$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: V7vJ3T/Wx0PWIChTuL2zHtv9R0aT+N5vGCKIYYWYn/o= Subject key identifier: 55:F2:87:DF:36:28:13:94:A8:93:5C:3B:59:2C:59:EC:C8:FA:79:DD Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0145 Signing time: Thu 21 May 2026 05:41:14 +0000 Manifest this update: Thu 21 May 2026 05:41:14 +0000 Manifest next update: Thu 28 May 2026 05:41:14 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: JDUNSKmAFPqHycsA6tim33P/AfneW64n27G7VzzEFHQ=) 2: 2D6E98583F0511F1B91814A8C9833773.roa (hash: cvsxFrKYwzXfmPTCt/kaQm7QbHYPT/Bov3jLYon6Aw4=) 3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 4: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 5: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) 6: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 7: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 8: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: May 21 05:41:14 2026 GMT Not After : May 28 05:41:14 2026 GMT Subject: CN=6a0e9afa-3f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:03:e5:eb:7e:f6:7b:e4:a4:46:10:06:3f: 3a:40:bd:9a:5b:dc:68:75:bd:7d:53:ee:ed:11:ee: f1:07:67:13:d4:43:d8:e1:32:38:9e:7c:b7:55:e8: 4d:e8:9b:b4:4c:2f:0a:31:8f:4e:d0:01:d2:a3:ca: 71:ce:48:5d:25:b1:41:a0:34:40:0a:70:59:33:cd: 0e:3e:45:c3:82:71:57:3b:85:8e:1c:e1:39:44:75: cc:35:34:28:ff:58:b6:10:18:2a:1f:d6:fa:9c:24: 7b:a9:8f:fb:15:c0:7b:fd:53:15:3d:65:9d:2e:a7: ca:eb:4a:d0:f8:8b:73:c4:04:0e:b2:a3:3d:b0:15: d0:8d:d4:1d:ed:49:e1:8f:77:ef:d6:67:b9:dc:b3: be:b6:69:1f:ef:f2:59:7b:dd:89:21:41:c1:3b:48: 8a:aa:88:ae:db:cb:97:4c:2c:b1:4a:fa:33:81:ad: 77:0c:4a:a0:5a:b9:33:81:c0:61:d8:0b:3f:62:74: 41:02:ba:8f:d3:de:19:e7:9f:0d:ca:2f:2f:e7:39: ce:69:2b:eb:9a:4c:e2:70:ee:c6:79:9f:95:9e:b5: 0a:07:15:bf:b6:cb:b5:9e:c5:f4:81:3d:d5:e3:e2: 96:01:33:80:2a:12:cc:92:c8:6e:26:9d:eb:58:d1: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F2:87:DF:36:28:13:94:A8:93:5C:3B:59:2C:59:EC:C8:FA:79:DD X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:29:51:af:cb:e9:00:88:19:c1:da:a6:ee:29:67:ec:63:ab: 71:e9:d5:76:8b:a8:d1:ca:0f:96:a8:41:88:90:20:a2:f4:dd: 87:c2:eb:9f:71:bc:d9:bf:f1:37:26:ed:5d:c8:63:dd:b4:d7: ad:a0:16:d1:cd:d2:c0:21:e9:42:a3:13:a8:5b:3e:f6:e3:a4: 16:cc:7c:81:25:a4:c7:b3:5a:25:d1:6e:ea:52:05:47:c7:ae: 3b:26:60:59:32:9a:0c:97:35:bf:a0:81:c9:3f:50:3a:58:f2: 6d:f5:fd:ba:f9:5b:e4:17:89:45:3c:b6:f8:77:9d:b0:44:2c: 84:0a:6e:2d:07:d8:cc:a6:b1:95:1c:52:62:39:45:e1:f2:8d: 59:3e:e8:a3:12:29:39:43:78:c8:62:4c:01:5b:0b:7f:e3:cc: 08:17:1c:d8:ef:f2:03:bc:49:d8:1b:ba:86:0d:72:30:8b:ac: e0:30:51:06:a0:e2:cd:63:b7:5c:52:07:c3:86:31:0f:0e:57: 57:4c:14:0f:96:73:d3:f2:c6:53:b6:a2:a0:39:50:f2:b2:33: 61:42:79:99:b1:62:7e:94:5a:32:30:be:ac:06:9f:37:92:a6: 42:d6:c4:f0:97:6c:70:48:77:ea:30:92:8d:ba:60:a8:4b:b7: cb:7f:1c:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwNTIxMDU0MTE0WhcNMjYwNTI4MDU0MTE0WjAYMRYwFAYD VQQDEw02YTBlOWFmYS0zZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxID5et+9nvkpEYQBj86QL2aW9xodb19U+7tEe7xB2cT1EPY4TI4nny3VehN 6Ju0TC8KMY9O0AHSo8pxzkhdJbFBoDRACnBZM80OPkXDgnFXO4WOHOE5RHXMNTQo /1i2EBgqH9b6nCR7qY/7FcB7/VMVPWWdLqfK60rQ+ItzxAQOsqM9sBXQjdQd7Unh j3fv1me53LO+tmkf7/JZe92JIUHBO0iKqoiu28uXTCyxSvozga13DEqgWrkzgcBh 2As/YnRBArqP094Z558Nyi8v5znOaSvrmkzicO7GeZ+VnrUKBxW/tsu1nsX0gT3V 4+KWATOAKhLMkshuJp3rWNGY5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXyh982 KBOUqJNcO1ksWezI+nndMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApylRr8vpAIgZwdqm7iln7GOrcenVdouo0coPlqhBiJAgovTdh8Lrn3G82b/x NybtXchj3bTXraAW0c3SwCHpQqMTqFs+9uOkFsx8gSWkx7NaJdFu6lIFR8euOyZg WTKaDJc1v6CByT9QOljybfX9uvlb5BeJRTy2+HedsEQshApuLQfYzKaxlRxSYjlF 4fKNWT7ooxIpOUN4yGJMAVsLf+PMCBcc2O/yA7xJ2Bu6hg1yMIus4DBRBqDizWO3 XFIHw4YxDw5XV0wUD5Zz0/LGU7aioDlQ8rIzYUJ5mbFifpRaMjC+rAafN5KmQtbE 8JdscEh36jCSjbpgqEu3y38cbA== -----END CERTIFICATE-----Generated at Thu May 21 10:39:56 2026 by rpki-client