$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: uzI+jqfJMPm6FIc9ugnSc6IZdvElqULa/BenwdpERe8= Subject key identifier: A9:BD:3F:C0:1D:4C:0A:70:5A:77:76:3F:FC:B9:49:72:22:BB:0C:0D Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0D93 Signing time: Wed 20 May 2026 17:58:05 +0000 Manifest this update: Wed 20 May 2026 17:58:04 +0000 Manifest next update: Wed 27 May 2026 17:58:04 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: reRdDR3DA5Hq4Nz97SMuTWJ4oAw6zEflI7AIGvwOWHA=) 2: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=) 3: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=) 4: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: May 20 17:58:04 2026 GMT Not After : May 27 17:58:04 2026 GMT Subject: CN=6a0df62d-db59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:95:a7:8c:54:e4:91:bb:61:44:fe:e9:2b: c5:a2:2a:06:7c:56:c2:d0:21:7d:c1:23:b0:29:ca: fa:1f:a1:ea:2f:b3:06:f5:37:3c:19:d3:5b:e9:a8: c0:e6:70:3f:64:53:21:69:34:61:02:62:75:17:00: b5:77:12:bb:ba:29:87:58:bc:4f:1b:24:bb:fe:d8: 70:1e:c5:37:15:9e:c5:2e:eb:48:64:0f:5a:57:03: bd:2e:ba:30:a6:cb:28:e3:3b:a6:4a:4c:2e:a9:19: 72:78:06:a5:66:94:8b:14:79:1e:8d:48:31:72:41: 95:bb:63:bb:22:55:f3:88:0c:9b:8c:84:64:cd:9a: cc:09:6e:2b:72:2e:1e:d3:57:94:75:e1:c8:9a:b1: 9f:1e:20:ba:33:08:c3:2f:93:4a:77:ae:9e:be:03: 59:2f:ee:21:70:ff:a1:99:aa:71:4c:04:7c:d7:df: d1:74:73:46:a8:01:84:ed:b8:83:6a:fd:87:5f:9c: 23:72:45:d9:70:7a:f4:a5:b9:69:5d:9d:f5:2c:99: 9e:27:c1:e9:20:6a:e1:83:52:2f:e0:da:10:e3:6f: cf:b7:c5:ef:f9:91:ac:d6:18:01:78:d6:6c:aa:4d: 29:34:d7:49:8c:71:3c:22:1d:8c:77:93:c7:5a:57: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BD:3F:C0:1D:4C:0A:70:5A:77:76:3F:FC:B9:49:72:22:BB:0C:0D X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:81:4c:f3:38:c5:68:c6:1e:bf:ed:5e:97:5f:20:e2:5b: 4a:3b:23:fc:d9:92:5e:8c:4f:99:51:a9:fa:53:7d:07:50:31: 60:7b:08:ce:34:9c:7e:74:a5:bd:7b:d3:29:45:c3:33:22:6c: 69:8c:bd:68:7e:97:5e:33:60:45:0b:fc:90:f1:3a:7c:00:d3: e2:37:1a:08:a6:65:15:9b:39:77:80:ed:0b:08:60:ca:7c:4e: 4a:43:85:6d:18:ee:97:e7:66:eb:b2:b0:84:ae:bd:11:3d:ff: cb:79:a9:63:e7:a9:be:ec:59:bf:41:9a:e6:c8:b4:78:91:f1: 30:64:bf:fa:c1:78:0d:e3:89:2d:a7:37:d3:77:3b:fd:61:cb: f0:1f:b6:ad:32:f9:5f:24:8a:64:76:16:c7:94:43:f8:8f:a5: d4:49:7d:d4:4e:2d:bc:c4:62:1c:2c:f8:ae:ff:1e:73:11:43: 1b:f7:07:c4:e8:b2:15:c9:9c:de:4f:cd:d6:90:6d:85:dc:df: 6f:86:89:f1:3c:52:65:a0:da:30:98:f6:64:d2:40:fe:8c:8c: c9:94:78:4d:2a:ab:38:7f:e5:28:2c:61:0d:fa:40:db:84:11: ba:ce:a9:15:77:cb:9e:17:2e:98:88:30:42:8e:ee:9d:1c:26: 20:30:8b:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwNTIwMTc1ODA0WhcNMjYwNTI3MTc1ODA0WjAYMRYwFAYD VQQDEw02YTBkZjYyZC1kYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuWVp4xU5JG7YUT+6SvFoioGfFbC0CF9wSOwKcr6H6HqL7MG9Tc8GdNb6ajA 5nA/ZFMhaTRhAmJ1FwC1dxK7uimHWLxPGyS7/thwHsU3FZ7FLutIZA9aVwO9Lrow psso4zumSkwuqRlyeAalZpSLFHkejUgxckGVu2O7IlXziAybjIRkzZrMCW4rci4e 01eUdeHImrGfHiC6MwjDL5NKd66evgNZL+4hcP+hmapxTAR819/RdHNGqAGE7biD av2HX5wjckXZcHr0pblpXZ31LJmeJ8HpIGrhg1Iv4NoQ42/Pt8Xv+ZGs1hgBeNZs qk0pNNdJjHE8Ih2Md5PHWlciNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKm9P8Ad TApwWnd2P/y5SXIiuwwNMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqgWBTPM4xWjGHr/tXpdfIOJbSjsj/NmSXoxPmVGp+lN9B1AxYHsIzjScfnSl vXvTKUXDMyJsaYy9aH6XXjNgRQv8kPE6fADT4jcaCKZlFZs5d4DtCwhgynxOSkOF bRjul+dm67KwhK69ET3/y3mpY+epvuxZv0Ga5si0eJHxMGS/+sF4DeOJLac303c7 /WHL8B+2rTL5XySKZHYWx5RD+I+l1El91E4tvMRiHCz4rv8ecxFDG/cHxOiyFcmc 3k/N1pBthdzfb4aJ8TxSZaDaMJj2ZNJA/oyMyZR4TSqrOH/lKCxhDfpA24QRus6p FXfLnhcumIgwQo7unRwmIDCLdQ== -----END CERTIFICATE-----Generated at Thu May 21 10:54:04 2026 by rpki-client