$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: imnW8l2mrQCDxnCS2zleD2MO10fNhHHtS6rSaBOANpA= Subject key identifier: D5:9D:46:F7:82:BC:1E:A0:83:E1:D6:88:01:3E:36:0C:BC:6E:13:95 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 032A Signing time: Thu 21 May 2026 01:12:44 +0000 Manifest this update: Thu 21 May 2026 01:12:43 +0000 Manifest next update: Thu 28 May 2026 01:12:43 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: ZFdHPUcnif7HJSnox9T65l9MVOJm+cNQaujrLnbnFvE=) 2: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=) 4: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: May 21 01:12:43 2026 GMT Not After : May 28 01:12:43 2026 GMT Subject: CN=6a0e5c0b-92ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:13:c2:59:33:4c:a6:ca:fe:ec:54:7a:ff: 32:b2:c7:7b:b2:7f:eb:88:7c:b8:b8:5e:14:d1:af: 18:fd:7f:bb:14:20:9e:d0:1a:34:85:f5:51:91:f0: fe:e6:7b:56:71:61:ef:db:a7:e5:d4:6b:a1:91:94: d5:67:e7:b6:b4:4a:09:66:de:d9:ac:87:67:c6:4c: 91:3f:91:43:f8:64:fa:19:66:e1:f4:a0:d9:23:40: e0:c4:61:8a:10:f1:ed:4d:3e:25:08:99:ff:b0:8a: 44:f7:3c:37:7d:16:55:b1:17:48:88:0a:0f:33:9d: 51:6b:14:98:88:81:a6:3a:11:6b:8f:f1:ab:ba:74: 48:aa:51:d3:55:3d:0b:a3:54:4f:f1:ab:b5:0d:5b: bb:10:6b:b5:70:58:fb:4e:79:c9:80:1d:9a:84:7d: c2:44:76:f2:b8:e0:37:99:39:8d:27:25:41:21:f6: 2d:1c:cf:96:6b:12:45:bc:8c:82:f9:97:e9:f9:d9: 89:63:1e:26:c9:4f:8c:f9:46:cc:d0:ed:00:93:5b: 7d:72:10:18:fc:d6:22:b9:2e:e9:42:08:28:f3:c6: cc:7f:73:bc:c8:ec:d1:81:a1:6b:c6:9e:8f:1a:6a: 9e:5a:e1:88:d1:1c:c3:8f:46:69:99:be:ea:55:31: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:46:F7:82:BC:1E:A0:83:E1:D6:88:01:3E:36:0C:BC:6E:13:95 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a8:88:1d:0e:22:d7:c0:b6:19:d6:51:00:c0:aa:78:cc:30: ff:6c:13:8c:e0:2e:b2:6c:84:76:4d:e5:6a:e9:dc:ae:e5:e4: 82:51:ae:2c:e5:ee:80:ff:7a:7e:c1:4d:c1:08:eb:06:a7:07: b2:e9:77:3e:cc:3b:24:62:0f:e3:78:a7:7f:6d:69:ec:22:37: 73:9b:cd:45:08:2a:5b:e6:c3:f8:f5:e3:3d:9c:82:c4:eb:f0: 41:85:ea:e6:7f:84:c7:fe:60:d2:2f:18:f6:ed:46:79:d2:7a: e3:31:99:97:43:d0:1b:96:86:2e:21:03:58:08:eb:32:27:1f: 6e:4f:61:df:6b:0e:13:83:5c:25:8d:c1:97:de:35:9d:32:13: 22:b4:1a:01:76:da:2c:7d:e2:71:a2:e4:85:5e:4c:26:18:c5: a0:9b:d7:e2:04:11:da:28:11:47:f9:ef:2d:16:ce:f9:53:4e: 89:c7:b7:59:b2:58:65:1f:ba:9c:c9:8e:02:31:d1:60:34:e4: 9f:da:5b:70:c4:90:d5:b8:e4:0a:ab:bd:fe:da:9c:96:aa:10: 83:df:86:ee:3f:54:b9:1c:91:53:d0:8e:2c:d2:f0:74:46:f5: 62:a1:f8:0e:d4:ad:87:aa:43:e0:5f:ee:7b:f7:b0:21:84:63: 80:c8:b2:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYwNTIxMDExMjQzWhcNMjYwNTI4MDExMjQzWjAYMRYwFAYD VQQDEw02YTBlNWMwYi05MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRQTwlkzTKbK/uxUev8yssd7sn/riHy4uF4U0a8Y/X+7FCCe0Bo0hfVRkfD+ 5ntWcWHv26fl1GuhkZTVZ+e2tEoJZt7ZrIdnxkyRP5FD+GT6GWbh9KDZI0DgxGGK EPHtTT4lCJn/sIpE9zw3fRZVsRdIiAoPM51RaxSYiIGmOhFrj/GrunRIqlHTVT0L o1RP8au1DVu7EGu1cFj7TnnJgB2ahH3CRHbyuOA3mTmNJyVBIfYtHM+WaxJFvIyC +Zfp+dmJYx4myU+M+UbM0O0Ak1t9chAY/NYiuS7pQggo88bMf3O8yOzRgaFrxp6P GmqeWuGI0RzDj0Zpmb7qVTG8lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWdRveC vB6gg+HWiAE+Ngy8bhOVMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQKiIHQ4i18C2GdZRAMCqeMww/2wTjOAusmyEdk3launcruXkglGuLOXugP96 fsFNwQjrBqcHsul3Psw7JGIP43inf21p7CI3c5vNRQgqW+bD+PXjPZyCxOvwQYXq 5n+Ex/5g0i8Y9u1GedJ64zGZl0PQG5aGLiEDWAjrMicfbk9h32sOE4NcJY3Bl941 nTITIrQaAXbaLH3icaLkhV5MJhjFoJvX4gQR2igRR/nvLRbO+VNOice3WbJYZR+6 nMmOAjHRYDTkn9pbcMSQ1bjkCqu9/tqclqoQg9+G7j9UuRyRU9COLNLwdEb1YqH4 DtSth6pD4F/ue/ewIYRjgMiyRQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:02 2026 by rpki-client