$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: W/FuJ3NoaGmdKZ2Id20vqs1uw0YqpM284EyPNFSCYUU= Subject key identifier: B1:84:A2:B8:42:3B:92:A1:3F:61:2F:B7:81:60:1F:33:86:F0:0F:66 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 015B Signing time: Thu 21 May 2026 05:05:03 +0000 Manifest this update: Thu 21 May 2026 05:05:02 +0000 Manifest next update: Thu 28 May 2026 05:05:02 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: bNPxBHeGE376MjwlnBmY0HTGAMFtmLh4U4j/ecyHT2U=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 9bbDY8F7VTJe7fWMHNRwEy390EAPlvg4QCMeRuahlMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: May 21 05:05:02 2026 GMT Not After : May 28 05:05:02 2026 GMT Subject: CN=6a0e927e-0ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:d2:c0:42:8c:c1:50:f2:dd:ef:97:74:15: ee:43:6e:4c:f4:04:8f:c7:55:dd:4e:ba:6c:91:1d: 49:1f:09:15:47:00:04:97:1c:a1:43:79:32:08:0e: 68:6a:21:96:34:8a:61:7b:ef:05:20:1f:55:60:ac: f2:01:71:a7:88:bd:80:ae:c8:98:2e:2b:58:7a:5a: a1:47:c2:8b:5c:18:9e:e9:64:2a:8f:cc:d8:00:e1: df:2d:de:e0:21:a8:63:da:d2:53:a8:e2:6f:36:44: ab:f1:35:fb:78:51:fb:3d:65:09:36:96:92:8a:c8: f4:cd:42:22:85:7b:31:b5:4d:ea:5d:ca:78:83:03: 83:da:3a:1d:4d:76:c8:22:d5:13:61:bd:f5:40:41: fd:43:89:95:47:07:99:d5:13:05:8b:09:66:0c:6f: 68:4f:91:eb:3c:62:15:81:94:95:30:bc:2e:5a:07: 83:e3:f4:6b:64:e6:bb:f8:c3:88:cf:79:4f:75:36: 23:47:1e:27:23:78:45:fe:e9:7c:3c:20:95:c4:b6: 9d:94:97:3e:ad:17:61:fa:be:8f:3d:cf:97:fe:ba: 9c:75:68:a6:4b:e4:0f:6e:d5:c3:15:81:dc:62:3b: bd:31:0f:89:26:7d:a1:8a:8e:25:91:14:ba:0d:93: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:84:A2:B8:42:3B:92:A1:3F:61:2F:B7:81:60:1F:33:86:F0:0F:66 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:58:8b:9d:18:0b:71:94:9d:e6:fc:ca:8a:45:ed:2e:bf:13: ca:f1:20:a9:9b:83:9a:58:4e:38:43:3a:4e:0c:2a:b8:ab:b7: 98:b1:6b:e0:91:48:11:c6:e2:b8:07:3f:a2:62:fd:e0:f2:e7: 19:5c:35:4f:06:6e:b4:b0:86:71:41:4d:79:bc:e0:b2:9a:1c: 76:4c:2b:10:47:40:d7:47:19:59:36:f8:0a:b0:53:e7:08:ad: f1:3e:4f:f6:c4:58:27:98:aa:53:11:4a:a5:fa:44:b1:11:d0: c8:45:4b:dd:39:cc:21:fb:6c:f3:15:7b:41:02:7d:65:c0:5f: 76:cd:da:03:e4:2e:87:b8:98:6f:11:f7:c5:19:92:62:e6:d6: d1:b5:dc:b5:f7:58:99:5b:96:a5:f2:ad:1e:e4:c4:43:1e:f8: cb:d3:33:db:44:c7:db:2e:4a:78:35:e4:fd:e5:e8:96:cd:0f: fc:b9:f6:7b:82:b2:b8:49:82:ea:4c:7c:62:71:37:a2:a6:92: 50:95:9b:eb:2b:22:a4:a7:a4:86:a9:fe:02:c9:a8:31:91:7d: 73:16:69:cf:93:8a:a9:48:bb:79:91:43:55:9b:11:8a:9e:b5: 8c:1d:4f:a1:0e:4d:cc:9b:88:7c:85:4d:79:c7:06:2b:0d:d9: 04:c2:f6:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjYwNTIxMDUwNTAyWhcNMjYwNTI4MDUwNTAyWjAYMRYwFAYD VQQDEw02YTBlOTI3ZS0wY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXDSwEKMwVDy3e+XdBXuQ25M9ASPx1XdTrpskR1JHwkVRwAElxyhQ3kyCA5o aiGWNIphe+8FIB9VYKzyAXGniL2ArsiYLitYelqhR8KLXBie6WQqj8zYAOHfLd7g Iahj2tJTqOJvNkSr8TX7eFH7PWUJNpaSisj0zUIihXsxtU3qXcp4gwOD2jodTXbI ItUTYb31QEH9Q4mVRweZ1RMFiwlmDG9oT5HrPGIVgZSVMLwuWgeD4/RrZOa7+MOI z3lPdTYjRx4nI3hF/ul8PCCVxLadlJc+rRdh+r6PPc+X/rqcdWimS+QPbtXDFYHc Yju9MQ+JJn2hio4lkRS6DZNdQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGEorhC O5KhP2Evt4FgHzOG8A9mMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQViLnRgLcZSd5vzKikXtLr8TyvEgqZuDmlhOOEM6TgwquKu3mLFr4JFIEcbi uAc/omL94PLnGVw1TwZutLCGcUFNebzgspocdkwrEEdA10cZWTb4CrBT5wit8T5P 9sRYJ5iqUxFKpfpEsRHQyEVL3TnMIfts8xV7QQJ9ZcBfds3aA+Quh7iYbxH3xRmS YubW0bXctfdYmVuWpfKtHuTEQx74y9Mz20TH2y5KeDXk/eXols0P/Ln2e4KyuEmC 6kx8YnE3oqaSUJWb6ysipKekhqn+AsmoMZF9cxZpz5OKqUi7eZFDVZsRip61jB1P oQ5NzJuIfIVNeccGKw3ZBML2Qw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:29 2026 by rpki-client