$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: aQUgnrmK85y/QsJm32a+jUfAiu56c5F4Bvhp3k/IA+A= Subject key identifier: 00:0B:F2:B1:8C:1A:3F:81:B2:76:79:85:A4:21:B3:B1:1A:FE:7A:87 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F28 Signing time: Wed 20 May 2026 17:35:14 +0000 Manifest this update: Wed 20 May 2026 17:35:14 +0000 Manifest next update: Wed 27 May 2026 17:35:14 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: gPbTZHcbiNVUKxmMwdOgEcgppwgfV0XgsSjwW7XFQdE=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: May 20 17:35:14 2026 GMT Not After : May 27 17:35:14 2026 GMT Subject: CN=6a0df0d2-0c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:05:c8:68:5e:08:2e:54:39:4a:a1:1e:80: a7:00:d4:49:b0:8f:cc:ba:26:a6:72:00:10:34:ac: b5:e9:12:1f:28:2f:d5:ef:74:a3:5b:22:35:8e:ee: 84:78:5c:bc:d2:2e:40:d8:9c:16:7d:f2:4d:b3:84: 6f:be:a3:07:78:41:e4:7b:1e:7f:d7:17:b5:6f:55: 0f:54:7c:96:78:40:04:8b:6f:d5:c5:67:cb:44:d9: 1f:d1:5a:e5:10:a9:46:15:0a:68:b7:22:62:43:0f: d0:02:3b:88:55:1c:08:79:ce:2d:42:f8:03:e8:be: f4:80:2d:06:2c:d9:56:a5:24:b7:ea:50:9a:a4:57: af:b3:c8:e6:7d:d8:c0:6e:b2:a8:f2:6c:61:fc:37: 32:30:c5:3f:65:75:ed:72:51:dc:d2:d3:97:21:ce: 55:e4:e2:3a:54:2f:5b:2b:73:f5:55:3c:65:f3:be: 65:ba:06:f2:b7:6f:6a:6b:56:1e:18:d8:d9:67:4d: eb:7c:28:c5:2d:34:05:c7:7a:1a:04:20:eb:c6:2c: 17:5a:96:ff:7d:14:71:74:60:27:5f:3f:99:a2:14: 0c:f2:8d:f0:81:44:e6:7b:f9:d3:b2:94:57:a6:ac: 8f:7b:5d:8f:ed:02:5d:ff:ba:f5:1b:f9:0e:f2:05: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0B:F2:B1:8C:1A:3F:81:B2:76:79:85:A4:21:B3:B1:1A:FE:7A:87 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:7b:ca:91:e7:c7:da:45:d2:6c:c1:f1:4c:0b:72:3a:0d: 39:3d:7f:a9:15:04:32:1f:fa:89:a4:ba:57:b9:12:81:51:38: 2d:b8:5c:75:8d:4d:e3:98:16:df:75:15:1c:3f:71:49:63:fc: 4a:c6:dd:d8:18:21:ac:eb:9e:b4:e2:fa:ab:3b:88:4a:b6:85: 60:e8:4f:90:46:33:09:cb:17:8f:7a:16:c3:19:de:93:eb:2d: b5:db:ed:1e:15:87:97:3b:d5:99:cc:6b:18:cd:33:00:0b:6f: f1:0b:c8:21:83:97:c4:97:69:0f:de:42:6c:fd:69:45:88:98: d3:22:e4:2e:0f:b2:e9:d3:ae:b1:04:e4:23:d1:f4:f2:7d:af: 71:41:90:4e:97:6e:47:7b:56:f3:ec:8e:4b:36:76:43:de:eb: e2:8a:c5:33:86:97:cb:27:c2:53:0e:93:44:c6:08:43:e0:3b: 5b:29:52:8e:9c:61:38:10:61:11:ac:09:67:50:49:b9:dc:24: 32:e5:52:ea:26:17:1a:8b:a9:0a:84:88:b1:54:79:4c:eb:af: c0:46:c0:b1:74:3d:12:2b:da:17:24:63:66:a0:14:13:bf:fc: 23:99:aa:4f:e7:71:96:e1:7f:d6:4e:29:93:6e:25:9a:46:ac: e6:f7:70:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwNTIwMTczNTE0WhcNMjYwNTI3MTczNTE0WjAYMRYwFAYD VQQDEw02YTBkZjBkMi0wYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T0FyGheCC5UOUqhHoCnANRJsI/MuiamcgAQNKy16RIfKC/V73SjWyI1ju6E eFy80i5A2JwWffJNs4RvvqMHeEHkex5/1xe1b1UPVHyWeEAEi2/VxWfLRNkf0Vrl EKlGFQpotyJiQw/QAjuIVRwIec4tQvgD6L70gC0GLNlWpSS36lCapFevs8jmfdjA brKo8mxh/DcyMMU/ZXXtclHc0tOXIc5V5OI6VC9bK3P1VTxl875lugbyt29qa1Ye GNjZZ03rfCjFLTQFx3oaBCDrxiwXWpb/fRRxdGAnXz+ZohQM8o3wgUTme/nTspRX pqyPe12P7QJd/7r1G/kO8gX+vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAL8rGM Gj+BsnZ5haQhs7Ea/nqHMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOJ7ypHnx9pF0mzB8UwLcjoNOT1/qRUEMh/6iaS6V7kSgVE4LbhcdY1N45gW 33UVHD9xSWP8Ssbd2BghrOuetOL6qzuISraFYOhPkEYzCcsXj3oWwxnek+sttdvt HhWHlzvVmcxrGM0zAAtv8QvIIYOXxJdpD95CbP1pRYiY0yLkLg+y6dOusQTkI9H0 8n2vcUGQTpduR3tW8+yOSzZ2Q97r4orFM4aXyyfCUw6TRMYIQ+A7WylSjpxhOBBh EawJZ1BJudwkMuVS6iYXGoupCoSIsVR5TOuvwEbAsXQ9EivaFyRjZqAUE7/8I5mq T+dxluF/1k4pk24lmkas5vdw7w== -----END CERTIFICATE-----Generated at Thu May 21 12:36:44 2026 by rpki-client