$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: Boc8p9/HjKxTkj9tK+6D+bfWh/Ba29Rzw1Bz1dyNTQ8= Subject key identifier: BD:5B:B4:56:CC:07:88:90:F1:FA:1C:1E:83:16:16:CC:BF:75:F9:40 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 0252 Signing time: Thu 23 Jul 2026 03:29:20 +0000 Manifest this update: Thu 23 Jul 2026 03:29:20 +0000 Manifest next update: Thu 30 Jul 2026 03:29:20 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: 1ESEJGpSDVqG2HMCnJ28EF8VMNIyRpSJOH+VRtxi53s=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: IZt3iIkU9U8Ze8oRfWkeijlPwGX2FFeqiHWMsHuoXVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: Jul 23 03:29:20 2026 GMT Not After : Jul 30 03:29:20 2026 GMT Subject: CN=6a618a90-242b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:4f:78:63:d3:e4:88:57:90:38:31:81:ff: d8:4f:b4:5a:62:40:97:66:9b:f4:83:7a:ca:1c:4e: e7:4f:5b:63:bd:57:b3:7a:e5:92:a2:67:9e:e7:13: 58:0e:ad:d3:2f:a4:56:ba:22:46:b6:e8:7e:70:0e: 45:0d:63:4a:04:84:5a:83:bd:96:5b:4e:fb:cd:bb: e6:ac:97:25:b0:17:9f:9b:77:75:e7:0e:e4:00:19: 6d:6c:55:ba:b2:6d:2a:a6:6b:bc:d0:44:fb:dc:31: 5b:ff:0a:51:53:13:b9:bc:8b:7a:b2:54:93:2e:77: ab:5a:4e:65:6d:64:88:23:c7:b7:85:ed:99:bc:5d: d8:9c:6b:ff:1a:4a:77:2a:5a:e0:60:7b:ee:59:80: 35:62:e3:e1:8b:50:2f:1d:ba:cf:bc:87:b8:97:a0: ee:35:bc:51:43:7e:57:d4:96:df:91:af:68:eb:40: 3f:ca:32:ad:8c:6c:eb:6b:13:8f:30:6e:34:14:ce: e4:3c:e1:f5:67:fc:35:51:04:bc:4e:fd:df:48:33: 19:92:af:3f:6d:71:61:6c:1a:e4:07:8c:8b:89:31: 07:ea:a3:cc:eb:e5:4e:dd:b7:83:27:3c:06:d8:89: b4:5b:54:6d:10:b0:e6:6f:1a:b5:4e:40:99:60:bb: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:B4:56:CC:07:88:90:F1:FA:1C:1E:83:16:16:CC:BF:75:F9:40 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8f:80:27:08:ba:f6:63:ad:d3:58:a5:99:9d:e4:51:02:89: 9f:a1:40:d2:0a:82:6a:b5:59:3c:30:2d:d5:d2:71:53:4f:af: bf:6b:5e:cd:8b:81:90:01:33:04:00:a3:54:0b:db:0f:22:87: c7:68:3a:55:bd:b8:f3:82:a4:53:3b:43:7f:eb:e6:01:12:90: c7:15:86:6e:c5:99:bf:e7:f8:ab:28:90:fe:56:e0:63:0a:e7: a1:86:a6:91:1b:6b:b3:b8:d4:1c:96:f7:17:6e:64:1d:ce:0f: 60:91:e8:19:95:c9:a1:a8:d0:38:1e:52:40:b1:2c:5d:ae:67: f4:11:2e:0d:e2:fc:ce:80:05:84:11:43:ad:be:9a:46:c5:3d: 03:d3:95:85:d2:f5:fd:30:67:dd:62:a7:7e:24:d7:11:f1:7b: d6:a4:3a:3f:45:9f:7b:5e:ac:42:38:85:d3:8d:78:b5:e6:a2: 18:bd:57:55:37:f8:db:6f:67:87:00:90:9a:72:d7:92:6f:b1: 6f:00:7d:5c:66:5c:29:f4:59:cf:bd:5f:fb:ca:29:d3:f8:2a: 9a:bb:4c:e4:39:51:66:a4:5a:e9:4e:54:b0:98:09:c0:58:ca: 1d:2c:f7:c0:73:27:f0:7b:d5:c5:5f:d4:3f:c8:f8:cf:44:15: 7e:6e:cd:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjYwNzIzMDMyOTIwWhcNMjYwNzMwMDMyOTIwWjAYMRYwFAYD VQQDEw02YTYxOGE5MC0yNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOJPeGPT5IhXkDgxgf/YT7RaYkCXZpv0g3rKHE7nT1tjvVezeuWSomee5xNY Dq3TL6RWuiJGtuh+cA5FDWNKBIRag72WW077zbvmrJclsBefm3d15w7kABltbFW6 sm0qpmu80ET73DFb/wpRUxO5vIt6slSTLnerWk5lbWSII8e3he2ZvF3YnGv/Gkp3 KlrgYHvuWYA1YuPhi1AvHbrPvIe4l6DuNbxRQ35X1Jbfka9o60A/yjKtjGzraxOP MG40FM7kPOH1Z/w1UQS8Tv3fSDMZkq8/bXFhbBrkB4yLiTEH6qPM6+VO3beDJzwG 2Im0W1RtELDmbxq1TkCZYLsE2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1btFbM B4iQ8focHoMWFsy/dflAMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABo+AJwi69mOt01ilmZ3kUQKJn6FA0gqCarVZPDAt1dJxU0+vv2tezYuBkAEz BACjVAvbDyKHx2g6Vb2484KkUztDf+vmARKQxxWGbsWZv+f4qyiQ/lbgYwrnoYam kRtrs7jUHJb3F25kHc4PYJHoGZXJoajQOB5SQLEsXa5n9BEuDeL8zoAFhBFDrb6a RsU9A9OVhdL1/TBn3WKnfiTXEfF71qQ6P0Wfe16sQjiF0414teaiGL1XVTf4229n hwCQmnLXkm+xbwB9XGZcKfRZz71f+8op0/gqmrtM5DlRZqRa6U5UsJgJwFjKHSz3 wHMn8HvVxV/UP8j4z0QVfm7Nyw== -----END CERTIFICATE-----Generated at Fri Jul 24 09:11:30 2026 by rpki-client