$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: ZgR+a1m2nPzbpFbtp7vyzdP0AAVQ6Mqbophm7RYyW5o= Subject key identifier: A2:AC:01:7B:1A:F2:33:30:13:BE:58:84:2E:3C:E9:C7:44:56:95:C5 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0141 Signing time: Wed 13 May 2026 05:45:23 +0000 Manifest this update: Wed 13 May 2026 05:45:22 +0000 Manifest next update: Wed 20 May 2026 05:45:22 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: uxapzhRtJWF4KlDH/xBNXUldafw0f2EuZwgPcFwVIfs=) 2: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 5: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 6: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 7: 2D6E98583F0511F1B91814A8C9833773.roa (hash: cvsxFrKYwzXfmPTCt/kaQm7QbHYPT/Bov3jLYon6Aw4=) 8: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: May 13 05:45:22 2026 GMT Not After : May 20 05:45:22 2026 GMT Subject: CN=6a040ff3-8afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:b9:fc:4f:b2:47:86:a6:4e:fa:2e:71:4b: a9:25:4a:3d:a8:ab:b2:06:2d:a7:47:56:5a:5d:52: 4a:a1:39:2d:a4:54:26:06:0b:79:0c:5e:9e:ee:9f: 82:33:26:f4:fc:03:8a:f1:17:90:8c:f5:cb:30:8c: 7d:13:62:f3:90:48:bd:37:7c:48:02:e9:50:ae:e2: 14:c5:29:b2:c8:3c:bc:c0:bd:a7:65:53:5b:0e:71: eb:aa:de:6b:c7:9a:10:94:d2:aa:34:a3:64:1c:b1: e5:b3:75:da:b0:cf:54:58:3c:52:ef:26:ba:a8:56: 5c:5a:ae:91:76:e0:a1:f6:09:60:68:13:a5:c3:4f: 7c:d8:67:cd:ed:e6:4a:92:10:82:1a:cf:cf:e9:30: 26:33:02:f9:7a:8d:37:17:a3:4d:04:28:32:ba:27: cf:73:1e:ae:8d:e5:22:3d:4a:d4:9e:93:3b:94:b7: b9:80:7e:9c:b3:b4:8a:50:51:09:ee:f0:e7:d0:88: bb:6c:e7:7d:23:a6:a7:8c:87:5d:3e:ad:5c:95:1d: 97:1c:28:be:6a:c2:77:9a:90:9a:7c:a6:95:6f:0a: 1f:c6:1f:85:2c:bc:e5:c5:15:a4:75:a3:31:39:cf: ed:1e:63:97:fe:c6:50:cb:59:96:0e:5a:e5:ca:4e: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:01:7B:1A:F2:33:30:13:BE:58:84:2E:3C:E9:C7:44:56:95:C5 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6f:91:bb:d6:c7:6f:ab:76:31:e9:1b:d9:64:fe:4e:06:e5: 7d:27:5c:15:01:94:a2:37:78:c0:a2:81:a7:10:49:3b:5e:25: 38:24:ba:dc:ab:3b:a3:b9:93:0e:5a:d0:02:13:4c:47:28:9f: 6f:34:3d:a2:99:96:56:b5:e3:4a:56:63:5d:79:c9:a6:c6:d9: 72:c2:7d:cd:b1:d3:a6:0a:44:0b:c7:57:d5:18:f3:b6:ff:f6: e6:ef:85:fe:0d:99:60:f2:cb:d5:31:40:67:44:85:9d:25:92: 17:02:ce:3b:6a:01:07:dc:07:d8:b4:6d:09:e6:d0:73:05:28: 27:46:f5:a2:73:9d:7b:52:93:15:79:ce:eb:e8:51:90:ac:1c: ce:27:12:4f:ef:22:50:06:20:69:98:c5:61:a8:f3:0a:d9:55: 7d:91:58:dd:30:32:32:fa:e0:e3:11:be:48:0b:a9:8a:9b:f0: 5b:85:68:6b:8f:57:d2:ac:fb:eb:c1:a5:61:cc:2d:50:cd:37: 6e:50:f9:ac:8b:81:71:82:bb:52:eb:ab:0e:9c:73:ea:89:88: f3:79:7e:b3:06:6b:8d:12:bb:7d:d5:ce:81:28:64:9a:2b:b4: 9e:1f:df:5c:ea:de:3d:78:80:7e:aa:50:ac:72:90:4c:2d:a4: f9:e1:f1:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwNTEzMDU0NTIyWhcNMjYwNTIwMDU0NTIyWjAYMRYwFAYD VQQDEw02YTA0MGZmMy04YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCi5/E+yR4amTvoucUupJUo9qKuyBi2nR1ZaXVJKoTktpFQmBgt5DF6e7p+C Myb0/AOK8ReQjPXLMIx9E2LzkEi9N3xIAulQruIUxSmyyDy8wL2nZVNbDnHrqt5r x5oQlNKqNKNkHLHls3XasM9UWDxS7ya6qFZcWq6RduCh9glgaBOlw0982GfN7eZK khCCGs/P6TAmMwL5eo03F6NNBCgyuifPcx6ujeUiPUrUnpM7lLe5gH6cs7SKUFEJ 7vDn0Ii7bOd9I6anjIddPq1clR2XHCi+asJ3mpCafKaVbwofxh+FLLzlxRWkdaMx Oc/tHmOX/sZQy1mWDlrlyk4CQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKsAXsa 8jMwE75YhC486cdEVpXFMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm2+Ru9bHb6t2Mekb2WT+TgblfSdcFQGUojd4wKKBpxBJO14lOCS63Ks7o7mT DlrQAhNMRyifbzQ9opmWVrXjSlZjXXnJpsbZcsJ9zbHTpgpEC8dX1Rjztv/25u+F /g2ZYPLL1TFAZ0SFnSWSFwLOO2oBB9wH2LRtCebQcwUoJ0b1onOde1KTFXnO6+hR kKwczicST+8iUAYgaZjFYajzCtlVfZFY3TAyMvrg4xG+SAupipvwW4Voa49X0qz7 68GlYcwtUM03blD5rIuBcYK7UuurDpxz6omI83l+swZrjRK7fdXOgShkmiu0nh/f XOrePXiAfqpQrHKQTC2k+eHxHA== -----END CERTIFICATE-----Generated at Wed May 13 16:06:31 2026 by rpki-client