f9odjvC7b0FP+/dof67HcnEl5zT0dFCJYqcKikUk= Subject key identifier: 56:52:B4:D1:5C:7A:F9:09:42:1D:F5:FB:BD:81:E6:67:0B:AF:6C:B2 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 09FF Signing time: Wed 20 May 2026 19:54:08 +0000 Manifest this update: Wed 20 May 2026 19:54:08 +0000 Manifest next update: Wed 27 May 2026 19:54:08 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: VCiSFC4sghTWsMXdakGVU+PtKG8I9pcin5ZgpJHG80c=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: zkzY1rKegM6NQQe7mOjFJys4MtW8mm7qlKs6iHooBhE=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: GS8FiTHe76tR+EGLanHlCxxJBZXlT9b5WZ9G9Dgo+Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: May 20 19:54:08 2026 GMT Not After : May 27 19:54:08 2026 GMT Subject: CN=6a0e1160-1b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:75:94:e5:f3:1c:4a:8f:59:1a:74:cd:c0:9b: 93:70:7a:d6:10:db:ec:e0:d4:7d:bc:b9:18:ea:71: 92:8b:2d:3b:0c:5b:8f:a0:b0:1e:80:7f:dc:da:ed: 0d:01:01:72:72:c4:b8:e3:7d:00:db:08:7e:de:e1: fd:7c:2a:3f:32:18:18:74:ba:1e:9a:be:f5:8a:cb: 27:d9:42:d7:14:5e:3f:ca:12:de:5a:6a:01:b2:54: af:da:09:37:b7:33:10:36:5c:a0:7f:11:0f:94:12: 5f:3c:ef:6f:88:cd:91:7a:9f:b1:d6:4d:1d:c2:9f: 86:46:5e:d5:6e:c0:91:cf:78:17:5a:56:84:b0:0c: 07:20:c2:bf:13:48:b1:2f:bb:af:94:24:93:cd:f5: 49:a0:fc:90:22:38:a9:cc:ea:8f:4f:9c:d5:c7:b7: ca:34:64:1c:51:bc:32:ec:f9:57:00:49:17:14:0c: cb:bc:12:88:ff:8e:80:0f:6e:de:a4:64:f6:bc:f4: 0a:f1:ea:db:87:2d:da:7b:27:8b:b5:3f:c5:14:9c: 14:d7:e1:bc:92:7e:26:ff:cb:9f:1f:c0:92:44:e5: 8f:52:89:e8:b9:13:1e:00:95:19:2b:51:0e:72:51: 50:f3:88:ec:c9:fb:65:c7:92:87:3c:ba:35:b2:d5: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:52:B4:D1:5C:7A:F9:09:42:1D:F5:FB:BD:81:E6:67:0B:AF:6C:B2 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:42:09:8b:f8:2a:f9:81:af:d9:7b:1b:82:1a:e8:ed:be:d3: 6a:47:cd:b2:66:9d:0a:9f:37:26:27:54:57:82:7c:7d:ae:0d: 1a:e3:90:68:49:e1:18:67:57:a5:96:29:60:12:cb:90:ef:80: c3:38:7e:e8:ae:ef:f0:47:86:c7:e9:9f:3a:32:2b:53:bf:df: f3:74:80:af:48:69:52:5d:be:77:c2:e0:07:27:0c:0e:a2:9d: a7:67:fe:00:eb:11:9e:0d:ec:b2:fd:96:a0:b5:93:80:ea:3c: 3b:e8:26:81:08:f1:8a:8d:4e:e8:2a:7d:1d:76:a4:db:36:4d: 2a:0a:0b:3c:92:81:80:ab:3e:ea:e7:c4:49:9c:b7:d8:ac:60: 98:8c:82:99:35:bf:06:7b:bd:2c:91:05:88:46:d8:6d:60:fc: 42:be:f4:23:ca:4a:27:0f:fb:27:87:6c:b2:a2:45:62:2e:79: 4b:48:2a:b5:8e:d1:e7:8e:56:1c:e6:99:78:1f:94:b3:75:a0: cd:ff:44:33:56:da:73:ea:41:88:71:83:a5:13:ec:62:cd:d2: 53:29:9e:30:f1:00:70:aa:ca:95:71:9b:8b:37:6e:87:96:fc: 6e:df:a1:5a:b0:00:84:76:df:47:3f:6a:db:5a:d1:4c:ac:6e: 53:a7:a1:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjYwNTIwMTk1NDA4WhcNMjYwNTI3MTk1NDA4WjAYMRYwFAYD VQQDEw02YTBlMTE2MC0xYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HWU5fMcSo9ZGnTNwJuTcHrWENvs4NR9vLkY6nGSiy07DFuPoLAegH/c2u0N AQFycsS4430A2wh+3uH9fCo/MhgYdLoemr71issn2ULXFF4/yhLeWmoBslSv2gk3 tzMQNlygfxEPlBJfPO9viM2Rep+x1k0dwp+GRl7VbsCRz3gXWlaEsAwHIMK/E0ix L7uvlCSTzfVJoPyQIjipzOqPT5zVx7fKNGQcUbwy7PlXAEkXFAzLvBKI/46AD27e pGT2vPQK8erbhy3aeyeLtT/FFJwU1+G8kn4m/8ufH8CSROWPUonouRMeAJUZK1EO clFQ84jsyftlx5KHPLo1stU67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZStNFc evkJQh31+72B5mcLr2yyMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoUIJi/gq+YGv2Xsbghro7b7TakfNsmadCp83JidUV4J8fa4NGuOQaEnhGGdX pZYpYBLLkO+Awzh+6K7v8EeGx+mfOjIrU7/f83SAr0hpUl2+d8LgBycMDqKdp2f+ AOsRng3ssv2WoLWTgOo8O+gmgQjxio1O6Cp9HXak2zZNKgoLPJKBgKs+6ufESZy3 2KxgmIyCmTW/Bnu9LJEFiEbYbWD8Qr70I8pKJw/7J4dssqJFYi55S0gqtY7R545W HOaZeB+Us3Wgzf9EM1bac+pBiHGDpRPsYs3SUymeMPEAcKrKlXGbizduh5b8bt+h WrAAhHbfRz9q21rRTKxuU6ehog== -----END CERTIFICATE-----Generated at Thu May 21 10:39:30 2026 by rpki-client