$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: 8KcZPgb9zmIjjYP8seL2JMZT7CgeNhQVFT/0kI6Eaug= Subject key identifier: 79:CF:DA:15:16:49:02:AF:4B:4B:8D:54:ED:B5:9B:67:3F:B6:CC:62 Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0D21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0D17 Signing time: Wed 20 May 2026 18:08:30 +0000 Manifest this update: Wed 20 May 2026 18:08:29 +0000 Manifest next update: Wed 27 May 2026 18:08:29 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: abWYJ0Um1Zr8T0pdr2iNepiWPHn4Hywjq61J3CGM8gk=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: a71ernoBhJIlyoCkOYC1Njwd07ZtjDlydhtppbwh5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: May 20 18:08:29 2026 GMT Not After : May 27 18:08:29 2026 GMT Subject: CN=6a0df89d-494d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:35:8e:12:99:a8:90:3e:28:e6:7b:fe:8a: 9f:a0:f8:4d:39:0b:c6:8e:3a:64:3b:e3:5a:67:05: 45:6e:8e:16:5d:83:83:2c:bb:5f:fc:48:d1:21:31: 41:ec:67:fa:b1:7f:6d:21:94:a5:bd:80:ca:12:8d: 48:84:b4:42:b6:60:a2:da:14:45:32:f8:5a:84:92: 42:65:79:ba:ab:97:07:fe:e7:6d:dd:21:fb:0b:79: b2:dc:3e:f0:ee:5c:9c:48:98:fb:63:33:67:14:22: a8:fb:b3:81:6c:08:a1:36:6f:89:29:15:17:0f:eb: 01:87:da:95:9a:0c:2c:a6:d8:7c:f4:62:0e:33:59: 0b:00:63:24:95:9b:6b:85:b2:d3:39:b4:e1:24:a2: b2:86:f9:df:ce:5c:81:7b:04:f6:12:ff:d2:fb:58: 58:2b:60:dd:4d:46:af:c9:46:9f:e3:55:fd:b3:e8: b1:b1:ca:cc:7a:cd:00:0e:bd:78:44:6c:03:10:f8: e1:37:99:1c:f3:43:54:be:0d:b3:3c:1e:58:0d:c0: da:aa:a2:52:3b:23:53:1f:57:00:a3:ee:72:97:77: cf:31:16:78:4b:a5:e1:f8:2a:c7:fb:5c:e3:e8:4e: 21:cc:59:be:09:02:bb:57:81:d4:06:bb:bb:c3:85: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CF:DA:15:16:49:02:AF:4B:4B:8D:54:ED:B5:9B:67:3F:B6:CC:62 X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e6:a1:03:78:8d:86:c2:5b:a3:2d:82:1e:03:cf:57:59:cc: ea:c1:d1:80:cc:a7:c1:33:a0:09:a3:99:9e:a1:7e:5d:f4:36: d4:65:80:1e:33:fe:4a:83:77:a8:28:b8:5f:ae:5c:c9:21:05: 34:8a:4d:a8:dc:13:7f:28:bc:e4:e3:b7:82:a1:ec:b6:ea:01: 32:cf:bc:2d:1e:29:06:7c:4a:b6:40:a6:08:d1:cb:1f:8a:38: 61:9b:9a:43:f2:95:13:c4:6b:cb:2e:bb:59:0c:6e:dc:db:46: ff:45:f8:c5:47:a4:d0:92:a4:d3:80:36:55:a3:2d:cd:cc:20: c5:6e:a8:02:bc:b2:ac:d5:5e:c1:59:03:b0:ca:70:38:0e:2b: b0:d9:38:60:41:6e:4a:90:c4:47:cd:6a:12:fd:93:e0:88:7f: 20:91:b5:14:2c:24:98:74:91:7c:e4:a5:09:c2:71:2f:9e:d0: 21:07:99:fd:1e:68:2c:22:fa:68:80:08:50:ed:98:31:06:c6: 05:67:37:39:7c:93:8f:85:e0:1b:81:1b:31:50:ed:60:37:6d: bc:8b:20:a7:3e:94:60:0e:59:1b:be:86:16:0f:fa:24:a5:e8: 46:c9:76:4b:e6:97:9c:cf:2d:6c:82:1c:99:1a:65:6f:ff:9c: 16:85:57:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjYwNTIwMTgwODI5WhcNMjYwNTI3MTgwODI5WjAYMRYwFAYD VQQDEw02YTBkZjg5ZC00OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAQ1jhKZqJA+KOZ7/oqfoPhNOQvGjjpkO+NaZwVFbo4WXYODLLtf/EjRITFB 7Gf6sX9tIZSlvYDKEo1IhLRCtmCi2hRFMvhahJJCZXm6q5cH/udt3SH7C3my3D7w 7lycSJj7YzNnFCKo+7OBbAihNm+JKRUXD+sBh9qVmgwspth89GIOM1kLAGMklZtr hbLTObThJKKyhvnfzlyBewT2Ev/S+1hYK2DdTUavyUaf41X9s+ixscrMes0ADr14 RGwDEPjhN5kc80NUvg2zPB5YDcDaqqJSOyNTH1cAo+5yl3fPMRZ4S6Xh+CrH+1zj 6E4hzFm+CQK7V4HUBru7w4XqCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHnP2hUW SQKvS0uNVO21m2c/tsxiMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf+ahA3iNhsJboy2CHgPPV1nM6sHRgMynwTOgCaOZnqF+XfQ21GWAHjP+SoN3 qCi4X65cySEFNIpNqNwTfyi85OO3gqHstuoBMs+8LR4pBnxKtkCmCNHLH4o4YZua Q/KVE8Rryy67WQxu3NtG/0X4xUek0JKk04A2VaMtzcwgxW6oAryyrNVewVkDsMpw OA4rsNk4YEFuSpDER81qEv2T4Ih/IJG1FCwkmHSRfOSlCcJxL57QIQeZ/R5oLCL6 aIAIUO2YMQbGBWc3OXyTj4XgG4EbMVDtYDdtvIsgpz6UYA5ZG76GFg/6JKXoRsl2 S+aXnM8tbIIcmRplb/+cFoVXtg== -----END CERTIFICATE-----Generated at Thu May 21 10:24:24 2026 by rpki-client