$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: OXK4hfG2KuoY8c+dydPKh7EX8/ffY3m6i5+kJeUyz+w= Subject key identifier: BB:A6:5E:5D:9B:34:E9:DE:FC:30:8B:E0:92:F8:11:83:29:CA:37:BC Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 08E3 Signing time: Tue 12 May 2026 20:26:34 +0000 Manifest this update: Tue 12 May 2026 20:26:34 +0000 Manifest next update: Tue 19 May 2026 20:26:34 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: dbmIaRwJhgyh6Y9Pk0UcWIX2pzih0c8iWC35E4x2ioc=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: R9VZPmnH58tfNqZqKQPswISeOvXhiF0XOkBwsgMhZbU=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: JIARhEibOKG+hTmPalueLjtwAHjRt0AI7B/r+GOVfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: May 12 20:26:34 2026 GMT Not After : May 19 20:26:34 2026 GMT Subject: CN=6a038cfa-2a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:29:ae:e0:52:fe:3f:fa:16:f7:7c:18:68:bc: 06:0c:34:1d:d3:80:95:73:ae:e1:4d:2f:34:82:77: 90:17:69:0f:c3:52:22:2b:45:8e:af:e2:ee:e3:65: 50:a4:4a:92:7b:81:cf:f3:a1:70:33:65:ed:5d:c3: 4b:94:fc:4d:ca:0f:8a:e8:72:90:ee:ad:eb:18:75: 9d:67:ce:15:74:b1:97:41:c3:bf:bc:6c:22:fa:f6: 12:fd:c1:a0:c1:37:22:41:1c:ae:a8:92:29:df:28: e7:74:30:98:db:53:7e:dd:24:d6:18:47:3d:37:14: d7:71:c0:97:da:17:e5:8c:5f:79:6e:7b:b9:39:c7: 78:2c:eb:d5:2a:1e:a0:4d:3b:59:b7:f4:4e:96:f6: e7:55:a9:6b:9d:f3:4e:9f:9f:6c:f1:f9:19:07:49: e0:46:a4:45:5c:3e:71:94:1f:30:26:cd:3c:3f:b4: b7:78:24:b3:70:fa:88:ed:ef:31:73:54:66:5b:53: 2b:3a:20:b4:52:a8:6c:c3:6e:73:fb:ef:b2:49:31: 6a:7d:b6:4c:67:96:40:a9:51:c3:9b:c4:54:55:e1: 81:dd:fd:93:14:ab:b9:8e:c8:aa:1c:2d:e7:2f:d9: 40:30:52:fc:07:d6:bd:99:c8:68:32:a6:a5:59:42: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:5E:5D:9B:34:E9:DE:FC:30:8B:E0:92:F8:11:83:29:CA:37:BC X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:07:35:55:ce:93:2d:fb:86:13:08:fe:2c:f3:c8:81:c2: 97:7d:19:d3:bc:25:8c:16:1f:07:b3:ae:8e:1f:02:2e:16:44: 30:67:22:eb:e1:a1:6d:87:2d:bb:a0:30:d9:ef:46:a5:1d:0c: e1:d3:9f:3f:69:cf:06:a2:a2:0a:9e:36:28:94:04:40:5e:4c: 23:3f:da:85:d9:58:78:d6:1b:7f:79:1e:9f:b1:c8:90:34:f5: 45:81:12:7c:a3:f9:6b:91:1a:a3:6b:b6:81:b6:15:d5:3c:b3: 4d:e5:51:dd:70:45:5b:f9:96:67:30:0b:3f:f7:41:d0:45:95: ff:22:87:14:fa:f8:91:e3:0c:4c:10:52:d5:7a:99:b3:85:5b: df:38:17:a7:20:85:06:82:c8:27:5a:2f:87:a5:a4:4f:e9:56: 7a:10:9e:53:da:f1:b2:d7:98:bc:24:db:6d:11:f5:0a:32:84: 90:11:ff:88:84:bb:a1:44:01:fd:3e:bb:46:4f:2e:f2:06:5d: 70:ad:41:3b:0a:f6:bd:2f:3f:33:97:31:78:6b:55:cf:af:94: 04:7e:d8:a7:bd:6d:81:69:52:87:81:c0:bc:59:79:71:a8:70: 03:10:00:4a:9a:e1:86:ca:73:4e:e6:78:a6:8e:31:60:98:8f: 47:21:ca:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjYwNTEyMjAyNjM0WhcNMjYwNTE5MjAyNjM0WjAYMRYwFAYD VQQDEw02YTAzOGNmYS0yYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ymu4FL+P/oW93wYaLwGDDQd04CVc67hTS80gneQF2kPw1IiK0WOr+Lu42VQ pEqSe4HP86FwM2XtXcNLlPxNyg+K6HKQ7q3rGHWdZ84VdLGXQcO/vGwi+vYS/cGg wTciQRyuqJIp3yjndDCY21N+3STWGEc9NxTXccCX2hfljF95bnu5Ocd4LOvVKh6g TTtZt/ROlvbnValrnfNOn59s8fkZB0ngRqRFXD5xlB8wJs08P7S3eCSzcPqI7e8x c1RmW1MrOiC0Uqhsw25z+++ySTFqfbZMZ5ZAqVHDm8RUVeGB3f2TFKu5jsiqHC3n L9lAMFL8B9a9mchoMqalWULtkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLumXl2b NOne/DCL4JL4EYMpyje8MB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/YHNVXOky37hhMI/izzyIHCl30Z07wljBYfB7Oujh8CLhZEMGci6+GhbYct u6Aw2e9GpR0M4dOfP2nPBqKiCp42KJQEQF5MIz/ahdlYeNYbf3ken7HIkDT1RYES fKP5a5Eao2u2gbYV1TyzTeVR3XBFW/mWZzALP/dB0EWV/yKHFPr4keMMTBBS1XqZ s4Vb3zgXpyCFBoLIJ1ovh6WkT+lWehCeU9rxsteYvCTbbRH1CjKEkBH/iIS7oUQB /T67Rk8u8gZdcK1BOwr2vS8/M5cxeGtVz6+UBH7Yp71tgWlSh4HAvFl5cahwAxAA SprhhspzTuZ4po4xYJiPRyHKQQ== -----END CERTIFICATE-----Generated at Wed May 13 12:30:42 2026 by rpki-client