$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: uL7jHDQVi5v/aoWrvU/txhSHiVA8x5AOt5VDKBVBFII= Subject key identifier: 8F:E1:AF:AD:C1:7C:60:AF:70:1B:C1:52:E8:2A:1E:E1:3D:C9:75:4C Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: DD Signing time: Thu 21 May 2026 06:48:38 +0000 Manifest this update: Thu 21 May 2026 06:48:38 +0000 Manifest next update: Thu 28 May 2026 06:48:38 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: uPTGLrFBd16aAvRSzpvL18urVfkBOCxf1UYiZ9MS9K0=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: May 21 06:48:38 2026 GMT Not After : May 28 06:48:38 2026 GMT Subject: CN=6a0eaac6-26e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:29:5f:de:82:83:00:a9:c8:4d:a2:89:f0: 31:11:fc:dc:f0:5d:e0:19:1a:dd:37:70:98:11:f0: 4f:d7:ff:f6:b3:29:77:1f:0d:f6:92:81:8f:cf:18: 49:ad:34:3d:be:13:1c:b7:a3:c8:a8:44:c1:97:29: 24:39:ed:bf:7b:bc:da:94:ac:13:2a:49:81:c9:27: 2d:7d:8b:42:c3:bf:8c:2e:ec:f9:b1:ce:f4:00:3f: 4c:dc:61:44:76:a4:6a:4c:69:db:cf:dd:c6:4c:d2: 44:a6:ea:44:50:a4:d0:5e:0d:37:2d:c7:c0:d2:9a: ee:86:e8:be:27:79:e4:0b:4a:24:67:da:51:10:1e: 0d:48:5a:b8:74:7f:2a:4c:e5:28:61:fa:e1:da:2e: 75:79:5e:69:c7:aa:a8:8c:0f:1c:fe:f4:dd:c0:78: 8e:1d:f3:7b:4c:41:14:e4:02:7e:6f:8f:de:50:c8: dd:48:0e:4c:c6:3a:80:bd:f7:ea:9d:ee:85:f4:e6: 11:58:38:c6:fb:b3:e8:f8:74:ef:d3:e5:d8:0d:41: fd:cc:31:03:b2:6a:dc:2e:d7:46:11:b6:b9:3c:66: 24:52:1d:52:0b:a9:38:8e:6d:3c:3b:fd:7e:1a:3f: 89:c1:cb:87:d5:5d:97:5b:17:e9:93:cd:e5:98:d3: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:AF:AD:C1:7C:60:AF:70:1B:C1:52:E8:2A:1E:E1:3D:C9:75:4C X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:df:33:86:e3:3b:cf:7a:ae:ff:73:ae:bb:f6:3a:ca:bc:4d: 1a:2d:87:c3:34:f5:eb:a4:a2:30:6b:d9:f2:b3:9b:e7:65:64: 97:00:12:09:c3:0b:ab:f9:8f:75:bb:ac:32:92:8e:87:ad:f0: af:2a:c0:2d:e5:d0:34:a8:b7:92:8f:55:53:63:f0:51:ea:41: be:b0:58:6e:f9:4c:5e:96:df:4c:f7:ad:d9:89:66:a7:2d:c7: 66:09:a2:c4:b6:d1:0d:c8:3a:a6:0d:8d:0c:ff:44:ee:fe:d7: ca:44:3c:5f:21:fa:cd:f8:98:b7:25:17:03:d5:d5:15:b4:90: bf:06:ba:d3:e3:7b:76:e0:4a:4d:b0:f7:4c:8c:c9:8f:0e:33: 67:b8:69:5d:e3:97:d4:c1:fc:17:0e:d2:ef:69:5a:e7:73:01: 0e:bd:38:e6:53:7a:2f:d6:8c:49:b1:4d:f3:93:a3:b5:cf:cd: 9d:bb:83:bc:c3:9e:ec:73:61:8c:79:87:c3:52:70:b6:23:01: a7:d9:7b:33:e0:53:ec:98:8b:ee:7a:4f:4e:57:f5:48:7e:32: 20:35:56:f4:b8:15:d2:b8:28:58:33:a9:e3:df:3f:bb:9f:3d: 84:43:35:ab:cc:bd:5a:ad:3b:8f:8e:c2:d6:61:45:41:58:d9: 61:83:36:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENFQTMzOEI4MjI0 MjU5MTc1Q0IwHhcNMjYwNTIxMDY0ODM4WhcNMjYwNTI4MDY0ODM4WjAYMRYwFAYD VQQDEw02YTBlYWFjNi0yNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSIpX96CgwCpyE2iifAxEfzc8F3gGRrdN3CYEfBP1//2syl3Hw32koGPzxhJ rTQ9vhMct6PIqETBlykkOe2/e7zalKwTKkmBySctfYtCw7+MLuz5sc70AD9M3GFE dqRqTGnbz93GTNJEpupEUKTQXg03LcfA0pruhui+J3nkC0okZ9pREB4NSFq4dH8q TOUoYfrh2i51eV5px6qojA8c/vTdwHiOHfN7TEEU5AJ+b4/eUMjdSA5MxjqAvffq ne6F9OYRWDjG+7Po+HTv0+XYDUH9zDEDsmrcLtdGEba5PGYkUh1SC6k4jm08O/1+ Gj+JwcuH1V2XWxfpk83lmNNVlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/hr63B fGCvcBvBUugqHuE9yXVMMB8GA1UdIwQYMBaAFJSWsfxgY2RDcjmM6jOLgiQlkXXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CQTAwQzUxNDEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpFTnlPWXpxTTR1Q0pDV1Jk Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpF TnlPWXpxTTR1Q0pDV1JkY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFd8zhuM7z3qu/3Ouu/Y6yrxNGi2HwzT166SiMGvZ8rOb52VklwASCcMLq/mP dbusMpKOh63wryrALeXQNKi3ko9VU2PwUepBvrBYbvlMXpbfTPet2Ylmpy3HZgmi xLbRDcg6pg2NDP9E7v7XykQ8XyH6zfiYtyUXA9XVFbSQvwa60+N7duBKTbD3TIzJ jw4zZ7hpXeOX1MH8Fw7S72la53MBDr045lN6L9aMSbFN85Ojtc/NnbuDvMOe7HNh jHmHw1JwtiMBp9l7M+BT7JiL7npPTlf1SH4yIDVW9LgV0rgoWDOp498/u589hEM1 q8y9Wq07j47C1mFFQVjZYYM2Gg== -----END CERTIFICATE-----Generated at Thu May 21 11:14:50 2026 by rpki-client