$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: iL9D5xK041nmmX+Yh5Y0af+Dk9b0T+/bavmNHpuTKVI= Subject key identifier: 2E:E5:D5:B1:49:95:EB:40:C6:15:66:EF:B0:59:A8:8C:38:A4:00:2B Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: BF Signing time: Mon 01 Jun 2026 07:45:25 +0000 Manifest this update: Mon 01 Jun 2026 07:45:25 +0000 Manifest next update: Mon 08 Jun 2026 07:45:25 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: NFvDcTRdtbQLrsw6d3qXdaHptMneXyQIvaggVagJ78w=) 2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: mrvsb1yUmpT+TPzg/icn7UEU7fIbAnYkrcZJuJgVboM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Jun 1 07:45:25 2026 GMT Not After : Jun 8 07:45:25 2026 GMT Subject: CN=6a1d3895-aa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:0c:7a:c9:65:48:4f:37:75:29:69:c0:01: f5:33:67:7c:2a:59:08:64:21:88:8d:f2:02:3c:62: fb:89:d6:11:0d:7b:14:92:82:fa:50:40:b4:9c:a4: a1:ca:6f:1f:86:b1:b1:d5:d2:d6:40:78:99:eb:73: 48:b4:22:3f:fe:c8:b6:fe:72:14:40:99:cf:f6:d8: 86:a8:af:f2:60:2e:6b:21:94:75:00:54:dc:7e:b4: cc:4d:f3:f2:36:93:a9:be:9f:65:13:66:21:3e:72: 76:57:b4:b2:c5:52:bf:c1:88:7a:c5:00:e1:ef:2d: 38:b1:76:da:44:00:f4:83:dc:b6:bc:e0:86:71:73: 87:f3:34:f0:29:dc:97:f7:98:90:e5:52:80:3f:6a: 2d:28:06:87:84:a5:ba:d3:e1:f7:dd:25:e4:a1:7e: d0:26:ad:e6:d0:b8:48:5c:2c:1b:85:f1:33:b5:93: 6f:e1:69:59:98:b7:79:ae:72:a2:e0:ee:cf:65:1b: 50:b6:3c:25:01:a6:b3:9d:8f:3a:6b:46:c4:02:59: 30:2f:cd:00:79:f0:f1:99:26:28:f1:19:2c:b5:1a: 08:1e:3a:6f:83:0c:aa:b6:b2:14:bb:bc:bf:21:b7: d6:0c:a3:43:df:80:14:62:8f:43:74:0c:9e:91:7d: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:D5:B1:49:95:EB:40:C6:15:66:EF:B0:59:A8:8C:38:A4:00:2B X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:58:a0:b3:cd:88:7b:fa:2a:c0:f2:05:9c:44:ab:78:5f:e3: c3:34:d8:22:86:02:30:5d:ea:89:49:f2:fb:c9:39:24:98:14: 97:c9:55:da:ad:6e:1c:34:77:0f:55:d4:02:55:86:47:2f:98: 43:c0:58:55:42:79:2b:aa:94:ca:9d:b4:fd:6d:31:32:8f:57: 3f:b2:34:75:16:0b:31:72:93:1f:b3:06:97:b3:ec:86:fb:6b: 7c:98:a1:f7:98:a1:72:df:cc:2f:ab:cd:5d:5c:c0:18:77:03: 68:b4:fa:2f:2e:41:2e:84:3f:f1:45:bc:af:b5:a0:88:c0:89: 4d:9b:f3:04:1e:54:97:5a:7f:b0:a5:fa:6a:2b:a0:b2:eb:88: 44:14:fb:2c:b0:4e:7d:03:cf:16:3c:3b:a4:d6:0e:ca:bc:c9: 87:1d:ba:5b:fa:59:88:bf:0d:15:17:e4:ce:47:a9:fe:38:99: b8:1c:42:02:28:ee:df:c1:82:35:c4:c7:97:d2:d4:ce:c7:1f: d9:d5:88:aa:f3:ef:20:24:cf:59:21:75:66:5d:e9:a8:11:43: 87:88:b1:c1:d0:df:3f:62:e8:b1:d9:a5:54:13:cd:d8:64:d4: 04:31:e8:0e:e7:67:4b:10:4e:ed:20:2b:b8:db:bc:88:eb:ee: 8e:4b:ac:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzcxMTAvBgNVBAUTKDhERTlEMDc0RkYzQzhENTE1NDE1RUJGMEYwRTU2QUMw M0VFQUREM0EwHhcNMjYwNjAxMDc0NTI1WhcNMjYwNjA4MDc0NTI1WjAYMRYwFAYD VQQDEw02YTFkMzg5NS1hYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJkMesllSE83dSlpwAH1M2d8KlkIZCGIjfICPGL7idYRDXsUkoL6UEC0nKSh ym8fhrGx1dLWQHiZ63NItCI//si2/nIUQJnP9tiGqK/yYC5rIZR1AFTcfrTMTfPy NpOpvp9lE2YhPnJ2V7SyxVK/wYh6xQDh7y04sXbaRAD0g9y2vOCGcXOH8zTwKdyX 95iQ5VKAP2otKAaHhKW60+H33SXkoX7QJq3m0LhIXCwbhfEztZNv4WlZmLd5rnKi 4O7PZRtQtjwlAaaznY86a0bEAlkwL80AefDxmSYo8RkstRoIHjpvgwyqtrIUu7y/ IbfWDKND34AUYo9DdAyekX2Q8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7l1bFJ letAxhVm77BZqIw4pAArMB8GA1UdIwQYMBaAFI3p0HT/PI1RVBXr8PDlasA+6t06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzNy8zRDhBQzU0NjND QTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9qZW5RZFA4OGpWRlVGZXZ3OE9WcXdEN3Ez VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzNy8zRDhBQzU0NjNDQTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9qZW5RZFA4OGpW RlVGZXZ3OE9WcXdEN3EzVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVligs82Ie/oqwPIFnESreF/jwzTYIoYCMF3qiUny+8k5JJgUl8lV2q1uHDR3 D1XUAlWGRy+YQ8BYVUJ5K6qUyp20/W0xMo9XP7I0dRYLMXKTH7MGl7PshvtrfJih 95ihct/ML6vNXVzAGHcDaLT6Ly5BLoQ/8UW8r7WgiMCJTZvzBB5Ul1p/sKX6aiug suuIRBT7LLBOfQPPFjw7pNYOyrzJhx26W/pZiL8NFRfkzkep/jiZuBxCAiju38GC NcTHl9LUzscf2dWIqvPvICTPWSF1Zl3pqBFDh4ixwdDfP2LosdmlVBPN2GTUBDHo DudnSxBO7SAruNu8iOvujkusIw== -----END CERTIFICATE-----Generated at Tue Jun 2 22:01:34 2026 by rpki-client