$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: tmE2Dt9wihB3fc5Igot+UbP6fsoYJLN3j+TGpp9vCiU= Subject key identifier: 2D:8E:98:95:1D:60:22:8F:64:7A:60:D5:65:EE:C3:B3:56:E9:53:BF Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 18CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 18A7 Signing time: Tue 12 May 2026 16:30:14 +0000 Manifest this update: Tue 12 May 2026 16:30:13 +0000 Manifest next update: Tue 19 May 2026 16:30:13 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: ul1XG4gQuFOgedb8lYDpLys3+5RntrF6NyK5wFANAvs=) 2: 71FD6FA8F2E311F098475965426F56BC.roa (hash: 5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=) 3: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6346 (0x18ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: May 12 16:30:13 2026 GMT Not After : May 19 16:30:13 2026 GMT Subject: CN=6a035595-8d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:46:3b:ed:53:f2:59:4b:04:27:75:3f:a3:4d: fa:c9:bd:b7:d9:67:5a:df:7e:69:64:69:e2:dd:46: 2e:2e:64:90:68:60:f7:72:1f:31:ce:d4:51:4b:1e: 29:6c:97:16:25:3b:0f:b0:e1:0a:09:91:b7:87:53: ae:f1:e6:e3:38:ae:0a:a3:b7:37:3e:ec:56:f7:e5: 85:6a:4c:14:f7:9a:bc:6c:7a:a7:b5:35:1e:2e:c0: e3:16:7c:e0:45:e5:80:bc:38:9b:77:8d:b7:73:06: 8f:bf:12:3b:cf:1f:4e:a7:1e:ca:70:b5:4e:da:66: 76:2d:5e:3e:cd:ce:9f:d6:38:c6:d9:95:d5:2d:c8: 0c:7a:d0:21:66:ff:e6:4e:db:3d:21:df:18:1a:67: 16:5f:41:e8:cc:a4:76:ec:97:89:ab:0e:ad:b2:4f: 38:f0:12:4a:43:a4:45:21:2e:ba:1a:68:00:11:96: ae:b2:63:30:d7:97:99:92:92:5c:0e:90:d4:8f:61: 54:c6:65:dc:85:b8:3a:d3:72:e8:56:d0:37:a3:bf: a1:d9:e1:ab:b7:93:9c:01:47:6f:e5:89:5b:59:e1: 5e:c2:44:0f:00:37:eb:81:34:3e:37:40:46:e3:fc: 54:f4:d1:3d:5e:76:5a:b8:d3:44:7b:25:1a:ef:c1: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:98:95:1D:60:22:8F:64:7A:60:D5:65:EE:C3:B3:56:E9:53:BF X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5f:72:e1:a5:1a:cc:71:70:f4:a5:93:b1:55:dc:66:f2:ee: ec:67:8f:a2:9a:d0:33:53:76:38:f2:a4:d7:09:ba:15:4c:21: e3:89:0a:a8:01:6e:7b:8d:ab:9e:05:a9:5d:f3:ba:cd:0d:7c: 3a:34:0a:0d:02:ec:eb:0e:86:49:b8:3a:87:d9:b0:45:26:3a: 1e:72:5d:df:a1:3d:bb:65:66:91:b4:81:d5:bd:e3:c1:48:9b: 0c:b4:e8:83:73:b6:83:c2:54:a5:e5:ea:40:18:fa:72:d4:ef: ea:e4:f1:e3:62:fb:bd:15:b6:72:31:08:8d:c2:1f:73:b6:30: 3c:5b:3c:55:26:69:e2:f0:8f:71:4f:5e:aa:2b:38:d8:08:c5: e4:4b:61:c1:3f:3c:4d:01:a3:a0:38:b1:86:37:f1:6a:03:5e: b5:a1:2d:8e:1f:9a:67:15:65:6e:ee:f6:7a:89:cc:d3:95:02: 5e:f4:86:65:7f:88:18:5a:17:a0:4f:44:d5:cc:2b:4e:09:32: 49:26:e0:c2:02:e0:d5:f4:dd:ae:4b:b4:01:27:c4:d7:dc:69: 70:84:68:1e:bc:8b:89:24:37:b5:e7:db:36:74:b4:51:6a:f0: 74:41:75:ab:d8:41:f1:59:60:a3:7f:54:85:7b:cd:ab:a1:a1: b3:02:af:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjYwNTEyMTYzMDEzWhcNMjYwNTE5MTYzMDEzWjAYMRYwFAYD VQQDEw02YTAzNTU5NS04ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80Y77VPyWUsEJ3U/o036yb232Wda335pZGni3UYuLmSQaGD3ch8xztRRSx4p bJcWJTsPsOEKCZG3h1Ou8ebjOK4Ko7c3PuxW9+WFakwU95q8bHqntTUeLsDjFnzg ReWAvDibd423cwaPvxI7zx9Opx7KcLVO2mZ2LV4+zc6f1jjG2ZXVLcgMetAhZv/m Tts9Id8YGmcWX0HozKR27JeJqw6tsk848BJKQ6RFIS66GmgAEZausmMw15eZkpJc DpDUj2FUxmXchbg603LoVtA3o7+h2eGrt5OcAUdv5YlbWeFewkQPADfrgTQ+N0BG 4/xU9NE9XnZauNNEeyUa78FYfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2OmJUd YCKPZHpg1WXuw7NW6VO/MB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE19y4aUazHFw9KWTsVXcZvLu7GePoprQM1N2OPKk1wm6FUwh44kKqAFue42r ngWpXfO6zQ18OjQKDQLs6w6GSbg6h9mwRSY6HnJd36E9u2VmkbSB1b3jwUibDLTo g3O2g8JUpeXqQBj6ctTv6uTx42L7vRW2cjEIjcIfc7YwPFs8VSZp4vCPcU9eqis4 2AjF5EthwT88TQGjoDixhjfxagNetaEtjh+aZxVlbu72eonM05UCXvSGZX+IGFoX oE9E1cwrTgkySSbgwgLg1fTdrku0ASfE19xpcIRoHryLiSQ3tefbNnS0UWrwdEF1 q9hB8Vlgo39UhXvNq6GhswKvCg== -----END CERTIFICATE-----Generated at Wed May 13 00:56:11 2026 by rpki-client