$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: gVYpCxO2t6DaO6iv+eeJPJw310yzvwD8e2tMXInFm20= Subject key identifier: BE:CF:4B:E9:86:0B:F8:1A:CF:B8:A6:86:AE:13:19:1E:FA:88:B2:03 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0526 Signing time: Mon 01 Jun 2026 00:14:01 +0000 Manifest this update: Mon 01 Jun 2026 00:14:00 +0000 Manifest next update: Mon 08 Jun 2026 00:14:00 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: 1aokFU0pwJjYrHKK7O5zQMGce8r+OidxuCXgAJRc5tk=) 2: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 3: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 4: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 00:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Jun 1 00:14:00 2026 GMT Not After : Jun 8 00:14:00 2026 GMT Subject: CN=6a1ccec9-0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:70:15:74:fa:f2:5f:23:dc:13:26:a2:f6: 83:eb:2d:8c:d1:46:23:26:59:10:47:aa:f3:92:61: 1e:97:6b:3a:2a:0e:61:f5:39:d2:fa:0a:a7:e2:8c: 6c:72:46:a3:c1:6d:de:38:aa:bf:c2:4d:5e:81:b0: dc:2f:af:a7:e9:34:78:1b:ef:c6:3a:5f:1d:f5:fe: 15:b5:11:21:d4:b9:0f:84:3f:c1:f8:c4:f8:a7:5d: 0a:98:f2:73:72:e9:16:5b:5c:29:7f:ee:19:2f:41: cb:3a:1e:fc:bd:62:c3:78:c1:ef:99:56:62:ce:ad: e8:d3:6c:b3:96:99:f3:d2:42:4f:28:b0:48:f7:48: d0:ff:ee:51:57:3f:4b:f4:3e:f1:54:23:c3:6e:20: 91:8c:b4:61:d8:a4:a7:8b:61:ca:d4:a2:f6:89:fc: e6:8c:e3:9a:ac:1e:74:17:f3:89:f1:c2:d2:1b:83: ac:eb:e4:eb:88:7c:02:ae:25:2b:fe:99:14:78:d2: a3:03:64:4b:2c:89:d9:ba:49:83:0a:20:0a:e4:0d: 6f:ec:9c:dc:c6:28:46:47:c0:64:43:65:d8:a9:12: a3:8d:dd:5d:68:59:fd:a1:4e:ca:15:d5:c6:b5:83: 94:5f:ee:cd:e2:3d:e3:eb:5a:86:b0:d5:13:d1:73: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CF:4B:E9:86:0B:F8:1A:CF:B8:A6:86:AE:13:19:1E:FA:88:B2:03 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ec:f4:8c:fa:6e:df:0d:ae:0a:2a:cf:e7:5e:4b:e4:4a:cd: af:3f:d4:9e:ab:d4:11:b2:ad:ef:3a:59:19:96:04:e7:fd:56: 16:ab:18:bb:13:46:08:8c:78:5b:ae:31:39:af:03:28:57:6c: b7:a7:a5:0b:3f:e7:bf:25:65:de:1a:f9:f4:87:49:33:fd:21: 64:53:58:1a:93:0d:9f:d8:ae:09:0b:d2:8d:b1:ee:a2:d3:7d: 7b:76:c6:8d:02:70:ea:52:4c:69:1e:9e:df:88:79:da:13:ad: 2a:dd:6d:15:c9:b1:b2:ad:27:6a:40:33:04:d3:a2:21:ba:f9: a7:81:9e:5f:1a:43:8f:cb:b0:6d:90:7d:a2:18:00:fc:61:5c: 1d:fe:8d:dd:87:dc:e0:21:41:e6:b3:98:74:75:4d:7b:fa:e9: b3:06:7a:27:8e:cb:8c:01:44:fb:b8:87:72:1d:1f:ed:c0:54: 68:6e:16:a2:30:80:43:2a:7d:77:95:34:ca:7a:33:30:68:10: 04:a5:20:bb:51:62:c5:b9:d7:01:7c:1d:d5:14:b2:6e:7e:0e: 8d:6f:79:a3:c8:d9:8d:2d:d0:89:ae:a0:0e:d2:d3:ae:ef:91: e2:f3:13:67:7e:b9:af:9a:14:13:01:76:7e:89:af:ba:11:82: c5:2a:88:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwNjAxMDAxNDAwWhcNMjYwNjA4MDAxNDAwWjAYMRYwFAYD VQQDEw02YTFjY2VjOS0wYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6RwFXT68l8j3BMmovaD6y2M0UYjJlkQR6rzkmEel2s6Kg5h9TnS+gqn4oxs ckajwW3eOKq/wk1egbDcL6+n6TR4G+/GOl8d9f4VtREh1LkPhD/B+MT4p10KmPJz cukWW1wpf+4ZL0HLOh78vWLDeMHvmVZizq3o02yzlpnz0kJPKLBI90jQ/+5RVz9L 9D7xVCPDbiCRjLRh2KSni2HK1KL2ifzmjOOarB50F/OJ8cLSG4Os6+TriHwCriUr /pkUeNKjA2RLLInZukmDCiAK5A1v7JzcxihGR8BkQ2XYqRKjjd1daFn9oU7KFdXG tYOUX+7N4j3j61qGsNUT0XPCwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7PS+mG C/gaz7imhq4TGR76iLIDMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjOz0jPpu3w2uCirP515L5ErNrz/UnqvUEbKt7zpZGZYE5/1WFqsYuxNGCIx4 W64xOa8DKFdst6elCz/nvyVl3hr59IdJM/0hZFNYGpMNn9iuCQvSjbHuotN9e3bG jQJw6lJMaR6e34h52hOtKt1tFcmxsq0nakAzBNOiIbr5p4GeXxpDj8uwbZB9ohgA /GFcHf6N3Yfc4CFB5rOYdHVNe/rpswZ6J47LjAFE+7iHch0f7cBUaG4WojCAQyp9 d5U0ynozMGgQBKUgu1FixbnXAXwd1RSybn4OjW95o8jZjS3Qia6gDtLTru+R4vMT Z365r5oUEwF2fomvuhGCxSqISg== -----END CERTIFICATE-----Generated at Tue Jun 2 22:16:00 2026 by rpki-client