$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: BiDypEnqjiE+48ZjlXG/UvVCx3mX0LM+GlkjV00O17g= Subject key identifier: 31:38:BF:D5:03:12:80:BD:CE:98:F7:C5:C6:9B:82:35:4A:59:CF:4D Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 13AB Signing time: Tue 12 May 2026 19:24:47 +0000 Manifest this update: Tue 12 May 2026 19:24:47 +0000 Manifest next update: Tue 19 May 2026 19:24:47 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: XHZh+dG93izC1qiDHfevvYzLWNs+u60ZT0iu7Psn7vo=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: May 12 19:24:47 2026 GMT Not After : May 19 19:24:47 2026 GMT Subject: CN=6a037e7f-3eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:7e:81:65:60:1d:e3:9e:de:c6:c5:23:d7: 34:f0:b2:cd:4a:12:d4:0d:52:39:ae:c1:21:5b:4b: f7:3c:78:8e:0f:fa:e6:bb:8a:8e:75:0b:c5:11:6a: 53:23:05:c7:ac:4f:40:2f:00:d5:9c:dd:b4:fa:72: 9f:85:c3:e9:a7:f8:84:ef:71:ce:26:3a:09:dd:12: 2c:2c:2f:1d:05:07:42:e8:e7:9e:eb:8d:f7:eb:86: 14:38:d3:11:fe:55:c4:4e:b6:35:26:69:8d:bf:92: e9:60:c4:43:f4:42:29:db:8a:05:fb:3a:f5:9d:75: 0e:1f:ba:d9:5d:a1:95:a7:f3:d4:99:b0:77:68:9f: 85:62:13:21:22:74:21:40:fe:60:e9:e3:7e:91:d8: 2c:d6:59:63:01:b0:cc:42:da:6b:54:0a:6c:39:72: 60:ba:fb:5f:62:83:73:f9:1a:47:60:e6:ef:e3:8f: 3b:33:17:f6:55:ef:44:39:86:17:9b:8f:0e:2e:84: e3:f7:c3:6d:6d:f1:4a:0c:5d:ca:09:9b:c3:03:17: ab:b7:0f:3d:74:4c:05:b5:fd:56:f5:46:8e:b6:5d: 4a:00:77:e7:02:23:70:67:13:21:8d:99:46:47:74: 45:3d:2b:27:2e:b3:a8:b4:2e:41:a8:96:7f:57:62: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:38:BF:D5:03:12:80:BD:CE:98:F7:C5:C6:9B:82:35:4A:59:CF:4D X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3b:4e:38:a6:83:3d:e4:90:e4:29:ac:71:e7:de:6b:63:b8: 4e:07:ee:f2:19:03:e0:05:a1:91:e6:c9:e3:7e:73:7a:aa:f8: 5c:24:9f:d3:1d:27:29:73:79:41:8a:68:43:c6:68:d5:c3:20: f9:da:11:cb:d4:cf:d6:17:3a:7e:f0:42:1b:50:6d:6b:1f:9d: 6b:19:d1:dc:6e:e4:5e:b0:e4:fe:de:89:6f:9f:b2:58:97:d2: ed:43:ce:cd:c1:98:d6:9c:2a:af:bd:ef:c4:08:44:1c:00:68: 10:8e:d6:83:e8:0f:19:73:d8:00:a8:89:f1:b6:3d:5f:89:96: ab:78:96:5a:62:87:cc:d2:68:4f:e5:45:c8:e2:61:44:2c:14: 72:d2:24:6f:32:b2:d8:c7:02:3d:de:d6:b2:0a:e2:df:d2:61: 0f:9b:c4:d2:29:ac:80:eb:6a:7d:68:a9:ae:0f:51:ff:cc:09: e6:5c:53:66:14:9c:e9:ab:6a:12:5e:41:bf:59:32:e3:e7:8e: 1c:22:cf:dc:ff:f5:e9:dd:a7:81:d7:15:fd:76:27:19:fe:d5: 2a:e5:15:16:b1:26:7d:ab:54:89:86:d5:01:c9:ba:93:2c:97: 06:75:9e:f9:b9:52:1d:e6:3b:f4:e6:99:61:4a:09:fb:08:0f: 36:84:d9:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjYwNTEyMTkyNDQ3WhcNMjYwNTE5MTkyNDQ3WjAYMRYwFAYD VQQDEw02YTAzN2U3Zi0zZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVJ+gWVgHeOe3sbFI9c08LLNShLUDVI5rsEhW0v3PHiOD/rmu4qOdQvFEWpT IwXHrE9ALwDVnN20+nKfhcPpp/iE73HOJjoJ3RIsLC8dBQdC6Oee643364YUONMR /lXETrY1JmmNv5LpYMRD9EIp24oF+zr1nXUOH7rZXaGVp/PUmbB3aJ+FYhMhInQh QP5g6eN+kdgs1lljAbDMQtprVApsOXJguvtfYoNz+RpHYObv4487Mxf2Ve9EOYYX m48OLoTj98NtbfFKDF3KCZvDAxertw89dEwFtf1W9UaOtl1KAHfnAiNwZxMhjZlG R3RFPSsnLrOotC5BqJZ/V2JyrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDE4v9UD EoC9zpj3xcabgjVKWc9NMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTtOOKaDPeSQ5Cmscefea2O4Tgfu8hkD4AWhkebJ435zeqr4XCSf0x0nKXN5 QYpoQ8Zo1cMg+doRy9TP1hc6fvBCG1Btax+daxnR3G7kXrDk/t6Jb5+yWJfS7UPO zcGY1pwqr73vxAhEHABoEI7Wg+gPGXPYAKiJ8bY9X4mWq3iWWmKHzNJoT+VFyOJh RCwUctIkbzKy2McCPd7Wsgri39JhD5vE0imsgOtqfWiprg9R/8wJ5lxTZhSc6atq El5Bv1ky4+eOHCLP3P/16d2ngdcV/XYnGf7VKuUVFrEmfatUiYbVAcm6kyyXBnWe +blSHeY79OaZYUoJ+wgPNoTZsQ== -----END CERTIFICATE-----Generated at Wed May 13 11:16:26 2026 by rpki-client