$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: 8pBvho8+HvpSrn9REAN/7z+KOPhVYTbJSuPzayULDqY= Subject key identifier: D2:16:BF:56:31:7B:BF:30:2A:4B:40:57:16:9B:9E:1A:43:67:F1:F4 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 14 Signing time: Mon 01 Jun 2026 09:51:20 +0000 Manifest this update: Mon 01 Jun 2026 09:51:19 +0000 Manifest next update: Mon 08 Jun 2026 09:51:19 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: L3r8YTDf7WzOaqa3scyyR/a9ZnSQTwNCZ82BdwVQZsY=) 2: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) 3: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Jun 1 09:51:19 2026 GMT Not After : Jun 8 09:51:19 2026 GMT Subject: CN=6a1d5618-6a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:d3:c9:c5:49:c6:a6:45:46:e3:8f:1a:6d: 51:01:d8:61:0e:42:3f:50:7c:7f:94:5e:ed:61:59: 3a:e9:c5:c9:db:21:24:05:3e:37:05:f4:78:22:61: f0:d6:38:5f:5b:c8:12:18:87:e7:93:63:54:3c:c5: 88:1a:6a:af:a0:28:7e:7c:08:b4:37:b6:1f:ec:35: 75:9b:94:c6:f6:18:34:49:99:e4:c9:46:88:d5:ce: 2e:d3:fe:1a:aa:2d:85:39:29:8f:18:d7:38:74:04: 2e:76:0c:48:34:42:0a:00:32:09:d1:ed:38:ce:6e: 5f:fd:e8:33:42:17:fc:bc:fa:f3:da:59:62:68:0a: 2f:4a:62:b0:f1:1d:fb:f1:9a:fc:36:9d:31:89:19: b7:97:51:e0:ab:47:41:1b:df:df:c4:09:60:62:da: 36:6b:83:ed:15:3d:37:5d:42:34:9d:17:fb:8b:87: e8:f6:16:00:30:e5:2f:b0:17:21:dd:d2:80:11:42: 46:13:af:26:c3:c2:12:54:a5:b6:d9:55:40:47:e5: 24:a8:d5:6c:65:c9:ee:71:0f:9b:9f:bb:17:ef:03: 7a:8b:d5:59:3d:8b:fb:fc:82:c7:49:c6:30:c0:11: 71:ac:72:18:1f:ef:81:4d:d3:80:b5:34:fb:0c:f7: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:BF:56:31:7B:BF:30:2A:4B:40:57:16:9B:9E:1A:43:67:F1:F4 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:54:fd:8d:76:13:bf:89:a6:21:1d:4f:93:de:2e:e9:cb:29: e8:14:a0:46:e6:c7:54:a1:c0:4e:31:a4:09:cd:b4:6f:cd:81: 22:02:25:31:a6:cf:c9:13:db:33:e5:f8:f9:21:f3:99:23:5e: b8:6c:36:67:9e:f8:c2:77:11:57:df:d2:76:d7:21:b8:b5:46: 65:c3:d3:75:33:31:49:31:d6:3b:e2:3c:8a:4a:6c:8d:d7:a6: 51:19:ea:b6:d4:ed:0b:2f:93:ce:a7:ce:9b:bf:54:aa:6c:7d: df:af:0f:47:46:28:24:32:c7:2d:aa:f2:62:56:0d:52:ef:73: b6:b7:0d:45:89:40:b9:ff:63:25:8c:7a:23:30:92:1e:da:83: ba:83:34:39:10:07:df:de:74:e0:10:29:2d:18:4f:02:19:f2: 09:27:1f:31:70:8c:36:84:6e:30:51:1d:ce:28:a8:c3:b6:a4: a5:74:9a:64:79:0a:06:cd:7e:57:60:1b:cd:83:a3:59:6e:ef: 28:f0:46:f6:3c:a4:04:64:20:b3:7f:eb:d9:ff:53:05:b3:c0: bc:d6:4c:1c:02:81:b0:e4:4a:ff:e3:d1:ae:ce:c9:d7:f7:07: 32:e7:73:c5:53:92:3d:f3:70:df:16:6d:bb:86:ea:0d:06:dd: 87:60:ff:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA2MDEwOTUxMTlaFw0yNjA2MDgwOTUxMTlaMBgxFjAUBgNV BAMTDTZhMWQ1NjE4LTZhNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2w9PJxUnGpkVG448abVEB2GEOQj9QfH+UXu1hWTrpxcnbISQFPjcF9HgiYfDW OF9byBIYh+eTY1Q8xYgaaq+gKH58CLQ3th/sNXWblMb2GDRJmeTJRojVzi7T/hqq LYU5KY8Y1zh0BC52DEg0QgoAMgnR7TjObl/96DNCF/y8+vPaWWJoCi9KYrDxHfvx mvw2nTGJGbeXUeCrR0Eb39/ECWBi2jZrg+0VPTddQjSdF/uLh+j2FgAw5S+wFyHd 0oARQkYTrybDwhJUpbbZVUBH5SSo1Wxlye5xD5ufuxfvA3qL1Vk9i/v8gsdJxjDA EXGschgf74FN04C1NPsM9+SbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0ha/VjF7 vzAqS0BXFpueGkNn8fQwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaVP2NdhO/iaYhHU+T3i7pyynoFKBG5sdUocBOMaQJzbRvzYEiAiUxps/JE9sz 5fj5IfOZI164bDZnnvjCdxFX39J21yG4tUZlw9N1MzFJMdY74jyKSmyN16ZRGeq2 1O0LL5POp86bv1SqbH3frw9HRigkMsctqvJiVg1S73O2tw1FiUC5/2MljHojMJIe 2oO6gzQ5EAff3nTgECktGE8CGfIJJx8xcIw2hG4wUR3OKKjDtqSldJpkeQoGzX5X YBvNg6NZbu8o8Eb2PKQEZCCzf+vZ/1MFs8C81kwcAoGw5Er/49GuzsnX9wcy53PF U5I983DfFm27huoNBt2HYP9c -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:50 2026 by rpki-client