$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: gcBx10SOmOB+c9FIBB5xIRwDbW+FQXXAjWv3swC8ip8= Subject key identifier: 01:7D:BB:A3:E1:7E:9D:6D:DD:BF:C2:C4:15:63:37:43:51:64:B6:ED Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A04 Signing time: Tue 12 May 2026 19:53:02 +0000 Manifest this update: Tue 12 May 2026 19:53:01 +0000 Manifest next update: Tue 19 May 2026 19:53:01 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: kYewlX+xt67j3dC79bn3aaNUl7GS6AoG48EDLK3h5eE=) 2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 4+wSosNz8NVRn6V4mMR47c6x1Lj87Hhq2R9wSUX/xWw=) 3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: QqaVtXOsQ3g2/ddOuRomNusHtKcEc9UpR1465Wcagcc=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: DAvvM9WZjvxbegKaF7G0bCegMv1ld81gFHwRyYHJ0vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: May 12 19:53:01 2026 GMT Not After : May 19 19:53:01 2026 GMT Subject: CN=6a03851d-46e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:eb:04:9b:bf:6e:a0:42:bd:9b:5c:67:8f: 8f:bd:d8:20:75:eb:a2:c3:d6:1e:06:88:0f:a4:4e: f0:f1:b5:49:46:c1:d5:32:7d:2f:ac:bd:2f:57:8a: 0a:7b:61:a0:f3:f0:88:24:9a:48:3a:65:3e:e1:53: e6:00:84:90:9d:83:e5:50:40:ef:ad:00:c9:34:3a: 09:ab:7e:39:d3:f3:63:ab:04:67:3d:77:8e:d6:c1: 27:f8:58:51:60:7b:94:7f:ea:b4:75:79:e4:94:ee: 47:49:e7:4d:09:4b:6b:f9:e1:63:c8:09:35:31:bc: dc:61:34:21:87:90:0a:c8:77:db:a9:59:99:c9:3b: 58:16:44:af:47:a2:65:3a:19:d4:42:6f:a4:55:49: e9:9b:a7:13:14:31:7c:a4:28:ed:cc:94:da:06:02: b0:5e:3a:cb:22:97:02:c0:41:19:80:6c:89:6f:93: 1a:10:2b:30:1d:0c:4f:b3:54:ab:fb:41:18:b3:68: 91:43:10:b1:c6:0b:6d:a4:7d:72:df:06:3d:f5:ae: a0:6d:60:e6:de:7f:60:f6:4e:ba:ce:59:fe:09:96: 3d:9f:59:53:48:a5:d5:64:d3:1b:89:61:34:53:94: 33:54:71:66:2a:05:8c:da:38:d6:0f:e3:03:4b:f1: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:BB:A3:E1:7E:9D:6D:DD:BF:C2:C4:15:63:37:43:51:64:B6:ED X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b9:75:59:16:30:05:d2:00:d2:bc:e3:78:69:6a:32:e5:41: 80:c6:50:a4:62:39:d3:97:11:68:3e:57:a0:89:74:45:ae:ac: e9:fc:69:53:32:da:02:f3:ac:f2:5e:52:d0:82:16:10:c1:52: 6b:56:de:b7:0d:00:96:17:5b:2c:81:69:6d:b2:d0:55:7f:49: 41:0c:65:8f:db:72:d3:bc:ed:c9:e1:13:fa:68:8e:39:a7:03: 12:c6:80:fd:bc:d1:ce:82:d7:73:49:5d:b0:8d:a3:5d:8d:2b: 3a:b7:2b:b8:c3:ea:44:eb:b0:08:0b:08:86:ab:1b:4d:b9:68: f4:6f:a3:77:59:af:45:d9:ca:06:9c:cb:c0:37:0d:ae:c9:ed: 00:9c:e6:0d:cc:d8:1f:af:93:f9:45:72:62:38:f9:ff:eb:62: f3:e0:21:cf:86:2e:67:9c:43:52:5d:8d:85:d8:81:9e:ad:59: 90:14:d6:f5:de:ed:53:65:6f:7f:a7:cd:ea:37:a3:bc:58:8c: 6d:66:f2:37:f3:8c:b2:5d:3e:00:29:e8:77:db:ad:74:de:51: fa:6e:a7:b1:c7:5d:2b:7c:91:ba:5f:65:24:af:b0:56:34:98: d3:75:e9:60:2c:74:0d:92:f9:08:6b:a2:44:b6:a0:eb:65:c2: 88:bb:14:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwNTEyMTk1MzAxWhcNMjYwNTE5MTk1MzAxWjAYMRYwFAYD VQQDEw02YTAzODUxZC00NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteLrBJu/bqBCvZtcZ4+Pvdggdeuiw9YeBogPpE7w8bVJRsHVMn0vrL0vV4oK e2Gg8/CIJJpIOmU+4VPmAISQnYPlUEDvrQDJNDoJq3450/NjqwRnPXeO1sEn+FhR YHuUf+q0dXnklO5HSedNCUtr+eFjyAk1MbzcYTQhh5AKyHfbqVmZyTtYFkSvR6Jl OhnUQm+kVUnpm6cTFDF8pCjtzJTaBgKwXjrLIpcCwEEZgGyJb5MaECswHQxPs1Sr +0EYs2iRQxCxxgttpH1y3wY99a6gbWDm3n9g9k66zln+CZY9n1lTSKXVZNMbiWE0 U5QzVHFmKgWM2jjWD+MDS/EWWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAF9u6Ph fp1t3b/CxBVjN0NRZLbtMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAirl1WRYwBdIA0rzjeGlqMuVBgMZQpGI505cRaD5XoIl0Ra6s6fxpUzLaAvOs 8l5S0IIWEMFSa1betw0AlhdbLIFpbbLQVX9JQQxlj9ty07ztyeET+miOOacDEsaA /bzRzoLXc0ldsI2jXY0rOrcruMPqROuwCAsIhqsbTblo9G+jd1mvRdnKBpzLwDcN rsntAJzmDczYH6+T+UVyYjj5/+ti8+Ahz4YuZ5xDUl2NhdiBnq1ZkBTW9d7tU2Vv f6fN6jejvFiMbWbyN/OMsl0+ACnod9utdN5R+m6nscddK3yRul9lJK+wVjSY03Xp YCx0DZL5CGuiRLag62XCiLsUSA== -----END CERTIFICATE-----Generated at Wed May 13 07:47:48 2026 by rpki-client