$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: Hq8L2rSuqCVwH7w7KRf5NHfr04e9xCCOeU2jPFPZNnY= Subject key identifier: 20:B9:D6:14:4A:4D:91:62:4F:52:E3:40:0F:AF:0D:16:3E:F5:2E:C5 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F24 Signing time: Tue 12 May 2026 17:36:42 +0000 Manifest this update: Tue 12 May 2026 17:36:41 +0000 Manifest next update: Tue 19 May 2026 17:36:41 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: et0I2wNzgjNSowWLv6aH2q0OfdQCAl2PZoDfhYlDU7M=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: May 12 17:36:41 2026 GMT Not After : May 19 17:36:41 2026 GMT Subject: CN=6a03652a-2571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:8a:6b:b5:af:ac:82:2d:15:a6:1f:70:44: 22:f6:06:b0:8a:9d:5f:98:8f:3a:cf:60:06:5a:24: ca:a1:f2:df:f2:59:eb:a4:ad:2a:ff:f6:fd:b3:8e: 66:e7:ca:ec:6e:b2:a7:1e:71:8b:fe:1c:0a:10:22: d2:10:79:67:f4:ef:d9:da:f0:1c:6b:60:79:2b:33: ec:89:03:0f:e5:61:80:a8:47:41:f0:67:d5:df:76: 3a:6e:c5:86:81:cb:9e:17:41:6c:97:3e:b8:fc:b3: 96:be:d2:4c:4f:4e:d9:fe:f5:97:ee:3f:ce:63:d3: c7:49:8b:2f:ab:37:cd:e1:c3:f9:5c:65:41:0f:03: d2:87:be:8a:27:e4:7f:36:18:21:b9:82:ed:56:e0: 24:34:71:6e:07:de:ae:a3:ba:68:c8:8e:e5:de:67: f3:32:57:f8:04:d9:cb:88:bb:91:16:23:18:13:91: b0:d6:47:7c:e6:6f:7b:6a:21:65:ca:62:cf:cb:28: 9c:d5:20:93:bc:83:bd:03:63:00:4d:55:d2:fd:94: 48:6c:1f:96:c3:5c:e9:96:24:a5:50:03:d5:16:09: fd:6e:22:cc:4f:6b:a3:0f:f1:66:20:2b:da:d2:d2: a2:53:2e:74:3d:06:c1:be:83:83:a2:49:a7:60:f9: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:D6:14:4A:4D:91:62:4F:52:E3:40:0F:AF:0D:16:3E:F5:2E:C5 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:15:31:11:a0:d5:3d:c8:55:25:b3:ad:06:70:ab:b7:8f:cf: ef:50:aa:de:41:19:d5:d6:46:61:e3:35:ae:cf:f6:bc:66:69: a4:14:8a:2a:98:18:06:74:7b:5b:54:55:e5:e3:e4:50:dc:b7: 1b:db:9e:e7:a3:6c:b2:25:23:66:d6:26:cf:14:1f:15:1b:25: ba:51:a2:be:08:d6:fe:fd:0a:8c:85:15:af:fa:66:69:13:de: e1:a3:ec:15:97:22:27:5f:7d:bc:53:5b:65:95:6a:f1:2f:56: 12:57:f1:e2:cf:74:54:40:f1:a7:b5:65:f2:29:a2:80:4e:a1: e0:f9:89:99:20:42:19:77:e1:3a:ef:c8:4e:03:f7:2c:f9:72: 10:43:c2:fc:c8:a1:4b:49:1f:0f:15:bd:b7:3a:9a:55:93:71: fb:f7:91:07:62:4c:6e:c4:7b:de:a0:36:0d:e9:58:26:18:08: fe:68:14:62:95:71:45:b3:fa:66:b5:db:cc:06:1d:03:22:32: 8a:03:1e:55:67:97:69:cc:f9:d1:88:e9:dd:af:c0:74:2e:c2: 3b:4d:2c:a5:b0:7b:7a:f8:65:22:6c:41:1c:45:de:a7:37:fb: 65:ee:42:12:e6:d3:96:d4:94:d5:3c:71:9e:f4:0c:69:57:43: 5f:cd:29:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwNTEyMTczNjQxWhcNMjYwNTE5MTczNjQxWjAYMRYwFAYD VQQDEw02YTAzNjUyYS0yNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdeKa7WvrIItFaYfcEQi9gawip1fmI86z2AGWiTKofLf8lnrpK0q//b9s45m 58rsbrKnHnGL/hwKECLSEHln9O/Z2vAca2B5KzPsiQMP5WGAqEdB8GfV33Y6bsWG gcueF0Fslz64/LOWvtJMT07Z/vWX7j/OY9PHSYsvqzfN4cP5XGVBDwPSh76KJ+R/ NhghuYLtVuAkNHFuB96uo7poyI7l3mfzMlf4BNnLiLuRFiMYE5Gw1kd85m97aiFl ymLPyyic1SCTvIO9A2MATVXS/ZRIbB+Ww1zpliSlUAPVFgn9biLMT2ujD/FmICva 0tKiUy50PQbBvoODokmnYPkxJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC51hRK TZFiT1LjQA+vDRY+9S7FMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjBUxEaDVPchVJbOtBnCrt4/P71Cq3kEZ1dZGYeM1rs/2vGZppBSKKpgYBnR7 W1RV5ePkUNy3G9ue56NssiUjZtYmzxQfFRslulGivgjW/v0KjIUVr/pmaRPe4aPs FZciJ199vFNbZZVq8S9WElfx4s90VEDxp7Vl8imigE6h4PmJmSBCGXfhOu/ITgP3 LPlyEEPC/MihS0kfDxW9tzqaVZNx+/eRB2JMbsR73qA2DelYJhgI/mgUYpVxRbP6 ZrXbzAYdAyIyigMeVWeXacz50Yjp3a/AdC7CO00spbB7evhlImxBHEXepzf7Ze5C EubTltSU1TxxnvQMaVdDX80pXA== -----END CERTIFICATE-----Generated at Wed May 13 03:06:46 2026 by rpki-client