$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json) Hash identifier: mdXgrSaNxwakF5KmrxFeqNlQAuaNRI2JwOyNsUb7NFw= Subject key identifier: 5D:20:CA:7D:0E:25:D3:66:8E:38:C9:45:E8:46:8D:4F:36:33:B5:0B Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft Manifest number: 0148 Signing time: Mon 01 Jun 2026 06:00:50 +0000 Manifest this update: Mon 01 Jun 2026 06:00:50 +0000 Manifest next update: Mon 08 Jun 2026 06:00:50 +0000 Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: nc8rEHoKkIUfa24SFyCa2gxSFzxef1LuSmeZ+MLC5nE=) 2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: qoNSrp1S5UFLz+pkwMGVW1W6xXhNXfIp8HVNYC4sZ1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Validity Not Before: Jun 1 06:00:50 2026 GMT Not After : Jun 8 06:00:50 2026 GMT Subject: CN=6a1d2012-84a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:a3:46:fa:83:3a:72:76:3d:0a:ed:54:4f: 28:36:1c:b7:e8:2d:ae:69:9f:9e:1e:e1:c1:91:85: a4:70:7d:08:42:87:09:8f:20:ff:a6:de:8c:9f:31: ef:77:0f:6c:5b:41:6f:15:5c:db:0c:08:85:94:bc: 6a:76:41:c4:4d:4c:79:ba:76:1f:9c:bf:66:a9:1f: df:b8:97:75:09:0a:8c:6e:09:ef:84:7d:99:d8:fc: f5:59:f6:56:ff:5d:40:a7:6c:c6:db:d0:f3:cf:7c: 77:b8:37:4b:b6:17:26:65:c6:b4:7a:87:ae:29:2a: cd:95:d1:f7:af:bf:29:cd:b7:a6:3b:92:00:03:23: c2:c6:ee:5f:cc:ea:a0:54:8a:c7:4a:56:b0:e7:2c: 59:86:95:93:f1:a2:f5:62:44:44:4c:af:43:43:32: 36:3b:28:19:e1:d9:28:38:b2:ff:72:b7:c7:bd:e9: 1b:e8:50:3f:37:47:f9:12:ab:19:ce:13:05:1f:6f: 44:b8:cf:65:51:82:df:45:f0:0a:87:f0:f7:d9:4e: ee:65:34:73:aa:f1:85:b0:37:6c:37:f7:11:65:23: 8d:a5:ca:97:4a:67:34:ef:83:4c:a4:99:23:bd:bf: 4e:18:4c:94:be:4e:1b:70:43:9a:9b:7c:eb:5c:ab: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:CA:7D:0E:25:D3:66:8E:38:C9:45:E8:46:8D:4F:36:33:B5:0B X509v3 Authority Key Identifier: keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:bc:5e:85:4e:22:db:e5:15:30:a4:60:61:8b:fa:21:4f:22: 88:b1:d7:14:32:af:21:9d:b8:1a:cf:54:4c:e7:10:1d:11:d0: 30:49:e9:7f:cb:99:a7:84:b5:58:eb:69:7b:3a:b3:d3:19:ed: 83:f9:c8:8d:fd:eb:d9:5c:08:df:bb:71:35:35:3f:a1:09:9f: a5:6e:8e:21:d9:ed:28:9d:a5:b4:e3:e1:09:96:65:d8:e9:d1: 00:3e:b8:ed:e8:62:bc:ab:cc:58:fd:51:51:f1:f9:0d:c9:7d: 11:ce:c0:02:20:dc:26:89:f1:e2:5e:d6:76:1b:fc:c4:8d:25: 26:51:f7:42:cd:9c:6a:1c:09:63:7a:1e:ef:ea:45:15:ce:36: 83:fb:be:e8:9a:5a:f1:9a:7f:2d:1a:7d:d7:9b:54:97:ec:bc: b2:22:32:76:45:86:24:64:70:b0:36:f5:b7:57:fd:d9:d1:68: e9:3b:f6:e9:b4:78:cc:66:d7:cb:68:55:37:a4:80:05:af:e8: fb:09:31:b2:0e:87:0a:ce:f1:be:2a:90:a2:ca:b8:b3:ca:ec: f8:1b:ac:73:a6:95:5b:9a:b9:79:62:39:49:ac:5a:62:59:c4: 3c:50:4a:6d:d4:2b:3d:8e:27:2a:7b:89:50:f3:cd:06:c5:d5: 95:27:05:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKDhFQTVCOTU2MzIyN0MyRTU4RDQzOEJDMTdCQTgyMjUw NzU0MjQ0M0IwHhcNMjYwNjAxMDYwMDUwWhcNMjYwNjA4MDYwMDUwWjAYMRYwFAYD VQQDEw02YTFkMjAxMi04NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw72jRvqDOnJ2PQrtVE8oNhy36C2uaZ+eHuHBkYWkcH0IQocJjyD/pt6MnzHv dw9sW0FvFVzbDAiFlLxqdkHETUx5unYfnL9mqR/fuJd1CQqMbgnvhH2Z2Pz1WfZW /11Ap2zG29Dzz3x3uDdLthcmZca0eoeuKSrNldH3r78pzbemO5IAAyPCxu5fzOqg VIrHSlaw5yxZhpWT8aL1YkRETK9DQzI2OygZ4dkoOLL/crfHvekb6FA/N0f5EqsZ zhMFH29EuM9lUYLfRfAKh/D32U7uZTRzqvGFsDdsN/cRZSONpcqXSmc074NMpJkj vb9OGEyUvk4bcEOam3zrXKsjiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0gyn0O JdNmjjjJRehGjU82M7ULMB8GA1UdIwQYMBaAFI6luVYyJ8LljUOLwXuoIlB1QkQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83MDQwQThFODZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1V05RNHZCZTZnaVVIVkNS RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pxVzVWaklud3VXTlE0dkJlNmdpVUhWQ1JEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83MDQwQThFODZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1 V05RNHZCZTZnaVVIVkNSRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA7xehU4i2+UVMKRgYYv6IU8iiLHXFDKvIZ24Gs9UTOcQHRHQMEnpf8uZp4S1 WOtpezqz0xntg/nIjf3r2VwI37txNTU/oQmfpW6OIdntKJ2ltOPhCZZl2OnRAD64 7ehivKvMWP1RUfH5Dcl9Ec7AAiDcJonx4l7Wdhv8xI0lJlH3Qs2cahwJY3oe7+pF Fc42g/u+6Jpa8Zp/LRp915tUl+y8siIydkWGJGRwsDb1t1f92dFo6Tv26bR4zGbX y2hVN6SABa/o+wkxsg6HCs7xviqQosq4s8rs+Busc6aVW5q5eWI5SaxaYlnEPFBK bdQrPY4nKnuJUPPNBsXVlScF7Q== -----END CERTIFICATE-----Generated at Tue Jun 2 21:34:15 2026 by rpki-client