$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: NzY3dwe6402erR7h/lxopxx++H0A1GLMZ5rytchVjho= Subject key identifier: 25:2C:2F:35:BE:AB:2C:8D:68:4A:2F:CD:D5:3F:87:51:B5:D8:AF:5E Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 02AA Signing time: Thu 21 May 2026 01:32:24 +0000 Manifest this update: Thu 21 May 2026 01:32:23 +0000 Manifest next update: Thu 28 May 2026 01:32:23 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: yLkZ7r5KLfep3MFOdCpJVBkbkUfgD2oH15z5S2XsAow=) 2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=) 3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: May 21 01:32:23 2026 GMT Not After : May 28 01:32:23 2026 GMT Subject: CN=6a0e60a8-a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:fa:72:e9:e0:e1:ba:47:fd:42:48:d0:dc: 58:a1:9f:4d:46:19:4a:a8:01:1e:4c:80:9a:ab:f9: 2a:c6:ab:6f:c3:ef:bb:e1:c2:4f:19:8f:28:2a:2b: 8b:39:35:5e:fc:d1:34:c0:09:9b:f4:e7:88:17:9a: 66:7e:00:72:4b:e9:f6:cf:70:3f:30:0f:dd:2d:2f: 44:b7:fe:32:7e:b4:bf:1d:b1:7f:b1:af:4a:d1:06: 9a:d3:aa:43:c8:f7:ea:77:b9:c2:96:15:f4:59:f6: 54:2b:98:2f:db:c9:40:2b:18:e6:1f:0d:ea:97:07: d7:81:db:b0:b9:3c:74:04:4d:97:b3:b5:1d:ce:12: c2:2f:9e:c0:e7:4a:bd:a3:f9:7e:ae:84:63:7b:0a: 32:51:ee:73:25:d6:9d:76:93:37:8c:0b:8d:7b:a8: 45:4e:c0:66:60:98:b6:db:ca:75:69:20:c3:4f:d0: 91:fd:a7:fb:e4:28:b8:14:29:7d:f3:72:d6:ea:ee: 8d:5b:b7:46:47:67:e8:11:c6:ec:62:86:dd:d3:d5: b9:60:b8:f1:25:d7:bd:6f:6f:9b:be:89:e2:96:12: ba:27:e5:0f:8f:cc:0c:e5:72:11:60:e2:a4:ff:be: 76:d5:70:7c:f1:de:76:da:da:a1:1d:e6:fe:3c:e0: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:2F:35:BE:AB:2C:8D:68:4A:2F:CD:D5:3F:87:51:B5:D8:AF:5E X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:29:1a:4c:c3:3b:f2:c8:d1:80:8f:fb:f5:37:48:79:48:f8: 70:18:ea:e7:9f:75:12:45:31:fe:8d:11:75:dc:d6:64:94:d5: ea:d3:ec:51:5e:cd:3a:47:22:12:08:0c:07:d0:fa:df:d5:25: a6:b8:fb:f1:35:23:06:a3:b3:48:2b:ae:7f:8f:59:68:d2:79: cd:0b:9e:75:6d:3a:94:b9:23:c1:8e:ec:a3:00:51:75:90:ec: 55:3d:d2:7e:87:02:31:03:f5:e9:25:d5:13:40:2b:08:66:43: 57:98:18:72:2c:8b:c6:88:f9:64:ae:f8:5a:76:96:97:03:e0: 04:23:8c:54:1c:80:99:26:ee:5d:25:de:6e:ee:53:5e:77:18: 40:e7:ce:af:ec:f2:7f:46:09:aa:63:94:9a:27:19:34:57:a0: c5:76:e3:6b:31:a5:c0:ad:77:04:da:2b:1a:f7:73:bc:ce:a8: 78:f5:ec:b8:05:43:54:3a:96:a8:83:e7:fe:44:ba:73:70:66: 69:cc:a6:ef:1a:9f:46:ff:84:a1:ab:25:77:45:9d:ef:47:be: f1:9b:b1:9a:a3:7f:0e:5a:ff:66:be:49:25:d7:da:1c:c6:e3: 70:07:3a:79:eb:5c:4a:82:11:09:3f:40:09:3f:4b:c5:19:94: 32:f8:69:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjYwNTIxMDEzMjIzWhcNMjYwNTI4MDEzMjIzWjAYMRYwFAYD VQQDEw02YTBlNjBhOC1hMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h76cung4bpH/UJI0NxYoZ9NRhlKqAEeTICaq/kqxqtvw++74cJPGY8oKiuL OTVe/NE0wAmb9OeIF5pmfgByS+n2z3A/MA/dLS9Et/4yfrS/HbF/sa9K0Qaa06pD yPfqd7nClhX0WfZUK5gv28lAKxjmHw3qlwfXgduwuTx0BE2Xs7UdzhLCL57A50q9 o/l+roRjewoyUe5zJdaddpM3jAuNe6hFTsBmYJi228p1aSDDT9CR/af75Ci4FCl9 83LW6u6NW7dGR2foEcbsYobd09W5YLjxJde9b2+bvonilhK6J+UPj8wM5XIRYOKk /7521XB88d522tqhHeb+PODD9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUsLzW+ qyyNaEovzdU/h1G12K9eMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPykaTMM78sjRgI/79TdIeUj4cBjq5591EkUx/o0RddzWZJTV6tPsUV7NOkci EggMB9D639Ulprj78TUjBqOzSCuuf49ZaNJ5zQuedW06lLkjwY7sowBRdZDsVT3S focCMQP16SXVE0ArCGZDV5gYciyLxoj5ZK74WnaWlwPgBCOMVByAmSbuXSXebu5T XncYQOfOr+zyf0YJqmOUmicZNFegxXbjazGlwK13BNorGvdzvM6oePXsuAVDVDqW qIPn/kS6c3Bmacym7xqfRv+Eoasld0Wd70e+8ZuxmqN/Dlr/Zr5JJdfaHMbjcAc6 eetcSoIRCT9ACT9LxRmUMvhpCA== -----END CERTIFICATE-----Generated at Fri May 22 15:10:51 2026 by rpki-client