$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: w6DnZhyAafE0MvMXQQq99TCNzNyze/b/0/GlUcn2TVk= Subject key identifier: B4:1A:9B:E7:C4:2B:8C:A5:0C:D6:E1:53:40:35:A2:76:10:7B:61:A1 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 051C Signing time: Tue 12 May 2026 23:42:16 +0000 Manifest this update: Tue 12 May 2026 23:42:16 +0000 Manifest next update: Tue 19 May 2026 23:42:16 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: dSYO44DKJjfJnB4cYsFJG0EUyQqPLjTm9QRUkRnjHNY=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 3: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 4: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: May 12 23:42:16 2026 GMT Not After : May 19 23:42:16 2026 GMT Subject: CN=6a03bad8-9dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:b8:79:11:1f:6b:be:c1:c9:6c:72:9a:3b: 59:4b:04:73:85:42:03:78:4f:8f:b8:69:b3:3d:b6: 56:82:f4:65:36:fe:68:b6:20:fd:4e:78:a2:5e:33: 78:aa:65:0a:71:08:b3:4b:f0:11:fc:1f:40:b1:60: 5a:74:56:1b:31:fb:ce:bd:e6:a3:f3:e7:fa:b2:fc: 8c:cd:7a:90:a3:ee:16:49:18:80:24:32:03:87:42: 19:12:b2:04:c6:08:b2:8b:ad:2e:57:84:2c:28:d2: 14:b7:35:9f:d5:ce:0b:cf:77:a7:45:a4:52:b7:24: 65:5a:6a:e4:7c:96:07:c5:57:e3:d0:11:1e:0b:20: 77:ba:b1:62:0e:c5:c3:a9:e2:0f:19:66:4d:d3:2e: f7:ed:15:27:8e:a3:01:91:14:a6:8c:33:b6:d6:8d: de:c7:92:1a:61:12:68:ae:87:49:18:19:92:c7:a2: f3:06:af:43:28:3b:7c:e0:62:0d:cf:55:00:93:b8: 8f:92:88:c1:4a:03:34:57:7c:55:60:f0:70:4e:2c: 17:56:58:29:6b:0a:67:40:38:ff:91:f5:a1:bc:f8: 66:1b:e0:82:fc:fe:32:09:bb:99:1c:4b:d3:b9:04: 28:19:a8:5f:09:48:c4:aa:61:b2:7c:d0:c9:29:db: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:9B:E7:C4:2B:8C:A5:0C:D6:E1:53:40:35:A2:76:10:7B:61:A1 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:e8:11:cd:a5:1c:f8:42:11:a8:69:61:79:9b:e6:51:c4: 5b:6c:89:93:88:91:b7:ec:71:f4:09:a3:ab:56:b6:fa:ee:db: 7a:21:20:bb:35:46:82:22:fb:7f:13:98:6c:59:17:0b:63:b3: 0a:38:f2:a4:2e:1b:d6:71:dc:85:81:cf:2d:b3:62:49:52:0b: bf:0e:56:78:f0:f1:42:d2:66:92:36:1e:60:fb:c5:ad:c5:bf: c6:52:de:60:ed:7d:6d:86:be:36:ca:c9:7a:89:fd:af:98:70: ad:62:d7:45:b5:91:d9:ed:b9:1c:1c:a8:a3:ad:88:a6:d6:a3: 13:32:d1:15:46:eb:aa:e5:49:a1:17:7a:92:8e:c0:a8:23:30: 16:39:e4:ca:4f:48:a2:66:48:79:40:f7:6a:8d:94:6b:41:e3: ad:81:f2:c1:03:3a:0b:b0:db:c0:21:03:a0:8b:42:aa:76:64: 6b:92:5c:1f:60:74:b3:33:ec:69:f2:cd:0b:57:8a:89:02:14: f8:6c:59:eb:6d:47:fa:26:9c:59:03:58:71:7c:84:f0:db:f2: 90:83:e6:da:05:f0:48:fb:fe:05:d8:46:af:88:bd:16:44:ae: a4:d8:77:5a:7b:1e:ea:d6:0b:39:fd:4e:64:16:7c:6c:b7:c1: 6d:54:04:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwNTEyMjM0MjE2WhcNMjYwNTE5MjM0MjE2WjAYMRYwFAYD VQQDEw02YTAzYmFkOC05ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufy4eREfa77ByWxymjtZSwRzhUIDeE+PuGmzPbZWgvRlNv5otiD9TniiXjN4 qmUKcQizS/AR/B9AsWBadFYbMfvOveaj8+f6svyMzXqQo+4WSRiAJDIDh0IZErIE xgiyi60uV4QsKNIUtzWf1c4Lz3enRaRStyRlWmrkfJYHxVfj0BEeCyB3urFiDsXD qeIPGWZN0y737RUnjqMBkRSmjDO21o3ex5IaYRJorodJGBmSx6LzBq9DKDt84GIN z1UAk7iPkojBSgM0V3xVYPBwTiwXVlgpawpnQDj/kfWhvPhmG+CC/P4yCbuZHEvT uQQoGahfCUjEqmGyfNDJKdvxdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQam+fE K4ylDNbhU0A1onYQe2GhMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjnDoEc2lHPhCEahpYXmb5lHEW2yJk4iRt+xx9Amjq1a2+u7beiEguzVGgiL7 fxOYbFkXC2OzCjjypC4b1nHchYHPLbNiSVILvw5WePDxQtJmkjYeYPvFrcW/xlLe YO19bYa+NsrJeon9r5hwrWLXRbWR2e25HByoo62IptajEzLRFUbrquVJoRd6ko7A qCMwFjnkyk9IomZIeUD3ao2Ua0HjrYHywQM6C7DbwCEDoItCqnZka5JcH2B0szPs afLNC1eKiQIU+GxZ621H+iacWQNYcXyE8NvykIPm2gXwSPv+BdhGr4i9FkSupNh3 Wnse6tYLOf1OZBZ8bLfBbVQEug== -----END CERTIFICATE-----Generated at Wed May 13 08:16:58 2026 by rpki-client