$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: piI1PghPRUVj6HtaZm1L8E6AW/kfT1hBqG0ULvL3Gt0= Subject key identifier: 5A:9B:99:8D:43:9F:0E:38:86:1B:02:0F:09:FE:0E:9A:FD:A8:0D:00 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 2A Signing time: Mon 11 May 2026 08:59:51 +0000 Manifest this update: Mon 11 May 2026 08:59:51 +0000 Manifest next update: Mon 18 May 2026 08:59:51 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: KSLuacJYhDc8tEy357AL0A/JYyaXb/ulNaW9/dQedwk=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: May 11 08:59:51 2026 GMT Not After : May 18 08:59:51 2026 GMT Subject: CN=6a019a87-45d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:65:73:d1:e2:ac:ac:48:a4:15:29:e8:49: 53:82:ff:01:74:68:e2:0c:1f:09:90:3a:7c:55:c3: 34:79:46:43:3a:58:07:d4:cb:6e:bb:d5:15:ab:b8: 13:ed:cd:a2:37:bc:6b:62:da:f0:d6:34:a2:c9:17: 14:d2:c8:1a:21:e5:24:2b:c6:9a:f3:b2:ed:fd:8f: 31:7a:8c:c9:2f:64:95:e2:ed:3e:80:6f:dd:94:9b: 50:b2:cf:0f:a0:ad:b7:78:19:5b:8d:50:5d:77:fd: 98:15:6f:ad:32:14:d4:db:f7:c4:fa:32:1f:df:1c: 92:ad:38:84:04:b5:fd:14:fe:0c:58:2c:ac:4c:d4: 88:b2:c5:d4:7d:ec:26:9c:e3:98:2b:be:37:d1:ee: dc:a6:4e:98:5e:c7:f2:b9:e5:2e:5a:e0:08:88:79: 3d:42:b8:47:4a:d5:a7:7a:f9:4a:24:c1:1c:3b:c8: ad:7b:b8:e2:15:23:71:08:e1:08:74:90:f6:fa:22: 17:94:4a:9a:03:40:c0:9b:58:10:7a:a7:df:43:12: a8:0d:fe:67:5e:e4:51:7e:35:eb:f0:78:34:2c:d1: 34:58:56:1d:aa:42:ff:29:66:16:96:52:65:94:e8: 6f:6f:f7:a1:34:9c:f7:e6:31:d9:ea:3e:98:5a:10: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9B:99:8D:43:9F:0E:38:86:1B:02:0F:09:FE:0E:9A:FD:A8:0D:00 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:fc:ce:e5:20:7f:b1:49:12:b0:ed:d6:88:25:16:7a:0b:12: 8a:87:e0:00:6c:fa:b2:c0:77:84:ee:ca:94:e9:f9:63:d1:2d: 92:25:cd:49:7e:25:77:e1:d7:b6:52:e6:e8:bd:11:9e:3f:97: c8:88:c2:7a:37:e6:d4:9e:76:78:55:ec:56:15:9b:b4:d3:7a: cf:0c:19:4f:a5:5e:23:42:0e:08:8a:2c:0d:6b:0b:f6:ff:35: be:cf:c2:c8:ff:6e:eb:07:13:cb:36:e7:f3:bf:0b:f8:37:3a: 9f:88:8c:1f:b4:a2:04:d8:28:19:c9:93:6e:47:bb:5d:53:18: 59:cc:2f:8e:c2:e2:f5:6b:2f:57:46:23:c2:09:21:44:e9:13: e1:0a:b8:c6:d9:b8:00:10:16:3e:92:ae:85:3d:1f:39:a2:48: 0c:fa:22:a6:0f:63:b7:f2:7b:b6:92:02:a3:22:9c:ab:4d:65: ba:1c:ce:9a:db:f3:25:8b:49:a4:f5:58:ff:4c:39:bf:6e:ba: 36:b3:28:97:cc:08:a1:4c:57:71:f1:cd:16:f2:9d:f6:58:ec: 50:d1:11:16:50:40:04:8b:17:3c:71:2c:5c:e4:43:97:62:98: 2f:6b:e8:7e:96:07:c5:36:13:b6:8a:1a:cd:d3:94:56:01:90: e9:b9:76:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjA1MTEwODU5NTFaFw0yNjA1MTgwODU5NTFaMBgxFjAUBgNV BAMTDTZhMDE5YTg3LTQ1ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdrmVz0eKsrEikFSnoSVOC/wF0aOIMHwmQOnxVwzR5RkM6WAfUy2671RWruBPt zaI3vGti2vDWNKLJFxTSyBoh5SQrxprzsu39jzF6jMkvZJXi7T6Ab92Um1Cyzw+g rbd4GVuNUF13/ZgVb60yFNTb98T6Mh/fHJKtOIQEtf0U/gxYLKxM1IiyxdR97Cac 45grvjfR7tymTphex/K55S5a4AiIeT1CuEdK1ad6+UokwRw7yK17uOIVI3EI4Qh0 kPb6IheUSpoDQMCbWBB6p99DEqgN/mde5FF+NevweDQs0TRYVh2qQv8pZhaWUmWU 6G9v96E0nPfmMdnqPphaELMZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWpuZjUOf DjiGGwIPCf4Omv2oDQAwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC3/M7lIH+xSRKw7daIJRZ6CxKKh+AAbPqywHeE7sqU6flj0S2SJc1JfiV34de2 UubovRGeP5fIiMJ6N+bUnnZ4VexWFZu003rPDBlPpV4jQg4IiiwNawv2/zW+z8LI /27rBxPLNufzvwv4NzqfiIwftKIE2CgZyZNuR7tdUxhZzC+OwuL1ay9XRiPCCSFE 6RPhCrjG2bgAEBY+kq6FPR85okgM+iKmD2O38nu2kgKjIpyrTWW6HM6a2/Mli0mk 9Vj/TDm/bro2syiXzAihTFdx8c0W8p32WOxQ0REWUEAEixc8cSxc5EOXYpgva+h+ lgfFNhO2ihrN05RWAZDpuXbG -----END CERTIFICATE-----Generated at Wed May 13 04:05:48 2026 by rpki-client