$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: DEol7D24nLM+spUygd7T/J9DP9u+u9CTIe9VxwDC3sY= Subject key identifier: 97:76:EE:E6:3E:20:1F:E9:69:39:E4:D7:20:D5:04:7C:E0:83:32:0F Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0822 Signing time: Tue 12 May 2026 21:14:32 +0000 Manifest this update: Tue 12 May 2026 21:14:32 +0000 Manifest next update: Tue 19 May 2026 21:14:32 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: Ie8WN1LC5uR9Qogles9kYJH82onn+Y3Gh4qJW18LMwk=) 2: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: w3scKDbQYjpLx94ZRaab40eW/UhRdD7Q5ZODJkqNtIg=) 3: 7C76080E08D611EE82522448C4F9AE02.roa (hash: IBifwCVq/S5vereo4kuRu2ImGuwOI0Vol6HL/BDQgcs=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: oLACDWn0TReutR+Ou0/yfjtsLmAW+XCNorvBY4a/yZc=) 5: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: Do6JcOVeJQyaM8Hiy53JUF9pj74bAWoEOVQV2PKtSc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: May 12 21:14:32 2026 GMT Not After : May 19 21:14:32 2026 GMT Subject: CN=6a039838-d467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:03:d0:b9:3b:40:67:ec:af:c3:4c:6a:51: 62:78:b5:3a:a8:65:f5:2b:e7:3a:68:f3:25:02:a2: f6:b3:8f:a7:4f:8d:89:2a:61:8c:57:0c:72:97:03: 51:0f:f3:fc:ca:41:47:97:79:7e:c5:05:2e:75:a8: a3:93:7b:cd:36:a8:56:c2:fe:bd:5e:2f:1a:ae:18: b5:a5:b0:0c:5c:42:0b:41:cb:0b:40:51:77:66:d6: 4d:9a:38:5e:4a:79:70:89:40:f5:13:fd:6b:11:55: a3:10:93:a5:30:69:cd:d5:22:44:73:77:28:82:43: db:96:81:51:65:e5:58:bc:19:92:b1:0d:3b:bf:ba: ca:78:ea:fc:e6:07:82:6d:f7:fa:43:6b:1b:70:01: 16:e7:9e:74:39:fa:75:93:42:29:e6:ba:c0:09:a7: ed:08:00:49:92:5e:2d:f1:32:81:eb:d5:51:4e:fe: 8b:49:5c:15:9f:be:be:90:c1:78:2f:eb:db:df:18: d3:14:c8:bb:dd:e8:d4:e9:f9:b4:e2:1f:c9:90:c6: 7f:0a:e1:aa:13:c5:e5:d5:43:98:a7:92:2e:a2:6f: fb:74:67:b2:c8:65:22:55:18:57:10:2d:78:9b:50: b9:3f:43:04:15:a7:ac:2d:85:fe:da:4f:4d:49:b2: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:76:EE:E6:3E:20:1F:E9:69:39:E4:D7:20:D5:04:7C:E0:83:32:0F X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cf:fe:1b:d7:4c:d1:b9:c0:dd:a4:0f:07:e3:70:af:78:e6: 6f:62:b1:77:78:b0:2a:76:e9:65:b4:0c:43:25:76:1e:42:63: e4:85:69:f9:c1:38:f7:43:be:ad:5e:c5:5b:f2:64:80:e2:2e: fa:27:d6:a6:57:d4:be:d1:bb:94:25:f0:56:4a:12:55:e8:7c: a8:f6:98:2f:87:52:08:3c:63:04:7e:53:ff:6b:3d:73:b3:63: d6:23:35:a4:82:0d:a0:51:86:ba:e8:26:5b:cf:19:d2:aa:d1: 1f:b1:cd:5b:05:d5:c9:ba:07:00:f6:d9:39:d8:7c:6d:b4:38: 82:81:00:1f:b5:ed:62:c9:05:4f:65:7f:38:d8:d3:92:3f:86: f8:b7:34:3d:3f:58:bb:58:0d:9b:ea:79:80:b0:41:5e:9c:28: f5:0a:18:13:28:85:cb:f4:e8:82:ec:49:7b:19:ba:19:b4:54: b0:06:e7:9b:d3:cd:8a:4d:a9:c2:ab:fa:6d:9a:af:87:4a:24: c5:77:10:66:bc:2b:53:30:4f:40:08:f1:50:55:93:36:eb:38: 16:22:e5:c1:7e:1e:e6:a6:e2:35:53:59:d3:ae:30:b3:f9:16: f6:5b:6e:b5:39:88:8c:84:49:34:2c:bc:ea:e5:13:98:ef:f7: e6:e9:64:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYwNTEyMjExNDMyWhcNMjYwNTE5MjExNDMyWjAYMRYwFAYD VQQDEw02YTAzOTgzOC1kNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q8D0Lk7QGfsr8NMalFieLU6qGX1K+c6aPMlAqL2s4+nT42JKmGMVwxylwNR D/P8ykFHl3l+xQUudaijk3vNNqhWwv69Xi8arhi1pbAMXEILQcsLQFF3ZtZNmjhe SnlwiUD1E/1rEVWjEJOlMGnN1SJEc3cogkPbloFRZeVYvBmSsQ07v7rKeOr85geC bff6Q2sbcAEW5550Ofp1k0Ip5rrACaftCABJkl4t8TKB69VRTv6LSVwVn76+kMF4 L+vb3xjTFMi73ejU6fm04h/JkMZ/CuGqE8Xl1UOYp5Iuom/7dGeyyGUiVRhXEC14 m1C5P0MEFaesLYX+2k9NSbIHFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJd27uY+ IB/paTnk1yDVBHzggzIPMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQs/+G9dM0bnA3aQPB+Nwr3jmb2Kxd3iwKnbpZbQMQyV2HkJj5IVp+cE490O+ rV7FW/JkgOIu+ifWplfUvtG7lCXwVkoSVeh8qPaYL4dSCDxjBH5T/2s9c7Nj1iM1 pIINoFGGuugmW88Z0qrRH7HNWwXVyboHAPbZOdh8bbQ4goEAH7XtYskFT2V/ONjT kj+G+Lc0PT9Yu1gNm+p5gLBBXpwo9QoYEyiFy/ToguxJexm6GbRUsAbnm9PNik2p wqv6bZqvh0okxXcQZrwrUzBPQAjxUFWTNus4FiLlwX4e5qbiNVNZ064ws/kW9ltu tTmIjIRJNCy86uUTmO/35ulkaw== -----END CERTIFICATE-----Generated at Wed May 13 00:16:32 2026 by rpki-client