$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: OpF3WyXXYZD+142W25fQhiTkL7kXsASngB3Egh77mQU= Subject key identifier: 11:F7:32:DA:0B:41:96:6E:6E:38:1B:42:C2:F9:83:60:D5:58:0B:A9 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 35 Signing time: Mon 01 Jun 2026 09:28:50 +0000 Manifest this update: Mon 01 Jun 2026 09:28:50 +0000 Manifest next update: Mon 08 Jun 2026 09:28:50 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: VSPDfyoidLPJkS67C9s97OMqwczfUu/saK38EEYPIaU=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Jun 1 09:28:50 2026 GMT Not After : Jun 8 09:28:50 2026 GMT Subject: CN=6a1d50d2-4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:b9:f6:fa:77:c6:ba:8f:ff:a9:28:e4:26: f2:b5:df:b4:c7:2e:11:c2:b1:01:f0:36:fd:0c:05: c7:59:cb:3a:d6:79:10:c7:31:e1:5d:11:e2:6d:63: 15:6c:1d:4f:f1:06:e7:b5:d1:93:8f:23:4a:41:20: ed:0a:c7:0b:da:8f:2a:c6:95:9c:d8:5a:18:ad:34: a5:bc:08:41:8a:39:a1:27:0c:b6:4f:4a:fa:dc:18: fd:9f:5d:75:54:b8:42:bf:a8:3a:1c:8d:bc:f9:95: f1:77:35:5f:3d:55:da:78:c3:75:26:38:46:93:80: 52:15:b6:80:8d:a1:b5:86:09:35:df:0d:95:0b:32: 23:31:23:9d:30:57:c3:18:1f:c4:75:e0:4f:39:da: cf:e4:2e:d9:e1:26:5a:af:6c:3b:17:eb:e3:e9:26: 3e:d1:30:c1:32:0e:4e:f1:a1:be:32:4f:af:98:c0: 27:02:80:bf:f8:94:a1:28:2d:1d:e3:c7:ad:dd:eb: d3:1e:12:5b:77:a0:02:ff:aa:90:13:80:dc:64:8b: 3c:95:eb:dd:ae:2b:0a:02:5a:92:42:52:71:a0:aa: 69:a0:83:bc:ae:ad:dd:bc:2f:79:0b:a6:fa:fb:cc: 37:7f:e5:01:af:c2:4a:3c:8c:a8:22:bc:94:14:bb: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:32:DA:0B:41:96:6E:6E:38:1B:42:C2:F9:83:60:D5:58:0B:A9 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:4e:96:14:3e:14:b2:0e:e6:52:5a:de:79:b5:b1:e9:00: 65:0b:26:0f:0c:2f:fc:79:37:8f:b4:78:7c:ae:5d:42:2d:71: 85:18:9f:39:30:3b:62:26:b0:f5:f2:04:28:d7:27:a9:33:3a: 3a:ef:31:c3:24:75:0d:50:f9:46:42:30:55:ab:5e:18:65:b9: 76:86:e0:15:c5:ab:b1:3e:4b:3c:af:58:f8:85:9b:13:fc:1b: 92:75:c8:12:b2:08:90:25:a4:8e:de:75:ae:55:0e:fb:95:83: 20:34:4a:d7:72:80:44:25:f8:a3:ce:a3:1e:23:ee:ab:49:33: c3:47:6a:3a:66:6a:68:ed:14:e9:f9:72:37:88:9c:42:4a:82: 64:d0:7d:b4:7f:b7:d2:04:9d:fc:7d:59:22:33:f8:8c:1b:a4: bd:1c:e8:87:54:a3:40:05:ef:d7:2c:f1:f7:50:87:9b:40:1e: 34:f0:53:19:f0:2c:55:2e:75:9c:84:b2:09:88:9e:75:c2:7c: 37:8a:3e:a5:84:ad:fa:6c:c7:60:71:7d:a0:89:fb:58:8e:84: 30:c9:c5:53:7f:f1:45:28:8b:08:e6:59:27:14:dd:73:02:7b: 56:17:36:fe:7c:1c:6e:c4:a7:68:ba:30:b4:b4:f9:77:e8:28: 29:b7:1c:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjA2MDEwOTI4NTBaFw0yNjA2MDgwOTI4NTBaMBgxFjAUBgNV BAMTDTZhMWQ1MGQyLTQ0OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI6rn2+nfGuo//qSjkJvK137THLhHCsQHwNv0MBcdZyzrWeRDHMeFdEeJtYxVs HU/xBue10ZOPI0pBIO0KxwvajyrGlZzYWhitNKW8CEGKOaEnDLZPSvrcGP2fXXVU uEK/qDocjbz5lfF3NV89Vdp4w3UmOEaTgFIVtoCNobWGCTXfDZULMiMxI50wV8MY H8R14E852s/kLtnhJlqvbDsX6+PpJj7RMMEyDk7xob4yT6+YwCcCgL/4lKEoLR3j x63d69MeElt3oAL/qpATgNxkizyV692uKwoCWpJCUnGgqmmgg7yurd28L3kLpvr7 zDd/5QGvwko8jKgivJQUu0IhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEfcy2gtB lm5uOBtCwvmDYNVYC6kwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx9E6WFD4Usg7mUlreebWx6QBlCyYPDC/8eTePtHh8rl1CLXGFGJ85MDtiJrD1 8gQo1yepMzo67zHDJHUNUPlGQjBVq14YZbl2huAVxauxPks8r1j4hZsT/BuSdcgS sgiQJaSO3nWuVQ77lYMgNErXcoBEJfijzqMeI+6rSTPDR2o6Zmpo7RTp+XI3iJxC SoJk0H20f7fSBJ38fVkiM/iMG6S9HOiHVKNABe/XLPH3UIebQB408FMZ8CxVLnWc hLIJiJ51wnw3ij6lhK36bMdgcX2giftYjoQwycVTf/FFKIsI5lknFN1zAntWFzb+ fBxuxKdoujC0tPl36Cgptxzd -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:25 2026 by rpki-client