$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: 2hKNwPJyt+hUwRh+F+zxniGDToKoUj2gLzWdztvJIi0= Subject key identifier: BA:6D:AF:00:D7:2F:2F:F7:39:2D:7E:35:D5:C7:CB:84:FB:9B:D6:35 Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: 011D Signing time: Thu 21 May 2026 06:07:12 +0000 Manifest this update: Thu 21 May 2026 06:07:12 +0000 Manifest next update: Thu 28 May 2026 06:07:12 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: 9eCtECs8gqB2EPb9JbK3pbRAl+jwHFCOjP6j64tXVos=) 2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: May 21 06:07:12 2026 GMT Not After : May 28 06:07:12 2026 GMT Subject: CN=6a0ea110-77c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:36:1d:1f:bb:ad:9e:b6:57:6b:87:9a:53: 86:b6:a5:37:cc:d5:16:43:59:7f:9e:39:84:44:c9: 47:57:23:d0:7f:bf:c1:96:d2:50:1b:26:08:89:aa: eb:a8:01:cf:10:0f:99:95:ad:af:af:ef:ee:c2:19: 5a:cb:bb:7b:20:ac:e9:1a:4f:78:8e:7e:4b:bf:26: 2b:fd:c9:bf:45:b6:d4:5f:52:42:d5:a0:9e:b2:f7: dd:71:5f:5f:a0:f3:a3:d6:5b:f7:02:9f:d9:80:21: 22:38:8c:b3:42:1e:69:66:1c:29:b1:55:94:66:59: fd:f7:7a:b4:8e:f5:ff:f2:90:b2:96:7b:99:de:d5: b7:e8:e6:4f:bc:15:3d:dc:e9:d4:98:43:74:1b:91: 2d:b4:2b:ea:b2:81:16:2f:6d:f3:a5:50:d8:d3:db: 2b:70:14:60:5e:2b:2d:f2:57:fa:3b:2d:d9:56:74: 7b:34:74:7d:f5:33:ec:f8:6e:13:79:6c:fc:8a:14: 70:bd:f3:97:50:ac:f3:e3:4f:bd:db:50:f7:74:f3: 74:5a:dd:00:17:9c:9c:6d:f4:32:1c:86:88:9a:90: 1e:ef:36:f4:39:5f:6c:16:d8:1c:48:9c:a4:87:01: 87:45:42:20:50:aa:c2:6d:37:82:b7:49:02:83:74: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:AF:00:D7:2F:2F:F7:39:2D:7E:35:D5:C7:CB:84:FB:9B:D6:35 X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:27:8d:21:20:ad:e6:72:94:f6:7d:21:f3:76:96:99:f5:3d: cb:b4:57:0b:79:60:9c:3e:a0:b7:b0:eb:ea:03:e1:b1:3d:29: dc:ad:e2:a1:8c:a5:e2:a3:ca:30:fa:82:f7:0a:f9:c0:47:58: 0d:b9:b1:00:ce:3a:fc:be:31:11:d4:43:58:24:15:6f:0b:df: 1d:5e:fc:83:87:4c:2b:db:48:f4:35:3d:e7:76:59:a8:45:dc: 3a:8d:97:0a:51:63:93:e6:49:8b:c0:aa:8a:1c:1e:e4:94:e3: 15:93:74:cc:79:8c:eb:ea:cd:64:77:16:ca:4c:df:33:8e:8b: 49:37:aa:56:4f:86:81:23:3b:8d:53:27:35:c3:a0:0d:fd:7c: fc:60:6a:a0:31:26:f2:d9:0e:d9:60:e0:4e:b0:ac:8b:fc:f3: 8d:e6:25:de:48:01:bc:76:1e:d0:e5:25:8c:40:59:3d:f4:e0: cb:60:5f:87:ae:08:cb:6a:26:0a:d5:76:28:31:d9:2e:8c:fb: 1c:61:41:8a:55:6d:49:4d:3d:96:73:77:f1:a5:95:eb:ff:3c: ab:d8:bd:c2:13:0a:e7:5a:71:8d:14:37:91:24:e4:28:b7:b8: 81:31:71:40:4d:2d:7f:35:75:32:b5:45:b6:f8:5f:39:24:a7: 76:4f:a9:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNGRTczOUZFNEVC NzE5OTY2QjYwHhcNMjYwNTIxMDYwNzEyWhcNMjYwNTI4MDYwNzEyWjAYMRYwFAYD VQQDEw02YTBlYTExMC03N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZE2HR+7rZ62V2uHmlOGtqU3zNUWQ1l/njmERMlHVyPQf7/BltJQGyYIiarr qAHPEA+Zla2vr+/uwhlay7t7IKzpGk94jn5LvyYr/cm/RbbUX1JC1aCesvfdcV9f oPOj1lv3Ap/ZgCEiOIyzQh5pZhwpsVWUZln993q0jvX/8pCylnuZ3tW36OZPvBU9 3OnUmEN0G5EttCvqsoEWL23zpVDY09srcBRgXist8lf6Oy3ZVnR7NHR99TPs+G4T eWz8ihRwvfOXUKzz40+921D3dPN0Wt0AF5ycbfQyHIaImpAe7zb0OV9sFtgcSJyk hwGHRUIgUKrCbTeCt0kCg3QTfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLptrwDX Ly/3OS1+NdXHy4T7m9Y1MB8GA1UdIwQYMBaAFCd/EiRKULxlTuVj/nOf5OtxmWa2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODlBQS84NUQwRjM0NkJD NjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZHVk81V1AtYzVfazYzR1pa clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZH Vk81V1AtYzVfazYzR1paclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfCeNISCt5nKU9n0h83aWmfU9y7RXC3lgnD6gt7Dr6gPhsT0p3K3ioYyl4qPK MPqC9wr5wEdYDbmxAM46/L4xEdRDWCQVbwvfHV78g4dMK9tI9DU953ZZqEXcOo2X ClFjk+ZJi8Cqihwe5JTjFZN0zHmM6+rNZHcWykzfM46LSTeqVk+GgSM7jVMnNcOg Df18/GBqoDEm8tkO2WDgTrCsi/zzjeYl3kgBvHYe0OUljEBZPfTgy2Bfh64Iy2om CtV2KDHZLoz7HGFBilVtSU09lnN38aWV6/88q9i9whMK51pxjRQ3kSTkKLe4gTFx QE0tfzV1MrVFtvhfOSSndk+phQ== -----END CERTIFICATE-----Generated at Thu May 21 10:28:47 2026 by rpki-client