$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: fpXOCI5ixyecQowb0cccQ/zxGi9FMWkzFtpjKqfrLRs= Subject key identifier: AB:2A:26:96:41:7B:0F:CC:38:2E:61:CF:3A:B2:5D:9E:29:70:06:00 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 3556 Signing time: Wed 20 May 2026 15:15:27 +0000 Manifest this update: Wed 20 May 2026 15:15:27 +0000 Manifest next update: Wed 27 May 2026 15:15:27 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: xqspZL+MF7GwIvsIJ05DDShO/+f4a4LYkgbyj2/xGbI=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: UymEhDbFwl3qCyCqScVFcdAOyk6J7jfC5aOKZBd8Zmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: May 20 15:15:27 2026 GMT Not After : May 27 15:15:27 2026 GMT Subject: CN=6a0dd00f-6386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:24:6f:39:5e:ed:bb:f1:94:c1:4a:d8:c4: a1:f3:49:6d:61:69:3b:dd:67:46:64:74:8b:71:a3: 99:42:39:63:d7:ba:d7:8c:9a:9d:43:ce:89:46:68: 8c:a9:8f:2f:c4:ce:c5:c0:d6:fd:20:aa:7b:ca:f9: 29:69:1c:8b:8d:87:15:b0:af:f9:60:96:2b:54:8f: b5:0e:cb:d5:2f:15:ed:a7:c6:63:48:cc:e8:8c:a8: 90:d1:be:fd:e1:dd:c5:3f:0a:dd:bf:20:06:1c:37: 41:63:9e:c1:e9:1d:c6:b3:c3:03:19:f5:3a:39:12: ad:bd:a1:04:98:7b:7c:1e:77:f5:a2:92:b2:f5:7f: ef:74:18:43:6d:d4:28:45:4e:23:8d:65:26:35:2c: d4:cc:05:a8:ea:13:da:c9:97:d4:dc:00:c8:10:f9: d9:45:08:a8:02:68:66:65:75:0d:1d:24:a0:65:d3: 84:d8:46:6e:4c:bc:92:9e:44:96:45:09:f2:ca:18: 21:bd:62:69:2d:67:2f:ce:23:0e:70:26:33:42:e8: 78:37:29:4e:ca:4a:58:2e:a7:8d:35:91:d0:af:29: 27:3b:94:24:64:4b:7e:51:ee:76:19:2f:a4:cb:18: 24:d4:68:c8:16:10:e2:9d:47:84:80:b5:c6:58:d3: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:26:96:41:7B:0F:CC:38:2E:61:CF:3A:B2:5D:9E:29:70:06:00 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:70:4a:56:b6:c6:9b:f5:b8:4d:bd:09:96:70:3d:87:0f: 41:4e:28:da:c9:04:c1:b3:eb:9d:52:c7:2e:cc:95:94:02:5b: 63:76:23:7f:1c:80:0e:4b:a3:a9:47:44:92:3c:25:28:f0:4e: 15:58:f4:d3:9d:16:92:e2:be:d2:51:a2:6c:cc:54:22:fa:f0: 3d:8b:ea:97:d4:b3:04:af:6b:49:a0:a3:6d:ee:57:0a:37:eb: d0:fd:e5:51:0e:ec:6b:b1:97:f1:78:d5:94:c5:d1:f2:25:e7: bc:9d:23:9b:c0:1b:5e:e3:7b:b6:44:50:54:02:1f:d8:be:16: be:4e:fb:3e:48:4d:87:13:02:ab:67:43:6b:04:2a:77:6c:88: 6e:3b:4c:35:57:97:b6:c0:b6:ad:67:b2:2f:b1:23:32:0d:05: aa:d9:86:b4:35:c4:47:db:12:c2:5d:48:28:c2:7e:16:80:28: 1d:57:fa:2b:63:9e:52:58:1f:65:8c:cb:19:49:42:1f:45:72: 27:0b:69:5a:c0:0a:f5:fd:d2:4c:30:93:a9:49:76:24:ef:26: c4:01:6d:c2:85:b0:42:b0:80:43:93:e9:9a:2d:da:b8:68:67: 78:67:15:cc:9d:97:51:e3:80:99:5b:b0:62:b0:6d:4d:fc:bd: 8a:f9:4b:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjYwNTIwMTUxNTI3WhcNMjYwNTI3MTUxNTI3WjAYMRYwFAYD VQQDEw02YTBkZDAwZi02Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJkkbzle7bvxlMFK2MSh80ltYWk73WdGZHSLcaOZQjlj17rXjJqdQ86JRmiM qY8vxM7FwNb9IKp7yvkpaRyLjYcVsK/5YJYrVI+1DsvVLxXtp8ZjSMzojKiQ0b79 4d3FPwrdvyAGHDdBY57B6R3Gs8MDGfU6ORKtvaEEmHt8Hnf1opKy9X/vdBhDbdQo RU4jjWUmNSzUzAWo6hPayZfU3ADIEPnZRQioAmhmZXUNHSSgZdOE2EZuTLySnkSW RQnyyhghvWJpLWcvziMOcCYzQuh4NylOykpYLqeNNZHQryknO5QkZEt+Ue52GS+k yxgk1GjIFhDinUeEgLXGWNOYHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsqJpZB ew/MOC5hzzqyXZ4pcAYAMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgv5wSla2xpv1uE29CZZwPYcPQU4o2skEwbPrnVLHLsyVlAJbY3YjfxyADkuj qUdEkjwlKPBOFVj0050WkuK+0lGibMxUIvrwPYvql9SzBK9rSaCjbe5XCjfr0P3l UQ7sa7GX8XjVlMXR8iXnvJ0jm8AbXuN7tkRQVAIf2L4Wvk77PkhNhxMCq2dDawQq d2yIbjtMNVeXtsC2rWeyL7EjMg0FqtmGtDXER9sSwl1IKMJ+FoAoHVf6K2OeUlgf ZYzLGUlCH0VyJwtpWsAK9f3STDCTqUl2JO8mxAFtwoWwQrCAQ5Ppmi3auGhneGcV zJ2XUeOAmVuwYrBtTfy9ivlLaQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:38 2026 by rpki-client