$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: 1IoKWY2Hpr+23XZ/MGXaPnnSUos0P4mbQCR4v/kT22w= Subject key identifier: 11:2F:B7:07:4E:D4:3A:15:51:57:66:15:8E:B3:88:CB:DD:69:16:99 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 012E Signing time: Mon 01 Jun 2026 06:21:06 +0000 Manifest this update: Mon 01 Jun 2026 06:21:05 +0000 Manifest next update: Mon 08 Jun 2026 06:21:05 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: PoCuh3n2mly0MG+Ik/Bnivr310+lIAW6TfXMNmpKzu8=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: XN2qFLk/WXZP7FVPufQRRnSrAEl1mxWjwP4mfxHb7Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Jun 1 06:21:05 2026 GMT Not After : Jun 8 06:21:05 2026 GMT Subject: CN=6a1d24d2-9cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:0e:be:b5:cf:89:e3:99:24:87:db:22:88: ef:36:73:af:7a:22:0d:49:e8:f9:b2:b2:ac:2c:6a: 63:76:4f:af:71:ad:c2:76:45:f7:74:7a:bb:21:d8: 59:b8:d8:e8:83:1c:e1:e6:d3:8e:bc:73:d8:1f:a2: cc:1a:7b:37:29:59:25:87:3b:78:f3:58:a3:29:ba: 75:37:77:83:7a:d9:6a:b3:6e:3b:4e:f2:9d:bc:96: 31:4f:32:0d:7c:88:e6:42:ce:e0:32:09:9c:a3:db: 45:51:db:38:00:ce:15:33:df:87:4e:c8:87:25:62: 10:02:8e:c7:47:7a:c4:d2:ca:69:4e:b4:4f:4c:fe: 07:a1:23:28:5b:6b:74:cf:20:4c:6a:05:19:65:6b: f1:8c:c5:24:25:d7:c8:ca:fa:56:c5:b8:a9:f4:0e: ae:a4:21:e6:3e:97:ad:80:a7:98:22:a0:08:2b:db: 83:e8:7e:cc:af:70:a1:6e:05:6d:e2:b3:8a:5e:50: a4:7c:0d:6a:40:b5:9b:84:6b:d0:48:1a:25:d6:85: 16:85:5b:70:65:ed:f7:53:67:db:b8:fa:98:f5:78: 20:44:4b:ce:70:dd:7d:a2:91:03:9c:38:c6:dc:0d: 00:7f:d6:b6:04:80:36:fc:1a:e2:65:d3:17:9e:41: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2F:B7:07:4E:D4:3A:15:51:57:66:15:8E:B3:88:CB:DD:69:16:99 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:2e:a8:aa:64:4b:e5:ff:f9:c1:0d:89:6d:d6:ab:d9:55:28: 37:72:44:6d:36:9d:2f:1a:4f:cf:e2:6c:e1:f5:31:4e:48:30: 4d:4d:c0:07:bf:86:c2:1a:c6:df:03:b9:13:cd:01:f5:9e:64: 51:35:e1:f9:35:ff:6c:70:16:57:ec:57:78:21:bc:be:3a:fb: ac:86:d5:6f:25:b0:b0:c8:09:4a:66:66:75:c5:19:b6:57:7d: de:07:ea:59:b4:f5:94:b6:a0:76:f5:a0:75:ef:da:89:f7:94: 22:d2:18:bd:9d:43:01:83:4f:e4:be:d0:e5:84:7c:b6:8c:9e: 84:35:5f:e1:8d:ef:fc:f3:f1:52:ee:bf:35:51:68:95:00:d1: e9:39:5c:ac:4e:04:ea:a5:c3:e6:98:44:bb:ba:ad:3c:34:ed: 3c:9f:bf:f4:42:3a:88:c9:c7:3a:1d:6b:5f:1b:61:01:ed:9a: e0:1b:cb:97:80:d1:cc:a7:23:e2:35:2f:a7:68:03:bb:a8:2b: 10:a4:e9:73:5d:1f:67:01:39:1f:a4:f9:ba:aa:4c:d1:d2:64: 99:a9:49:f3:95:b1:b8:e8:c2:42:96:84:d5:e1:12:d6:d4:79: c0:c3:76:3f:88:35:84:89:6b:c3:c2:d1:06:e6:3e:83:00:40: 5a:47:0d:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjYwNjAxMDYyMTA1WhcNMjYwNjA4MDYyMTA1WjAYMRYwFAYD VQQDEw02YTFkMjRkMi05Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvScOvrXPieOZJIfbIojvNnOveiINSej5srKsLGpjdk+vca3CdkX3dHq7IdhZ uNjogxzh5tOOvHPYH6LMGns3KVklhzt481ijKbp1N3eDetlqs247TvKdvJYxTzIN fIjmQs7gMgmco9tFUds4AM4VM9+HTsiHJWIQAo7HR3rE0sppTrRPTP4HoSMoW2t0 zyBMagUZZWvxjMUkJdfIyvpWxbip9A6upCHmPpetgKeYIqAIK9uD6H7Mr3ChbgVt 4rOKXlCkfA1qQLWbhGvQSBol1oUWhVtwZe33U2fbuPqY9XggREvOcN19opEDnDjG 3A0Af9a2BIA2/BriZdMXnkG5zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEvtwdO 1DoVUVdmFY6ziMvdaRaZMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgC6oqmRL5f/5wQ2Jbdar2VUoN3JEbTadLxpPz+Js4fUxTkgwTU3AB7+GwhrG 3wO5E80B9Z5kUTXh+TX/bHAWV+xXeCG8vjr7rIbVbyWwsMgJSmZmdcUZtld93gfq WbT1lLagdvWgde/aifeUItIYvZ1DAYNP5L7Q5YR8toyehDVf4Y3v/PPxUu6/NVFo lQDR6TlcrE4E6qXD5phEu7qtPDTtPJ+/9EI6iMnHOh1rXxthAe2a4BvLl4DRzKcj 4jUvp2gDu6grEKTpc10fZwE5H6T5uqpM0dJkmalJ85WxuOjCQpaE1eES1tR5wMN2 P4g1hIlrw8LRBuY+gwBAWkcNeQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:18:50 2026 by rpki-client