$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json) Hash identifier: b936kR+xrdQnFU7YUnX2/izeLTn/7FHSUK+eXFCZWtw= Subject key identifier: 1A:63:88:05:43:17:9C:D4:0B:41:04:5E:0C:E6:37:BE:A7:82:24:76 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft Manifest number: 0309 Signing time: Wed 13 May 2026 01:23:43 +0000 Manifest this update: Wed 13 May 2026 01:23:43 +0000 Manifest next update: Wed 20 May 2026 01:23:43 +0000 Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: vUU82naZjnLkpeh9/Hp0zKDSLAaogwhs4CnqbE55MV0=) 2: 984E33E4E01F11F0913A4E89646F56BC.roa (hash: OcYvm4nslT9HEXifrXrZRqsFAS3xrQM7cYF+95ESEVE=) 3: E1870478616C11F0A254E10BC4F9AE02.roa (hash: thzu/t+qYSRYUbFk3e1FVK1vtAgWZIhclmN6XWz4ZNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: May 13 01:23:43 2026 GMT Not After : May 20 01:23:43 2026 GMT Subject: CN=6a03d29f-5e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:00:4e:ce:ee:4a:2b:fd:fd:0a:81:83:ae: 68:cd:a7:9a:e3:d0:eb:61:ab:ea:9c:e1:8b:2f:fc: 71:20:f7:17:f1:ee:b1:a6:ca:3c:d9:d4:22:38:22: de:b4:4b:79:82:3e:1e:31:d1:56:43:ec:08:9b:25: 61:13:7f:5d:59:81:4f:df:d1:6d:a9:c7:09:44:26: 09:b7:a4:d5:51:f6:bf:3a:b9:e0:6e:b7:ff:1c:d4: 3b:7e:2a:0d:ca:41:e3:cf:1b:bf:7e:e2:ac:43:eb: 54:2d:9e:38:50:72:38:6b:07:e4:d5:b4:06:bd:70: 1d:84:e5:30:e2:b9:bd:48:65:4c:28:14:44:03:95: 80:23:1a:f7:eb:50:d1:e6:28:3a:92:6c:57:71:46: fb:85:25:7e:08:d4:db:1e:ab:3e:71:31:c5:41:ae: fe:28:23:d5:ca:a1:fa:0b:e4:c4:7a:c3:59:11:28: 9e:71:53:32:7b:e6:32:d9:ab:6b:25:27:cf:e5:4e: 8d:3e:b3:5e:84:0c:4b:cf:9f:be:b9:c0:fb:f3:dd: fa:4b:09:56:b3:10:39:16:fe:55:98:25:cb:2e:cf: 6c:97:40:a5:5e:8a:1f:28:01:ee:4d:1f:92:46:c7: 3f:55:b0:45:e9:da:4d:be:80:19:e3:af:94:01:6d: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:63:88:05:43:17:9C:D4:0B:41:04:5E:0C:E6:37:BE:A7:82:24:76 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b1:e7:b8:dd:bf:c6:f8:ea:56:61:27:f1:b1:73:e1:5d:c6: 28:66:d6:73:c3:12:28:6a:78:c2:ce:c5:86:9f:b0:82:23:79: 26:c3:5d:63:b4:33:3d:e8:30:64:b3:23:7a:89:0f:5e:c8:c7: 30:5a:d1:fb:a9:21:0f:8c:bb:3e:48:e9:c4:0d:24:26:71:04: d6:b3:87:bb:36:1f:f4:ff:9e:79:34:6b:d0:74:9b:1c:c1:97: 23:7a:99:7c:16:9a:40:03:a0:44:c5:b7:4a:84:85:d3:5f:5f: d2:33:2c:42:05:54:9f:2b:cb:74:2a:14:d5:03:cb:1a:0f:ca: da:1c:1a:3a:44:d5:ad:dc:53:97:42:c7:87:35:f9:d0:52:3b: e7:f7:2a:52:3c:dc:ac:d2:74:64:c4:0b:0c:d4:22:54:25:f2: b3:1f:fe:c8:d7:35:fa:a6:fc:4b:8a:c4:0e:e8:60:48:92:1b: ee:83:a9:66:00:b7:33:32:bf:23:70:75:1a:9c:f7:a4:41:3b: b8:e4:79:cb:6e:61:67:36:24:a5:bc:55:46:25:5c:08:08:03: b7:1d:ff:ff:48:0d:89:3a:f1:98:a8:03:d5:e4:36:4f:d6:45: c7:4a:4c:07:94:23:c9:02:8e:61:3b:d1:b6:3e:6d:15:b0:58: f1:de:42:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjYwNTEzMDEyMzQzWhcNMjYwNTIwMDEyMzQzWjAYMRYwFAYD VQQDEw02YTAzZDI5Zi01ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfAATs7uSiv9/QqBg65ozaea49DrYavqnOGLL/xxIPcX8e6xpso82dQiOCLe tEt5gj4eMdFWQ+wImyVhE39dWYFP39FtqccJRCYJt6TVUfa/Orngbrf/HNQ7fioN ykHjzxu/fuKsQ+tULZ44UHI4awfk1bQGvXAdhOUw4rm9SGVMKBREA5WAIxr361DR 5ig6kmxXcUb7hSV+CNTbHqs+cTHFQa7+KCPVyqH6C+TEesNZESiecVMye+Yy2atr JSfP5U6NPrNehAxLz5++ucD78936SwlWsxA5Fv5VmCXLLs9sl0ClXoofKAHuTR+S Rsc/VbBF6dpNvoAZ46+UAW3mKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpjiAVD F5zUC0EEXgzmN76ngiR2MB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o Y1JzQUp6SlFSR19odEpPTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7HnuN2/xvjqVmEn8bFz4V3GKGbWc8MSKGp4ws7Fhp+wgiN5JsNdY7QzPegw ZLMjeokPXsjHMFrR+6khD4y7PkjpxA0kJnEE1rOHuzYf9P+eeTRr0HSbHMGXI3qZ fBaaQAOgRMW3SoSF019f0jMsQgVUnyvLdCoU1QPLGg/K2hwaOkTVrdxTl0LHhzX5 0FI75/cqUjzcrNJ0ZMQLDNQiVCXysx/+yNc1+qb8S4rEDuhgSJIb7oOpZgC3MzK/ I3B1Gpz3pEE7uOR5y25hZzYkpbxVRiVcCAgDtx3//0gNiTrxmKgD1eQ2T9ZFx0pM B5QjyQKOYTvRtj5tFbBY8d5CeA== -----END CERTIFICATE-----Generated at Wed May 13 08:44:32 2026 by rpki-client