$ rpki-client -vvf rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft File: JRiNYKv1gleStK_K1bK06Xj6rjA.mft (raw, json) Hash identifier: m9psxvvbPeYxz7zPvFLilRrZ/K62tnf3ViGoTxrVRpo= Subject key identifier: 1A:B7:51:CC:FA:07:AE:92:37:F0:9C:C2:A2:9C:B3:8A:0A:08:63:E4 Authority key identifier: 25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30 Certificate issuer: /CN=A91C61F3/serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft Manifest number: 22 Signing time: Tue 19 May 2026 08:42:35 +0000 Manifest this update: Tue 19 May 2026 08:42:35 +0000 Manifest next update: Tue 26 May 2026 08:42:35 +0000 Files and hashes: 1: JRiNYKv1gleStK_K1bK06Xj6rjA.crl (hash: U2VEmUtqla3L5m8+Z3odpcS8GiFR8RUGgoi2sL6dL1Q=) 2: C22533B2219611F1B6D5F32F0F3D8C67.roa (hash: BYrUCJsV9Natx/11SEP3UvxSYY35sLFasGEJQEXzbKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C61F3, serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30 Validity Not Before: May 19 08:42:35 2026 GMT Not After : May 26 08:42:35 2026 GMT Subject: CN=6a0c227b-8712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:f4:af:75:43:26:95:27:b0:23:ee:a9:58: f1:d2:89:6c:a1:5e:72:7d:50:ab:4a:0f:f9:8c:9e: ee:ae:60:f1:6e:4f:bb:29:57:20:0a:e5:57:52:5c: 72:64:c8:c3:38:0a:5b:b9:7c:5b:68:9c:5c:6f:09: 53:08:92:21:85:c8:b4:58:d8:3a:ab:1f:1e:32:48: de:e7:4e:de:db:36:26:8b:dd:8e:64:b0:ae:5d:f1: 87:b8:c7:9f:f8:04:bd:82:d2:ac:cd:86:2b:f9:f1: c0:16:09:7e:67:78:17:49:b1:36:40:e8:56:bb:01: aa:de:ce:f7:7d:3c:c7:ef:00:2a:7c:c5:0a:76:e2: 10:fc:32:0b:30:5b:1f:0a:42:7f:bd:24:d6:b1:46: e9:11:c4:3d:af:b4:25:30:ee:cc:d0:31:58:38:24: d8:5c:21:bd:1b:2f:c2:66:6b:80:67:cb:c6:9c:df: d5:81:a4:06:e9:05:1c:60:6a:65:d6:0a:82:a9:63: 04:76:3b:5e:28:2d:d4:24:ca:f4:98:86:c0:2b:e7: f3:a2:d6:0f:5c:a4:4e:9d:5a:13:b7:ec:13:9a:e7: 51:27:60:80:3f:8e:a3:ad:c8:c1:3a:bf:75:1a:73: 0c:40:dd:25:c5:10:e3:13:9d:d3:19:ad:0c:21:8e: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B7:51:CC:FA:07:AE:92:37:F0:9C:C2:A2:9C:B3:8A:0A:08:63:E4 X509v3 Authority Key Identifier: keyid:25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d2:f0:5f:aa:af:15:d9:24:85:ec:49:82:60:31:d7:70:64: b1:09:67:df:44:e5:73:bd:5c:95:d6:4f:29:ab:8d:af:01:1f: cb:11:08:94:32:d5:14:a8:7b:d3:c6:16:da:7f:0e:b9:97:5f: 72:36:57:d0:00:24:d0:98:5a:c3:7b:7a:b9:42:47:08:5a:8b: 5b:07:3a:94:3c:00:14:f0:47:9a:e6:cd:5f:dd:8c:52:a9:6e: 1a:3d:c7:59:15:76:8f:9f:2d:ba:50:3a:8a:ff:87:5d:ee:41: 54:0d:a3:34:f1:97:77:f5:42:22:4d:0f:e9:de:0c:9e:69:c6: 1e:6f:10:19:6e:e7:1f:14:33:8d:f1:91:30:9d:d6:fd:08:42: e5:1a:3a:1d:d8:c2:0d:48:64:65:6d:a6:9b:e6:88:d4:14:40: bf:f7:e4:4b:67:1e:87:6c:2c:f7:5a:c2:f5:78:bc:33:a0:c0: 2d:74:0e:3f:6b:fd:1c:f3:0f:3b:88:ba:d1:3e:a7:4a:0b:4f: c4:50:81:10:00:f8:05:b6:fd:15:50:d9:1b:64:c2:56:dd:43: 7e:47:96:18:7c:56:a4:25:37:6c:f9:08:c1:d1:ff:3b:3b:06: 99:f7:ca:ad:47:db:ea:3e:a1:00:51:96:b0:29:16:22:ce:e7: 5a:bd:4f:85 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjFGMzExMC8GA1UEBRMoMjUxODhENjBBQkY1ODI1NzkyQjRBRkNBRDVCMkI0RTk3 OEZBQUUzMDAeFw0yNjA1MTkwODQyMzVaFw0yNjA1MjYwODQyMzVaMBgxFjAUBgNV BAMTDTZhMGMyMjdiLTg3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMOvSvdUMmlSewI+6pWPHSiWyhXnJ9UKtKD/mMnu6uYPFuT7spVyAK5VdSXHJk yMM4Clu5fFtonFxvCVMIkiGFyLRY2DqrHx4ySN7nTt7bNiaL3Y5ksK5d8Ye4x5/4 BL2C0qzNhiv58cAWCX5neBdJsTZA6Fa7Aarezvd9PMfvACp8xQp24hD8MgswWx8K Qn+9JNaxRukRxD2vtCUw7szQMVg4JNhcIb0bL8Jma4Bny8ac39WBpAbpBRxgamXW CoKpYwR2O14oLdQkyvSYhsAr5/Oi1g9cpE6dWhO37BOa51EnYIA/jqOtyME6v3Ua cwxA3SXFEOMTndMZrQwhjhn9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGrdRzPoH rpI38JzCopyzigoIY+QwHwYDVR0jBBgwFoAUJRiNYKv1gleStK/K1bK06Xj6rjAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MUYzLzMwOEU4MTFFMjE5 MjExRjE4OTQ0QUFDRTBEM0Q4QzY3L0pSaU5ZS3YxZ2xlU3RLX0sxYkswNlhqNnJq QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlJpTllLdjFnbGVTdEtfSzFiSzA2WGo2cmpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MUYzLzMwOEU4MTFFMjE5MjExRjE4OTQ0QUFDRTBEM0Q4QzY3L0pSaU5ZS3YxZ2xl U3RLX0sxYkswNlhqNnJqQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAP0vBfqq8V2SSF7EmCYDHXcGSxCWffROVzvVyV1k8pq42vAR/LEQiUMtUUqHvT xhbafw65l19yNlfQACTQmFrDe3q5QkcIWotbBzqUPAAU8Eea5s1f3YxSqW4aPcdZ FXaPny26UDqK/4dd7kFUDaM08Zd39UIiTQ/p3gyeacYebxAZbucfFDON8ZEwndb9 CELlGjod2MINSGRlbaab5ojUFEC/9+RLZx6HbCz3WsL1eLwzoMAtdA4/a/0c8w87 iLrRPqdKC0/EUIEQAPgFtv0VUNkbZMJW3UN+R5YYfFakJTds+QjB0f87OwaZ98qt R9vqPqEAUZawKRYizudavU+F -----END CERTIFICATE-----Generated at Thu May 21 09:38:55 2026 by rpki-client