$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: 3rDTU1lNaQD1OLnFpk2zYsVFFYry7ZQ3FdB6jQlGcmg= Subject key identifier: 28:10:CF:1F:B6:F9:C1:79:72:4C:06:CB:F6:75:75:12:69:9E:BD:C7 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 09FB Signing time: Tue 12 May 2026 19:56:36 +0000 Manifest this update: Tue 12 May 2026 19:56:35 +0000 Manifest next update: Tue 19 May 2026 19:56:35 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: grN5UdlhPUWLxGTuZGkxVWiawnWbqq7ftB4+fyG17hQ=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: zkzY1rKegM6NQQe7mOjFJys4MtW8mm7qlKs6iHooBhE=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: GS8FiTHe76tR+EGLanHlCxxJBZXlT9b5WZ9G9Dgo+Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: May 12 19:56:35 2026 GMT Not After : May 19 19:56:35 2026 GMT Subject: CN=6a0385f4-bbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:70:63:db:cd:d0:e4:7f:8b:db:f7:65:d5: 36:34:7f:d8:8a:e9:02:3d:24:7a:3e:30:3d:12:50: bd:b2:64:24:c3:96:b2:0c:1d:91:09:ab:1c:f7:ee: 06:62:aa:07:30:63:f9:dd:33:25:e1:13:bf:ab:58: 57:43:4b:fa:a6:ca:40:40:88:80:ce:0a:f1:e5:fa: 84:86:f9:a6:f3:fe:73:4e:70:1e:46:60:52:97:46: f8:dc:d7:9c:2f:80:32:ca:6a:ce:a9:52:b3:b2:f3: ea:e2:87:84:f6:dc:1d:00:14:c1:85:df:12:9f:f9: 6f:ee:89:94:c9:72:7c:65:38:38:65:0a:4e:3d:2d: 30:c5:f2:88:e9:18:60:49:22:d4:e9:42:7a:27:14: 1e:16:ba:9f:50:f2:b8:a1:00:35:23:a5:1d:7e:e9: f5:31:1a:2a:0b:95:d2:85:3f:55:cf:63:d2:98:d2: e0:f7:a9:7f:f5:5f:57:b2:48:be:8c:12:ae:15:b2: 67:ca:3d:17:cc:b8:2e:b4:f6:17:a0:9f:a0:fb:d5: 8c:eb:13:67:b0:2f:8d:d4:2a:1b:f1:7f:2c:36:85: 75:62:ba:c2:7c:79:46:70:c4:33:23:8b:53:68:4f: c0:e7:74:a9:88:9b:ad:c7:75:c3:01:4d:a4:c0:30: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:CF:1F:B6:F9:C1:79:72:4C:06:CB:F6:75:75:12:69:9E:BD:C7 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:4a:41:10:02:50:95:f0:d8:7f:9e:b9:7d:93:9c:f0:e4: c5:31:b7:df:6a:64:99:63:6c:b1:4d:52:06:0c:fb:d5:a5:9f: 45:82:1e:a8:e1:e0:43:6c:a1:80:26:57:c8:13:d3:de:56:7e: 52:1d:3d:35:d8:67:02:9e:0b:10:27:56:1a:40:26:0f:40:29: b7:59:f9:b1:be:1a:70:53:88:ad:8b:0f:da:59:2a:74:1b:1b: ae:53:95:86:4e:32:f8:d5:32:3f:e9:94:d9:58:05:02:4d:2e: 5d:eb:ce:d7:71:c1:01:b9:43:d0:a5:56:dd:6a:9d:9f:6e:3e: 4c:37:13:e8:47:93:0e:0f:25:af:71:2a:05:53:9c:5a:99:50: b7:89:0e:7a:ef:63:e2:1e:06:1e:dc:0c:44:24:24:fa:ce:a4: a4:15:f0:44:92:19:70:72:0b:56:6c:db:78:ca:09:9e:99:4b: 7c:68:db:17:9e:ff:d7:40:7c:a1:3d:ee:80:be:73:cd:0e:c9: e0:7d:48:52:ab:a0:95:94:8d:d9:1c:9d:6b:64:25:59:4c:d5: d6:75:ae:49:1e:b5:d1:b9:bc:0f:33:86:98:fb:f9:a8:50:ee: 0f:2c:4e:fc:e9:97:47:35:a9:d2:27:29:b6:10:a3:45:85:54: ae:b8:f8:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjYwNTEyMTk1NjM1WhcNMjYwNTE5MTk1NjM1WjAYMRYwFAYD VQQDEw02YTAzODVmNC1iYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiKtwY9vN0OR/i9v3ZdU2NH/YiukCPSR6PjA9ElC9smQkw5ayDB2RCasc9+4G YqoHMGP53TMl4RO/q1hXQ0v6pspAQIiAzgrx5fqEhvmm8/5zTnAeRmBSl0b43Nec L4AyymrOqVKzsvPq4oeE9twdABTBhd8Sn/lv7omUyXJ8ZTg4ZQpOPS0wxfKI6Rhg SSLU6UJ6JxQeFrqfUPK4oQA1I6Udfun1MRoqC5XShT9Vz2PSmNLg96l/9V9Xski+ jBKuFbJnyj0XzLgutPYXoJ+g+9WM6xNnsC+N1Cob8X8sNoV1YrrCfHlGcMQzI4tT aE/A53SpiJutx3XDAU2kwDArJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgQzx+2 +cF5ckwGy/Z1dRJpnr3HMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEnZKQRACUJXw2H+euX2TnPDkxTG332pkmWNssU1SBgz71aWfRYIeqOHgQ2yh gCZXyBPT3lZ+Uh09NdhnAp4LECdWGkAmD0Apt1n5sb4acFOIrYsP2lkqdBsbrlOV hk4y+NUyP+mU2VgFAk0uXevO13HBAblD0KVW3Wqdn24+TDcT6EeTDg8lr3EqBVOc WplQt4kOeu9j4h4GHtwMRCQk+s6kpBXwRJIZcHILVmzbeMoJnplLfGjbF57/10B8 oT3ugL5zzQ7J4H1IUquglZSN2Ryda2QlWUzV1nWuSR610bm8DzOGmPv5qFDuDyxO /OmXRzWp0icpthCjRYVUrrj4mw== -----END CERTIFICATE-----Generated at Wed May 13 15:59:29 2026 by rpki-client