$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft File: JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json) Hash identifier: YvOYydjOURv1TLVVtxDnnXyv5MzoxYO+kwbglEZQX+k= Subject key identifier: DA:1F:67:55:F5:F3:6A:EE:9C:92:35:34:49:A1:1C:BF:14:3E:3E:53 Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft Manifest number: 0D29 Signing time: Sun 26 Jul 2026 18:32:31 +0000 Manifest this update: Sun 26 Jul 2026 18:32:31 +0000 Manifest next update: Sun 02 Aug 2026 18:32:31 +0000 Files and hashes: 1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: TErSFkGRJlbGDHIVNaKGWgHCkY4Eds1gkZT9nvRr9Eg=) 2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: VuO6oFmdrg28zC8aljPGAA2mZqdTmBMcrxACwaZ0phY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Validity Not Before: Jul 26 18:32:31 2026 GMT Not After : Aug 2 18:32:31 2026 GMT Subject: CN=6a6652bf-cb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:9a:9f:8f:42:61:9a:6e:f1:eb:c5:f4:da: eb:32:dd:39:10:40:00:f4:80:2e:00:0a:57:2d:14: 98:08:71:bf:1f:ca:2f:8b:13:0d:7f:51:8a:47:df: 82:f9:f2:a7:4b:56:37:b3:60:27:48:86:c7:e0:58: 03:70:13:60:e3:eb:da:3d:d0:df:a8:5e:09:67:08: b5:4e:58:b3:26:90:86:67:63:05:79:61:aa:d7:b4: 6d:e7:85:ea:da:cb:74:e3:ed:73:90:ae:14:82:97: ab:4f:6e:64:7b:36:94:5a:cb:83:64:a2:83:06:af: c4:d4:ba:a1:f9:ba:42:3e:08:c5:50:c6:aa:44:4e: 44:1b:27:b8:4a:55:49:4b:29:46:c2:95:d7:e0:72: 34:07:39:81:5b:9b:24:02:49:36:1c:ef:a6:c7:49: aa:46:77:54:eb:ba:f1:24:2a:13:59:43:2a:d8:aa: 38:d2:7c:45:54:f4:cb:9c:ab:98:9f:66:27:04:ef: ef:ba:90:b0:a0:a4:ef:ff:9c:c5:c1:db:78:1e:5b: 28:82:9d:5c:e5:40:24:d4:10:35:91:73:71:bc:df: 55:e1:9b:48:41:b0:b8:5c:9e:81:c3:04:fc:7d:80: c1:d8:4a:91:45:b0:dc:6d:23:61:9b:fb:ab:57:48: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1F:67:55:F5:F3:6A:EE:9C:92:35:34:49:A1:1C:BF:14:3E:3E:53 X509v3 Authority Key Identifier: keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:a4:b1:66:fb:39:0f:83:37:e9:88:90:0e:87:93:61:33: b4:c6:f7:95:c1:5a:f1:35:93:e4:49:3a:d2:f7:95:b0:19:0a: 68:e4:aa:68:1d:eb:88:52:1f:3c:44:47:31:38:8e:3c:d4:c6: 4a:68:5e:2b:b8:38:1f:5c:ee:5a:86:8a:b6:29:c1:d3:c0:d5: 4c:69:27:f3:58:31:8c:39:2f:11:97:f0:b5:8e:5b:67:7f:51: a0:42:e4:48:43:10:9e:3d:ba:50:fc:94:d4:40:30:dc:9d:3a: 0e:4d:19:07:dd:45:0f:64:e1:17:77:2a:44:a1:7b:ee:44:a6: 58:86:11:13:ff:6d:f4:7c:46:82:16:dd:ec:77:e1:af:c4:c2: cc:15:c0:ea:28:fe:98:43:c7:b0:44:40:cd:07:d0:2e:03:3c: 88:8a:81:6c:1f:9b:43:82:e6:fc:fe:ee:e4:cb:4d:fe:c9:9b: 32:8c:71:21:0d:24:61:b0:fe:46:cb:71:4b:58:d2:06:49:21: 0c:9b:24:fe:73:7e:51:5b:5f:14:60:c2:cf:87:6f:26:8d:1d: 24:8b:66:22:e7:ff:d9:0e:57:b2:9d:8b:2f:94:2c:9f:0b:26: d5:19:20:c0:c7:3a:78:80:b3:ba:bd:84:4c:85:fc:16:8c:08: 6a:b4:d8:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIxNTIxMTAvBgNVBAUTKDI0M0U0ODI5QUJGMkY5MDlDMTJEREEwNDRGRTVEMzZC ODIxMDUzOTIwHhcNMjYwNzI2MTgzMjMxWhcNMjYwODAyMTgzMjMxWjAYMRYwFAYD VQQDEw02YTY2NTJiZi1jYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi96an49CYZpu8evF9NrrMt05EEAA9IAuAApXLRSYCHG/H8ovixMNf1GKR9+C +fKnS1Y3s2AnSIbH4FgDcBNg4+vaPdDfqF4JZwi1TlizJpCGZ2MFeWGq17Rt54Xq 2st04+1zkK4UgperT25kezaUWsuDZKKDBq/E1Lqh+bpCPgjFUMaqRE5EGye4SlVJ SylGwpXX4HI0BzmBW5skAkk2HO+mx0mqRndU67rxJCoTWUMq2Ko40nxFVPTLnKuY n2YnBO/vupCwoKTv/5zFwdt4Hlsogp1c5UAk1BA1kXNxvN9V4ZtIQbC4XJ6BwwT8 fYDB2EqRRbDcbSNhm/urV0j8zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNofZ1X1 82runJI1NEmhHL8UPj5TMB8GA1UdIwQYMBaAFCQ+SCmr8vkJwS3aBE/l02uCEFOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjE1Mi9CN0M2QzYwMDA2 RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1RbkJMZG9FVC1YVGE0SVFV NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pENUlLYXZ5LVFuQkxkb0VULVhUYTRJUVU1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjE1Mi9CN0M2QzYwMDA2RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1R bkJMZG9FVC1YVGE0SVFVNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbCksWb7OQ+DN+mIkA6Hk2EztMb3lcFa8TWT5Ek60veVsBkKaOSqaB3riFIf PERHMTiOPNTGSmheK7g4H1zuWoaKtinB08DVTGkn81gxjDkvEZfwtY5bZ39RoELk SEMQnj26UPyU1EAw3J06Dk0ZB91FD2ThF3cqRKF77kSmWIYRE/9t9HxGghbd7Hfh r8TCzBXA6ij+mEPHsERAzQfQLgM8iIqBbB+bQ4Lm/P7u5MtN/smbMoxxIQ0kYbD+ RstxS1jSBkkhDJsk/nN+UVtfFGDCz4dvJo0dJItmIuf/2Q5Xsp2LL5Qsnwsm1Rkg wMc6eICzur2ETIX8FowIarTY0w== -----END CERTIFICATE-----Generated at Tue Jul 28 03:15:01 2026 by rpki-client