$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: mtvA4Xox8xCm7u3XGMwV29s3G9696n3X7IEDKafcTW8= Subject key identifier: E1:02:85:CB:45:18:AF:D9:B5:97:25:F3:A2:76:2B:58:69:50:61:A4 Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: EA Signing time: Tue 05 May 2026 06:29:30 +0000 Manifest this update: Tue 05 May 2026 06:29:29 +0000 Manifest next update: Tue 12 May 2026 06:29:29 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: l6W13W+zgCAyaoSkgm50zHoBRgfip1PWZN6j2nOWdc0=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: SZZXZtv9x+ZJ89heiQVizmtDvpK3qMjrqCOCy4opKQo=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: jw0OlOADXVlEE4I0cP+j9CVDdilfXWfPDRrYPS66FZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: May 5 06:29:29 2026 GMT Not After : May 12 06:29:29 2026 GMT Subject: CN=69f98e49-7917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:e2:76:52:a7:34:61:03:fc:41:ed:a9:92: ba:ea:80:80:75:a6:2f:7e:15:79:8f:d7:eb:ff:61: 46:cd:a8:4d:6e:b6:d2:19:58:98:92:f5:95:f3:17: f7:50:2e:ab:38:b4:24:71:f7:43:fa:22:66:51:39: e9:15:17:c2:d9:91:b4:32:4e:4c:e4:f1:f6:07:25: be:e9:54:c5:ad:38:21:9f:9f:66:fe:02:ed:26:98: 51:1d:be:42:8d:f5:1d:62:ac:c8:b4:d7:e8:7d:f5: 39:a3:43:a8:6b:8b:69:6f:9b:eb:2f:58:65:dc:c6: dd:71:32:d3:fa:60:98:a2:80:29:9d:5d:f8:59:05: 90:6d:a3:a5:19:2f:9d:8f:04:78:ac:9f:ef:29:32: 5b:34:0d:aa:15:b6:83:6c:be:85:78:35:c6:3a:3b: 4d:32:e7:c2:c7:46:79:b9:36:6a:5a:91:4c:c3:68: d5:77:b3:b1:1f:74:af:4e:8c:98:a0:5d:97:89:51: 1f:a2:6e:da:cc:96:bc:7b:b3:37:04:7c:cd:29:ba: 05:49:db:4b:00:5f:1a:31:4c:bb:8c:cc:c4:6f:8d: dc:6d:ed:06:4f:1c:01:72:1c:2c:f4:a9:28:d6:0f: f5:50:3a:46:02:5e:09:8b:9c:75:95:0c:e6:95:6c: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:02:85:CB:45:18:AF:D9:B5:97:25:F3:A2:76:2B:58:69:50:61:A4 X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:f6:e8:8f:f0:fc:ec:e1:ea:07:d7:09:5f:02:12:e4:42: 85:a1:b9:30:26:11:dd:07:0a:f3:88:de:9b:2d:4a:2d:e3:a6: 98:73:f7:19:ab:25:6e:ef:a8:65:4d:5f:00:05:f7:c2:c3:e0: 43:77:dd:83:1d:b7:cf:e8:75:74:14:6d:6b:35:6f:1c:e7:db: 9b:7c:47:cc:11:40:56:3d:af:8e:11:fe:d0:bf:3d:30:c6:80: 16:42:0e:97:2e:97:fd:cb:a7:9b:85:41:d1:7a:2a:f1:82:eb: 09:fa:ca:ef:cb:e5:4e:82:0d:5b:1d:8a:a7:f7:4f:cb:f5:e5: 82:94:8e:d3:a9:30:9d:e3:d8:6c:87:7c:d1:66:70:26:ec:bb: b8:25:47:f8:d7:72:20:46:3f:5f:ed:69:ae:93:58:76:bf:ca: 6e:66:9a:23:f8:7a:01:a2:5a:31:15:c5:ad:71:2a:d1:28:d7: c6:a1:e3:7b:7a:88:77:3e:79:88:b1:cd:d8:ce:ed:b1:2b:6a: 28:cc:36:e7:2a:80:13:fa:6e:25:28:d8:bb:17:d6:bc:43:b5: 14:83:56:29:27:c9:39:fe:0b:8a:dd:0b:f3:df:2e:40:0e:33: 37:ab:a0:77:ef:f2:07:63:18:62:fb:8b:62:16:86:88:82:0e: 11:a4:97:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3 NUVBRTZEMjkwHhcNMjYwNTA1MDYyOTI5WhcNMjYwNTEyMDYyOTI5WjAYMRYwFAYD VQQDEw02OWY5OGU0OS03OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVPidlKnNGED/EHtqZK66oCAdaYvfhV5j9fr/2FGzahNbrbSGViYkvWV8xf3 UC6rOLQkcfdD+iJmUTnpFRfC2ZG0Mk5M5PH2ByW+6VTFrTghn59m/gLtJphRHb5C jfUdYqzItNfoffU5o0Ooa4tpb5vrL1hl3MbdcTLT+mCYooApnV34WQWQbaOlGS+d jwR4rJ/vKTJbNA2qFbaDbL6FeDXGOjtNMufCx0Z5uTZqWpFMw2jVd7OxH3SvToyY oF2XiVEfom7azJa8e7M3BHzNKboFSdtLAF8aMUy7jMzEb43cbe0GTxwBchws9Kko 1g/1UDpGAl4Ji5x1lQzmlWw+ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEChctF GK/ZtZcl86J2K1hpUGGkMB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5 UlRjcWpqczJnMHgxNnViU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHun26I/w/Ozh6gfXCV8CEuRChaG5MCYR3QcK84jemy1KLeOmmHP3Gaslbu+o ZU1fAAX3wsPgQ3fdgx23z+h1dBRtazVvHOfbm3xHzBFAVj2vjhH+0L89MMaAFkIO ly6X/cunm4VB0Xoq8YLrCfrK78vlToINWx2Kp/dPy/XlgpSO06kwnePYbId80WZw Juy7uCVH+NdyIEY/X+1prpNYdr/KbmaaI/h6AaJaMRXFrXEq0SjXxqHje3qIdz55 iLHN2M7tsStqKMw25yqAE/puJSjYuxfWvEO1FINWKSfJOf4Lit0L898uQA4zN6ug d+/yB2MYYvuLYhaGiIIOEaSXaw== -----END CERTIFICATE-----Generated at Tue May 5 20:11:15 2026 by rpki-client