$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: 1XvEGM+ri+COxW0ez+0GWMRiKPa8DjqmkRVpiaKWv+o= Subject key identifier: FA:01:FB:B5:6F:99:D3:A2:D0:5E:FF:0D:F0:50:F4:53:71:38:D9:25 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 033E Signing time: Thu 21 May 2026 01:06:59 +0000 Manifest this update: Thu 21 May 2026 01:06:58 +0000 Manifest next update: Thu 28 May 2026 01:06:58 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: JHOiAET7j4ak/MgABePjLAbphftZH1zEF9LDdpTwOVM=) 2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: LAY/2oYEWNptyjPMrgoY8aWftbMtB6LPjdcoOOw1Kqc=) 3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: May 21 01:06:58 2026 GMT Not After : May 28 01:06:58 2026 GMT Subject: CN=6a0e5ab3-8969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:45:dd:c9:04:08:65:cd:c7:8d:5f:ae:35: 3c:81:d8:2e:da:3f:fb:85:0d:8d:a9:07:ca:ee:ce: 33:fa:5b:f5:f6:62:5c:2a:a9:52:4b:6c:b5:c0:cd: 0d:1c:d6:83:7f:54:c8:72:78:cd:94:74:d0:bc:77: 67:9a:44:0f:10:d6:01:11:11:bc:db:06:1d:ea:5a: 8d:0e:23:a0:2e:d4:56:7a:b3:ad:ac:78:b3:b5:74: ed:75:22:cf:d6:a0:c6:89:50:43:42:f1:23:80:81: 89:b2:21:7f:dd:12:a1:36:46:ef:53:7d:b1:a1:99: ae:bb:76:e5:3a:46:a1:a4:e5:5b:ea:ac:c8:95:b7: 2e:c2:9e:d4:d5:16:f0:f1:76:52:a3:2f:0b:e1:ac: 24:55:ba:f4:98:1e:6b:5c:b6:6f:3e:90:7f:0a:e3: f8:30:7c:dc:37:1d:21:13:af:f2:bc:09:c3:7c:79: ef:1f:0a:84:b0:d6:b8:8a:6e:6b:d9:e0:d9:d0:40: e5:43:6c:6a:bb:ae:2a:51:f0:0d:25:96:ad:20:a5: c1:57:1f:8d:32:b8:36:b2:fd:9d:64:7e:2a:c5:56: 1f:a6:2e:f1:c6:54:c9:7e:50:31:42:3c:c8:49:d6: 48:62:3a:f0:48:69:3b:89:fd:0f:d4:96:cf:dc:b0: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:FB:B5:6F:99:D3:A2:D0:5E:FF:0D:F0:50:F4:53:71:38:D9:25 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:27:16:df:2b:21:2b:af:ac:53:87:93:42:fa:b4:18:cd:2c: e0:ce:6b:ba:b6:c4:6c:f7:b0:ea:f3:12:44:f5:21:64:53:a0: 30:44:b4:3c:c7:e4:b5:17:7d:7e:1a:60:03:00:f7:80:d5:1a: 71:27:cf:48:3a:6e:0c:9f:7c:17:33:f5:91:b6:72:91:c6:c7: c5:2d:a1:af:ac:c1:ad:7d:56:93:91:9d:dc:97:b2:a4:80:09: 4f:6b:bb:76:1e:24:01:dd:24:f8:dd:3b:7b:fb:53:05:bb:51: 26:76:b8:c5:28:b0:c8:95:e6:ff:99:54:a0:0b:2f:38:36:cf: ea:0e:c2:dc:bd:5a:a0:59:c3:69:ae:4d:6c:a4:45:f6:36:ef: 9c:d7:07:2d:22:de:b7:f5:a9:f4:dc:f5:f7:a7:3d:a0:66:24: f0:60:aa:ca:29:92:b1:5d:6f:ac:dd:c4:70:49:b7:ca:71:08: 3c:30:0c:a8:d2:ed:48:aa:6b:95:a2:08:0e:70:07:7c:c3:2c: 2f:55:5c:ef:a2:17:96:13:6f:6a:fa:02:10:65:5e:6f:83:ba: 9e:37:09:3a:bc:99:cc:da:1a:59:7b:cb:5a:22:e9:a6:af:47: 48:c8:b8:88:69:20:02:9b:88:0e:c4:1a:ba:29:4c:45:f0:0b: 9f:11:79:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwNTIxMDEwNjU4WhcNMjYwNTI4MDEwNjU4WjAYMRYwFAYD VQQDEw02YTBlNWFiMy04OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MdF3ckECGXNx41frjU8gdgu2j/7hQ2NqQfK7s4z+lv19mJcKqlSS2y1wM0N HNaDf1TIcnjNlHTQvHdnmkQPENYBERG82wYd6lqNDiOgLtRWerOtrHiztXTtdSLP 1qDGiVBDQvEjgIGJsiF/3RKhNkbvU32xoZmuu3blOkahpOVb6qzIlbcuwp7U1Rbw 8XZSoy8L4awkVbr0mB5rXLZvPpB/CuP4MHzcNx0hE6/yvAnDfHnvHwqEsNa4im5r 2eDZ0EDlQ2xqu64qUfANJZatIKXBVx+NMrg2sv2dZH4qxVYfpi7xxlTJflAxQjzI SdZIYjrwSGk7if0P1JbP3LCYawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoB+7Vv mdOi0F7/DfBQ9FNxONklMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQicW3yshK6+sU4eTQvq0GM0s4M5rurbEbPew6vMSRPUhZFOgMES0PMfktRd9 fhpgAwD3gNUacSfPSDpuDJ98FzP1kbZykcbHxS2hr6zBrX1Wk5Gd3JeypIAJT2u7 dh4kAd0k+N07e/tTBbtRJna4xSiwyJXm/5lUoAsvODbP6g7C3L1aoFnDaa5NbKRF 9jbvnNcHLSLet/Wp9Nz196c9oGYk8GCqyimSsV1vrN3EcEm3ynEIPDAMqNLtSKpr laIIDnAHfMMsL1Vc76IXlhNvavoCEGVeb4O6njcJOryZzNoaWXvLWiLppq9HSMi4 iGkgApuIDsQauilMRfALnxF54g== -----END CERTIFICATE-----Generated at Thu May 21 10:27:49 2026 by rpki-client