$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: Cu1kQ6ibILtTP3IxiTQSVM3ixXK1FQ5sLZKZrCF0Vnk= Subject key identifier: 65:65:D9:6A:7A:DD:41:FC:F9:29:3A:45:19:0C:A2:9B:D5:11:90:E6 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 07D4 Signing time: Tue 12 May 2026 21:28:03 +0000 Manifest this update: Tue 12 May 2026 21:28:02 +0000 Manifest next update: Tue 19 May 2026 21:28:02 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: QYuL0FfpzYwIOHKlkxfmsloEdbdxXP2fEGrk1p9g6SM=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: cFqGeqvAp4+H9D3Go8EW1NlfA3DNb+FcP3oMJfoNMaY=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: 3VO026Z1Sl5k+dt0+oenlD8Lk6M27d1xuB0vo/m4844=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: mfLPXcvsn2GPwPl0nmYTUbj8MnwQ+nd3JJseLaE/iN8=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: MGgDBuK2ozCNY4Vjvqi7F7BY4x+uvNZ9GpBczQ7FuCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: May 12 21:28:02 2026 GMT Not After : May 19 21:28:02 2026 GMT Subject: CN=6a039b63-6ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:47:c7:a2:0d:31:5b:a6:00:2f:dc:4f:2f: fb:d4:11:e1:29:85:34:eb:53:c1:96:a5:50:a8:af: 72:f2:61:3c:5b:e2:ac:2a:d8:cf:94:a4:e6:e1:fc: 2c:29:d2:15:a9:d3:02:26:d2:ec:11:3b:1d:d2:66: 94:8b:5f:ac:da:42:49:a2:54:58:cd:91:51:76:1b: eb:ef:54:e8:b1:a8:43:40:80:86:f3:9f:7e:e4:11: e7:e9:b8:e1:53:c7:2e:a1:36:a0:7f:a8:85:67:00: ff:f5:cf:f6:af:ab:dc:44:2c:a0:7c:0d:09:3d:64: 41:e9:a1:40:dd:43:4d:df:aa:aa:ad:4f:1a:db:7b: 47:9b:bf:5f:4d:4f:af:6e:c7:81:f2:83:fb:9a:41: 97:5e:6d:69:28:0c:69:2c:5a:82:87:92:e7:f9:1a: c6:a5:1c:93:19:93:7e:c8:6c:fb:99:5b:eb:54:38: 9c:b3:86:58:55:33:2d:92:2a:a1:21:d5:25:00:ba: 3d:9f:0c:11:01:24:fa:da:af:b7:1e:17:06:ff:a7: 73:e3:97:40:f7:22:40:bb:d2:ef:31:0d:a8:f0:22: 40:0b:dd:96:8f:78:20:70:79:3f:32:2f:88:d7:04: 54:b8:f5:c7:5f:67:b8:dc:67:8d:58:87:64:55:f4: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:D9:6A:7A:DD:41:FC:F9:29:3A:45:19:0C:A2:9B:D5:11:90:E6 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3c:d9:40:9c:97:24:a5:2e:91:a8:56:a3:0a:9a:1d:a3:be: fc:b7:33:1b:40:71:7e:07:9d:32:97:7c:1e:19:40:f2:e2:0e: aa:28:08:00:4b:ea:fa:31:1d:fd:c1:22:21:c0:f9:42:8d:9b: 65:a9:cd:30:50:a6:49:e2:3d:47:80:27:87:11:8b:e1:65:04: 5b:4a:31:f9:23:b8:c4:60:1c:85:02:79:e6:3b:81:a7:d3:47: eb:b0:72:c4:7e:5d:8c:51:80:57:17:df:c3:70:2c:38:3d:88: e9:59:92:67:31:52:29:26:ed:ad:e0:40:5b:37:c9:df:59:72: d8:08:64:9a:63:6b:26:39:bf:2c:79:97:ac:64:ba:de:a3:ab: de:d7:53:fd:e7:58:06:58:46:07:02:e3:38:15:1c:30:6d:fd: ae:c6:79:ae:18:a3:82:e6:d0:9b:63:70:69:07:8e:3e:d0:57: 50:f9:85:f7:91:2f:25:3e:2a:4c:fa:f3:6b:e6:5f:d2:1c:95: 28:3b:8b:06:0a:e0:e3:a7:7e:0b:06:2e:ec:9a:6c:15:fb:be: c0:54:6f:28:1d:b6:5c:06:16:8b:6d:41:71:18:38:8a:f0:58: 63:c3:e9:4f:8f:6e:9d:82:8c:a8:3f:4d:6c:45:97:ab:b9:36: fc:70:d2:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjYwNTEyMjEyODAyWhcNMjYwNTE5MjEyODAyWjAYMRYwFAYD VQQDEw02YTAzOWI2My02ZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9ZHx6INMVumAC/cTy/71BHhKYU061PBlqVQqK9y8mE8W+KsKtjPlKTm4fws KdIVqdMCJtLsETsd0maUi1+s2kJJolRYzZFRdhvr71TosahDQICG859+5BHn6bjh U8cuoTagf6iFZwD/9c/2r6vcRCygfA0JPWRB6aFA3UNN36qqrU8a23tHm79fTU+v bseB8oP7mkGXXm1pKAxpLFqCh5Ln+RrGpRyTGZN+yGz7mVvrVDics4ZYVTMtkiqh IdUlALo9nwwRAST62q+3HhcG/6dz45dA9yJAu9LvMQ2o8CJAC92Wj3ggcHk/Mi+I 1wRUuPXHX2e43GeNWIdkVfTfXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVl2Wp6 3UH8+Sk6RRkMopvVEZDmMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDzZQJyXJKUukahWowqaHaO+/LczG0BxfgedMpd8HhlA8uIOqigIAEvq+jEd /cEiIcD5Qo2bZanNMFCmSeI9R4AnhxGL4WUEW0ox+SO4xGAchQJ55juBp9NH67By xH5djFGAVxffw3AsOD2I6VmSZzFSKSbtreBAWzfJ31ly2AhkmmNrJjm/LHmXrGS6 3qOr3tdT/edYBlhGBwLjOBUcMG39rsZ5rhijgubQm2NwaQeOPtBXUPmF95EvJT4q TPrza+Zf0hyVKDuLBgrg46d+CwYu7JpsFfu+wFRvKB22XAYWi21BcRg4ivBYY8Pp T49unYKMqD9NbEWXq7k2/HDSQw== -----END CERTIFICATE-----Generated at Wed May 13 13:39:12 2026 by rpki-client