$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: jtgzX3tmk3IqfYfQVei4LkCBAYjCB3jmSXhJxpAE1V0= Subject key identifier: 9E:CE:92:22:2D:1B:A1:7A:F7:77:FF:77:DA:E3:B4:14:8A:60:13:CF Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 3556 Signing time: Tue 02 Jun 2026 14:37:52 +0000 Manifest this update: Tue 02 Jun 2026 14:37:51 +0000 Manifest next update: Tue 09 Jun 2026 14:37:51 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: v1rWVUgOulFSeTcZjkKEz4QBvsvvqEOK/CgGXpnIqQM=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) 3: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) 4: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Jun 2 14:37:51 2026 GMT Not After : Jun 9 14:37:51 2026 GMT Subject: CN=6a1eeabf-3541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:0b:f5:28:7a:e4:27:92:68:0d:ab:25:08: a8:fe:cb:9a:98:cb:81:3e:00:37:5f:c1:2f:59:fa: 78:e2:a0:cb:a8:3f:e1:b9:77:7e:dc:1e:12:ab:dd: 0f:83:ae:df:c0:51:61:df:6b:be:01:51:d1:61:6b: f3:02:bf:c5:b2:55:98:66:38:80:f9:21:e4:b4:25: 50:72:09:aa:64:25:47:5a:ca:ec:75:55:89:c1:21: d4:44:87:e8:2b:ba:dc:eb:3d:3c:d1:02:a8:d1:0b: 9b:5b:ad:f1:2c:60:86:53:25:f4:c7:55:c3:5e:f0: 48:26:88:a4:eb:cf:ea:bc:3d:31:f7:4a:24:13:f6: 4d:42:b4:87:53:32:54:0c:e1:67:40:16:c2:03:28: 6e:f8:2c:96:a4:75:64:cc:67:bd:1f:e5:98:6a:04: 73:14:25:55:3b:bb:51:8e:b2:f2:97:7f:9e:b2:9c: f8:52:76:81:0f:12:23:dc:f1:a2:db:4b:a2:e7:36: 7f:3a:a3:d3:5c:53:ca:87:41:36:9d:6b:56:0c:06: b8:9d:ff:e9:64:3e:5c:d7:e8:2c:0e:4e:f5:16:02: 9b:89:01:c4:87:1a:ac:b2:11:f1:55:a2:26:d4:03: c5:d6:4b:af:5a:1a:18:a7:1d:91:93:64:36:df:fe: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:92:22:2D:1B:A1:7A:F7:77:FF:77:DA:E3:B4:14:8A:60:13:CF X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:d8:47:d5:f4:53:54:21:86:e0:fc:6b:eb:bf:c1:5d:6f: e0:5d:7c:2d:57:cc:2d:94:66:b2:94:50:b5:ec:69:bf:8e:45: 03:54:2e:8c:a7:87:fc:30:63:59:d2:4f:68:98:4e:61:9a:5b: fe:d6:09:9f:84:52:83:55:02:ce:49:68:79:38:6c:6c:4f:07: 86:4b:8b:b6:18:d2:4f:f2:24:38:bf:2f:be:6b:31:d0:94:d7: f3:25:db:f9:4a:aa:47:e1:76:e6:41:56:a2:ce:68:4d:f1:cc: 46:13:7f:44:43:ce:f9:e4:83:fd:4e:0e:e8:1d:ad:ea:69:f7: 75:24:ad:7b:ba:6d:35:a2:6c:ac:2a:bd:be:a9:b1:95:f5:23: 5e:e5:2a:2e:da:c6:20:66:fc:16:e6:67:b4:e1:b4:c8:6a:9d: c1:5f:16:10:83:02:b1:67:43:02:56:a0:30:ca:6a:5a:9b:02: 82:77:fc:6a:33:00:2d:b0:60:2d:e1:30:c2:1a:7d:4c:09:86: de:2f:e0:75:e5:5b:5d:41:e3:54:eb:fd:18:12:f7:75:66:bc: 89:cc:ed:97:37:71:e9:30:68:1b:db:29:88:11:f9:76:c1:fb: 19:67:e8:ac:25:8a:22:68:4e:37:23:ff:bc:46:a7:89:30:37: dc:fe:24:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwNjAyMTQzNzUxWhcNMjYwNjA5MTQzNzUxWjAYMRYwFAYD VQQDEw02YTFlZWFiZi0zNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBYL9Sh65CeSaA2rJQio/suamMuBPgA3X8EvWfp44qDLqD/huXd+3B4Sq90P g67fwFFh32u+AVHRYWvzAr/FslWYZjiA+SHktCVQcgmqZCVHWsrsdVWJwSHURIfo K7rc6z080QKo0QubW63xLGCGUyX0x1XDXvBIJoik68/qvD0x90okE/ZNQrSHUzJU DOFnQBbCAyhu+CyWpHVkzGe9H+WYagRzFCVVO7tRjrLyl3+espz4UnaBDxIj3PGi 20ui5zZ/OqPTXFPKh0E2nWtWDAa4nf/pZD5c1+gsDk71FgKbiQHEhxqsshHxVaIm 1APF1kuvWhoYpx2Rk2Q23/7LGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7OkiIt G6F693f/d9rjtBSKYBPPMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJy3YR9X0U1QhhuD8a+u/wV1v4F18LVfMLZRmspRQtexpv45FA1QujKeH/DBj WdJPaJhOYZpb/tYJn4RSg1UCzkloeThsbE8HhkuLthjST/IkOL8vvmsx0JTX8yXb +UqqR+F25kFWos5oTfHMRhN/REPO+eSD/U4O6B2t6mn3dSSte7ptNaJsrCq9vqmx lfUjXuUqLtrGIGb8FuZntOG0yGqdwV8WEIMCsWdDAlagMMpqWpsCgnf8ajMALbBg LeEwwhp9TAmG3i/gdeVbXUHjVOv9GBL3dWa8icztlzdx6TBoG9spiBH5dsH7GWfo rCWKImhONyP/vEaniTA33P4kNQ== -----END CERTIFICATE-----Generated at Tue Jun 2 22:09:28 2026 by rpki-client