$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: P9eHw2rEDU+RmhNHPsQm9HvxYBwvc+vN7aA7M8TzliI= Subject key identifier: 07:67:2B:E3:B5:C4:D3:29:FF:39:DD:F9:F9:1D:F2:38:2A:4C:0E:9F Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 07A3 Signing time: Tue 12 May 2026 21:34:57 +0000 Manifest this update: Tue 12 May 2026 21:34:56 +0000 Manifest next update: Tue 19 May 2026 21:34:56 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: 1KVIlNzBXpORBV1nlHXXl2qzvlpD/aPkN2byU9HqZBs=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: aF15WV54UPQi+570lsW9w8ZiAccp8MovG9ijIx3Rdww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: May 12 21:34:56 2026 GMT Not After : May 19 21:34:56 2026 GMT Subject: CN=6a039d00-8b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:87:1e:3c:3e:17:83:e9:7d:cd:6e:0d:c1: a2:37:fd:bf:d5:92:3c:02:7d:5c:06:72:90:d5:b5: 8b:55:ac:c1:91:70:23:d0:f2:a7:b5:86:7d:6b:28: 70:12:bb:c9:1d:14:8b:c0:35:0b:42:59:30:8b:f9: 6b:15:26:70:c2:9c:18:2c:5c:4c:4d:36:e8:f0:f7: 68:ad:22:9f:18:7a:1e:d1:5d:30:e2:fc:32:8f:e8: c0:08:d9:03:06:59:be:5e:e7:26:0a:7c:29:a5:f4: 60:8a:ab:e4:c8:6a:52:72:a1:39:7f:53:bb:d6:96: 64:6c:d4:da:b9:0e:65:44:3c:9c:12:82:98:8d:84: e7:ee:09:39:72:b9:57:9c:ec:c8:da:77:65:54:ed: 5b:d8:81:b7:33:7d:b1:17:d8:60:86:ea:e1:6d:66: fd:6f:49:ea:61:ba:9a:e7:48:ac:7f:0b:fa:a4:ee: 54:6b:74:aa:5f:3a:30:ad:07:9a:87:ae:f3:61:8f: 48:c1:e0:a1:d7:29:ea:99:c6:99:f6:04:77:d8:6b: 5f:4b:6d:fc:27:58:29:26:94:5c:d9:52:4e:57:41: b3:7a:ca:d7:6c:3e:a5:f1:0a:8f:62:95:92:a5:30: 39:ee:e2:8c:0a:cb:2f:08:e5:53:78:fa:da:01:90: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:2B:E3:B5:C4:D3:29:FF:39:DD:F9:F9:1D:F2:38:2A:4C:0E:9F X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:56:97:b0:ed:67:61:a9:aa:99:84:23:8d:51:5d:23:77:6d: de:cd:c5:57:9c:36:08:90:15:48:76:53:6b:8f:a6:df:0e:9e: a4:5f:e8:49:0e:65:f6:3d:0f:a7:44:15:68:58:c3:bd:cd:36: ce:e2:56:56:ff:8e:29:8a:b3:7c:4d:3d:5d:30:4d:65:49:06: 9f:76:bf:0b:80:56:70:5d:d5:f4:b0:1c:dd:4b:96:fe:cc:1a: b3:a0:eb:97:2e:4f:d4:ff:18:ce:ea:6a:bb:b0:d3:1f:fb:05: b7:52:30:94:40:11:91:28:28:12:00:bb:aa:bc:50:d8:c8:84: d5:96:94:35:dc:03:ff:87:a5:5f:be:54:b5:84:e7:f6:ef:e3: a2:5c:6f:f1:15:65:07:6b:74:73:f4:80:70:83:e1:6d:69:6a: 83:6e:7f:28:0a:00:39:d8:9b:fa:33:aa:d0:9e:90:81:28:50: 6f:a6:2b:fc:f8:b6:91:e7:1e:62:cb:86:aa:9d:4e:9c:f0:49: 19:3c:07:2d:7f:0b:f5:71:9c:8f:97:8b:fc:71:a9:af:82:2e: 9b:62:5e:2b:a0:7c:4c:c4:8e:49:10:b8:24:0f:79:84:a7:87: 1b:1b:e9:3f:32:e1:2c:77:6f:7f:7a:c7:8d:98:63:a4:b1:53: 36:82:cd:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjYwNTEyMjEzNDU2WhcNMjYwNTE5MjEzNDU2WjAYMRYwFAYD VQQDEw02YTAzOWQwMC04YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopGHHjw+F4Ppfc1uDcGiN/2/1ZI8An1cBnKQ1bWLVazBkXAj0PKntYZ9ayhw ErvJHRSLwDULQlkwi/lrFSZwwpwYLFxMTTbo8PdorSKfGHoe0V0w4vwyj+jACNkD Blm+XucmCnwppfRgiqvkyGpScqE5f1O71pZkbNTauQ5lRDycEoKYjYTn7gk5crlX nOzI2ndlVO1b2IG3M32xF9hghurhbWb9b0nqYbqa50isfwv6pO5Ua3SqXzowrQea h67zYY9IweCh1ynqmcaZ9gR32GtfS238J1gpJpRc2VJOV0GzesrXbD6l8QqPYpWS pTA57uKMCssvCOVTePraAZD2DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdnK+O1 xNMp/znd+fkd8jgqTA6fMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1aXsO1nYamqmYQjjVFdI3dt3s3FV5w2CJAVSHZTa4+m3w6epF/oSQ5l9j0P p0QVaFjDvc02zuJWVv+OKYqzfE09XTBNZUkGn3a/C4BWcF3V9LAc3UuW/swas6Dr ly5P1P8Yzupqu7DTH/sFt1IwlEARkSgoEgC7qrxQ2MiE1ZaUNdwD/4elX75UtYTn 9u/jolxv8RVlB2t0c/SAcIPhbWlqg25/KAoAOdib+jOq0J6QgShQb6Yr/Pi2kece YsuGqp1OnPBJGTwHLX8L9XGcj5eL/HGpr4Ium2JeK6B8TMSOSRC4JA95hKeHGxvp PzLhLHdvf3rHjZhjpLFTNoLNpQ== -----END CERTIFICATE-----Generated at Wed May 13 14:46:43 2026 by rpki-client