$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: aalgqCx2xBCMNggMh9lPp8WBOvfkFdyNY8TY3sUkWC4= Subject key identifier: C8:BF:96:DA:46:C0:00:58:AD:FF:7A:A3:8E:C0:1E:D5:67:EC:CB:FC Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 033A Signing time: Wed 13 May 2026 01:09:48 +0000 Manifest this update: Wed 13 May 2026 01:09:48 +0000 Manifest next update: Wed 20 May 2026 01:09:48 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: ekHfOOw/TEd0y+zonnAwSdMT2ButSdx+Upm5wZWOdbo=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: LAY/2oYEWNptyjPMrgoY8aWftbMtB6LPjdcoOOw1Kqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: May 13 01:09:48 2026 GMT Not After : May 20 01:09:48 2026 GMT Subject: CN=6a03cf5c-b3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:0a:d6:93:45:4f:06:a1:61:10:9a:b3:6e: e4:7e:cd:00:6b:5a:27:9a:b2:0f:f0:58:05:2f:2a: b0:99:4d:26:46:3d:0b:49:a8:04:f1:de:ee:d8:dd: 05:e9:9c:a1:7f:e5:f9:bd:0e:1b:96:98:8a:c4:f6: 5a:50:dc:d6:36:5f:ae:96:bd:97:2b:96:ea:12:07: 5f:13:d7:b8:10:53:97:ab:d2:b3:42:17:e1:80:ba: 73:b7:7b:01:d6:9d:0b:19:e4:d7:13:5b:59:bf:d0: 47:ba:e9:d6:de:0a:3b:38:49:1a:08:b9:a8:cd:17: 74:6f:17:34:b7:30:87:82:9b:b2:12:a1:05:56:7d: 19:7e:c5:29:c6:2e:9c:d7:0e:9b:ec:4d:82:f8:b4: 8f:2c:4d:9f:02:02:eb:58:4a:cb:72:c7:c0:6c:fd: 1f:12:35:dd:17:c2:74:96:40:e5:93:39:91:ae:14: c2:b0:de:6f:4c:aa:73:ab:b1:dd:ac:46:16:99:d0: ae:88:5f:79:4b:1c:e1:5f:f6:38:0f:3d:6b:90:5b: 93:aa:69:98:9b:da:1e:af:94:bf:96:a9:3d:c7:57: ec:21:4e:f0:4b:99:19:6c:3d:aa:97:10:bd:dd:00: cc:d5:4d:de:2b:db:cd:9c:c0:0d:92:10:70:d8:e8: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:96:DA:46:C0:00:58:AD:FF:7A:A3:8E:C0:1E:D5:67:EC:CB:FC X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:00:b6:a5:42:b8:6e:0c:60:14:bf:b8:9a:f8:97:58:e1:5a: 96:b2:59:af:56:85:5e:85:06:03:ae:71:11:2d:a3:4f:74:e7: 39:49:a9:6e:0b:19:4c:01:7b:01:6d:a3:59:ae:a7:17:eb:4c: 96:7b:cf:c8:07:32:f1:a9:bb:8c:0b:b4:82:b9:77:65:c1:e1: a2:69:c1:29:66:f9:fd:cd:05:ed:4b:ab:76:e0:c8:8f:42:5a: 61:6e:78:6d:b9:46:63:ef:e7:bb:3c:66:c1:9c:86:bb:fb:74: 5d:66:10:b2:ae:8a:7b:40:27:f9:30:59:42:89:24:bd:1d:92: 9f:92:3f:09:74:c1:92:c5:8a:af:9a:2c:cf:c3:b9:05:29:ff: 4e:bf:7e:d5:ac:12:c8:6a:54:38:d0:73:99:2a:c8:05:3c:68: c8:4f:83:9d:5d:07:b5:8d:62:67:b2:07:bf:37:8f:93:e4:27: cc:61:ad:6f:45:e9:70:6a:eb:f8:f6:c1:8f:9f:81:05:d8:3b: aa:db:5c:d8:d1:2a:91:a3:c3:88:83:2b:a1:d2:89:30:bc:13: 6c:58:20:9d:73:de:f8:7e:05:6b:d1:52:db:fd:92:53:6c:d4: 54:08:1b:84:44:38:65:2d:2b:ad:33:94:2a:f6:e9:c6:46:00: 9b:f3:b6:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwNTEzMDEwOTQ4WhcNMjYwNTIwMDEwOTQ4WjAYMRYwFAYD VQQDEw02YTAzY2Y1Yy1iM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GcK1pNFTwahYRCas27kfs0Aa1onmrIP8FgFLyqwmU0mRj0LSagE8d7u2N0F 6Zyhf+X5vQ4blpiKxPZaUNzWNl+ulr2XK5bqEgdfE9e4EFOXq9KzQhfhgLpzt3sB 1p0LGeTXE1tZv9BHuunW3go7OEkaCLmozRd0bxc0tzCHgpuyEqEFVn0ZfsUpxi6c 1w6b7E2C+LSPLE2fAgLrWErLcsfAbP0fEjXdF8J0lkDlkzmRrhTCsN5vTKpzq7Hd rEYWmdCuiF95SxzhX/Y4Dz1rkFuTqmmYm9oer5S/lqk9x1fsIU7wS5kZbD2qlxC9 3QDM1U3eK9vNnMANkhBw2OjrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMi/ltpG wABYrf96o47AHtVn7Mv8MB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHwC2pUK4bgxgFL+4mviXWOFalrJZr1aFXoUGA65xES2jT3TnOUmpbgsZTAF7 AW2jWa6nF+tMlnvPyAcy8am7jAu0grl3ZcHhomnBKWb5/c0F7UurduDIj0JaYW54 bblGY+/nuzxmwZyGu/t0XWYQsq6Ke0An+TBZQokkvR2Sn5I/CXTBksWKr5osz8O5 BSn/Tr9+1awSyGpUONBzmSrIBTxoyE+DnV0HtY1iZ7IHvzePk+QnzGGtb0XpcGrr +PbBj5+BBdg7qttc2NEqkaPDiIMrodKJMLwTbFggnXPe+H4Fa9FS2/2SU2zUVAgb hEQ4ZS0rrTOUKvbpxkYAm/O2jw== -----END CERTIFICATE-----Generated at Wed May 13 10:20:04 2026 by rpki-client