$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: C9nk1bqtfV6XWQNC93QAAOTQJ+cjyOR/+P95e3yDXAc= Subject key identifier: EA:53:F8:84:26:BA:8C:64:A3:7D:3B:DE:8A:C4:35:4C:65:81:2D:7A Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0D8F Signing time: Tue 12 May 2026 17:59:07 +0000 Manifest this update: Tue 12 May 2026 17:59:06 +0000 Manifest next update: Tue 19 May 2026 17:59:06 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: GVF+U1kFiaIqKf4eXQQE/4frmGVxDxhL0aCDVV1nYhI=) 2: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=) 3: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=) 4: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: May 12 17:59:06 2026 GMT Not After : May 19 17:59:06 2026 GMT Subject: CN=6a036a6a-895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:36:18:cf:23:8b:7f:cc:4a:4d:81:45:77: ec:0a:f9:c9:7b:8c:c4:55:ce:ae:23:15:51:83:d4: 11:f5:c0:db:e6:5c:a1:dd:18:36:af:65:cc:e7:c4: b9:1c:e7:a7:0e:97:01:02:fb:de:a7:7c:e6:d7:d5: 21:64:e9:53:9b:ee:18:37:2c:a9:cd:2e:29:76:a0: ad:a9:e5:24:14:4f:31:4e:e2:b4:12:f7:58:bb:51: ff:75:f9:29:5b:b9:40:ce:72:bb:1a:3a:cb:e4:5d: 82:f1:61:b5:5e:00:89:2a:b7:e3:7b:10:fc:2b:06: 0a:e8:bb:78:fd:b9:3b:76:c4:a6:a9:5f:a9:d4:65: 11:8a:6f:71:2a:6c:ab:e5:cf:2a:64:ca:e0:0c:a0: be:7d:40:df:34:a2:b5:3f:e2:47:95:78:ae:f4:97: 41:8e:f7:da:3a:98:7e:0b:ff:a0:cf:63:ac:8c:df: 37:ef:85:04:6f:9a:66:4e:65:e7:d6:25:63:b5:4b: b0:58:ac:78:a3:87:cb:d9:69:a9:a0:7d:2e:f6:af: 7f:af:4c:2b:76:3e:f0:5b:8c:ee:4c:f3:d1:73:20: 77:37:7e:2e:eb:ac:0b:75:32:40:c7:db:2b:4f:9f: b6:fd:a8:4f:7e:6a:18:58:9c:31:c7:38:d9:9a:d7: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:F8:84:26:BA:8C:64:A3:7D:3B:DE:8A:C4:35:4C:65:81:2D:7A X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:72:36:c9:62:0d:ef:94:b9:44:d6:7b:c5:56:cc:5c:cf:24: d4:7d:82:af:95:e7:1a:ca:14:2d:a2:2b:21:18:05:27:7b:fc: 2b:fa:84:3c:a4:fe:c6:7d:4c:a5:08:6a:7b:9f:83:c3:95:38: 9a:89:4d:1e:44:cd:30:ba:40:c2:6c:29:ed:40:d6:01:44:7b: ad:0d:53:99:16:89:96:ee:2c:4e:a3:b2:3d:f0:27:43:e1:67: 57:2c:97:ec:09:79:e6:30:4c:db:8d:03:c0:df:dc:39:47:2c: ce:c3:9c:0f:f8:22:6a:cc:9b:32:ae:70:41:98:ce:c4:86:3f: 28:fd:47:0a:1c:83:cc:2b:59:4e:48:e3:08:ad:e2:54:c0:23: f7:dc:78:a5:67:7c:fe:3c:e0:ee:5e:7a:3c:df:89:76:4c:95: af:bc:8b:3b:4f:b6:ea:16:6c:64:de:4b:60:70:45:11:f8:68: 52:69:be:3a:de:01:0d:53:6f:62:e6:b5:2e:d8:dc:ef:2f:59: 2a:6d:02:37:a5:1f:27:b8:42:c0:09:d3:44:74:b3:75:93:f7: 14:4a:1c:10:03:9d:64:8b:8e:70:b0:1f:a6:fb:34:ea:47:d9: 42:7b:0f:84:ba:d4:4b:1d:fb:8d:4a:60:70:ce:3d:fc:42:12: b1:16:0d:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwNTEyMTc1OTA2WhcNMjYwNTE5MTc1OTA2WjAYMRYwFAYD VQQDEw02YTAzNmE2YS04OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApik2GM8ji3/MSk2BRXfsCvnJe4zEVc6uIxVRg9QR9cDb5lyh3Rg2r2XM58S5 HOenDpcBAvvep3zm19UhZOlTm+4YNyypzS4pdqCtqeUkFE8xTuK0EvdYu1H/dfkp W7lAznK7GjrL5F2C8WG1XgCJKrfjexD8KwYK6Lt4/bk7dsSmqV+p1GURim9xKmyr 5c8qZMrgDKC+fUDfNKK1P+JHlXiu9JdBjvfaOph+C/+gz2OsjN8374UEb5pmTmXn 1iVjtUuwWKx4o4fL2WmpoH0u9q9/r0wrdj7wW4zuTPPRcyB3N34u66wLdTJAx9sr T5+2/ahPfmoYWJwxxzjZmtfotQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpT+IQm uoxko3073orENUxlgS16MB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3I2yWIN75S5RNZ7xVbMXM8k1H2Cr5XnGsoULaIrIRgFJ3v8K/qEPKT+xn1M pQhqe5+Dw5U4molNHkTNMLpAwmwp7UDWAUR7rQ1TmRaJlu4sTqOyPfAnQ+FnVyyX 7Al55jBM240DwN/cOUcszsOcD/giasybMq5wQZjOxIY/KP1HChyDzCtZTkjjCK3i VMAj99x4pWd8/jzg7l56PN+JdkyVr7yLO0+26hZsZN5LYHBFEfhoUmm+Ot4BDVNv Yua1Ltjc7y9ZKm0CN6UfJ7hCwAnTRHSzdZP3FEocEAOdZIuOcLAfpvs06kfZQnsP hLrUSx37jUpgcM49/EISsRYN7w== -----END CERTIFICATE-----Generated at Wed May 13 04:28:15 2026 by rpki-client