$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft File: JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json) Hash identifier: pNURBxqouUQTBNVS390NaZ3mM/v7KHGdrQkx1hpIkZk= Subject key identifier: DB:70:6E:98:8A:44:1D:C6:20:A7:EE:92:CA:BA:EF:6D:C4:B1:AE:95 Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft Manifest number: 0D27 Signing time: Wed 22 Jul 2026 18:29:33 +0000 Manifest this update: Wed 22 Jul 2026 18:29:32 +0000 Manifest next update: Wed 29 Jul 2026 18:29:32 +0000 Files and hashes: 1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: flUFlSoE0YdJwl1K2POwp/U08KQubBDmp7RtCzJ4/EQ=) 2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: VuO6oFmdrg28zC8aljPGAA2mZqdTmBMcrxACwaZ0phY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Validity Not Before: Jul 22 18:29:32 2026 GMT Not After : Jul 29 18:29:32 2026 GMT Subject: CN=6a610c0d-0703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:aa:92:16:df:eb:35:af:94:be:b2:b2:cd: 09:37:34:97:07:a9:e7:12:33:ed:93:5c:4e:5a:ca: e3:d3:46:68:61:3d:4f:0d:98:aa:73:1b:9f:e9:25: 27:50:d1:ca:0f:7d:d8:f1:f6:51:94:51:1e:74:a8: c2:9a:43:28:6e:00:fd:a0:b4:7d:92:e0:d4:6e:49: 22:cf:ef:b3:50:f1:63:b2:64:b0:6e:f4:fa:d7:29: 88:41:f8:32:ab:69:73:fa:d3:59:b9:33:07:55:db: 52:29:3e:7f:56:56:f3:72:d8:0e:b0:a6:ab:82:19: a4:fe:5a:38:e9:48:14:9f:3c:db:d9:91:be:46:99: 43:fe:82:b0:0c:be:a9:b2:97:3c:83:c6:90:4e:1c: 84:7e:96:45:42:01:e9:c6:ee:4e:6f:8c:f2:75:29: 00:98:e5:c8:f3:ea:70:9b:35:44:6b:fb:e6:de:21: 93:1e:26:6d:b9:4a:88:90:42:92:f9:9d:62:dd:0c: 4c:e0:96:11:92:4c:67:3a:14:88:21:31:50:ca:57: 29:d3:7e:ce:3d:c6:ad:08:44:0a:e4:e6:ea:08:c1: b8:6d:2d:12:63:65:8c:77:8e:31:b4:06:8e:92:d1: 36:2b:15:28:15:cc:39:07:52:22:fb:8b:e0:4a:72: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:6E:98:8A:44:1D:C6:20:A7:EE:92:CA:BA:EF:6D:C4:B1:AE:95 X509v3 Authority Key Identifier: keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ab:52:f8:0a:6b:49:7c:e5:f4:6c:38:96:61:19:10:a4:8e: 97:91:ab:8b:47:7f:b0:51:af:ff:34:68:04:7c:ed:0b:64:53: 77:fe:8f:30:a3:24:78:42:e4:29:a7:37:fa:0f:80:25:50:69: d0:3b:b4:b5:d4:10:8a:cd:b6:8f:31:8d:70:5e:ac:98:6f:82: 6d:56:ad:86:70:da:23:ec:80:e5:91:89:78:64:ee:d6:bf:e9: 2e:5d:f0:94:bc:f4:ed:a7:55:5e:6e:45:f1:9b:22:03:4c:97: b6:f1:72:23:e1:18:74:68:0f:c0:8b:af:9d:85:65:7a:f2:6f: 74:ef:09:19:ed:72:60:5a:1e:f3:78:ea:ee:92:9f:af:6d:28: 84:d4:72:d5:67:08:2c:ac:89:7a:89:1d:64:a8:bf:9d:25:24: ee:da:bf:06:d7:00:cf:06:b7:38:bf:83:e1:21:ad:cc:e9:4e: 4b:a0:d8:ad:cb:91:11:8b:83:0c:c5:8c:87:f3:e2:4a:05:53: b6:52:35:35:f4:07:9e:c7:e6:87:dc:d2:9c:68:26:b1:71:77: 37:bd:88:dc:98:db:3c:0d:e0:6c:a0:02:32:54:7d:41:cc:1e: 92:d9:e4:3a:04:f6:d3:d9:87:ff:8d:53:a5:d0:93:30:92:9b: 50:7d:d9:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIxNTIxMTAvBgNVBAUTKDI0M0U0ODI5QUJGMkY5MDlDMTJEREEwNDRGRTVEMzZC ODIxMDUzOTIwHhcNMjYwNzIyMTgyOTMyWhcNMjYwNzI5MTgyOTMyWjAYMRYwFAYD VQQDEw02YTYxMGMwZC0wNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVqqkhbf6zWvlL6yss0JNzSXB6nnEjPtk1xOWsrj00ZoYT1PDZiqcxuf6SUn UNHKD33Y8fZRlFEedKjCmkMobgD9oLR9kuDUbkkiz++zUPFjsmSwbvT61ymIQfgy q2lz+tNZuTMHVdtSKT5/VlbzctgOsKarghmk/lo46UgUnzzb2ZG+RplD/oKwDL6p spc8g8aQThyEfpZFQgHpxu5Ob4zydSkAmOXI8+pwmzVEa/vm3iGTHiZtuUqIkEKS +Z1i3QxM4JYRkkxnOhSIITFQylcp037OPcatCEQK5ObqCMG4bS0SY2WMd44xtAaO ktE2KxUoFcw5B1Ii+4vgSnI2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtwbpiK RB3GIKfuksq6723Esa6VMB8GA1UdIwQYMBaAFCQ+SCmr8vkJwS3aBE/l02uCEFOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjE1Mi9CN0M2QzYwMDA2 RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1RbkJMZG9FVC1YVGE0SVFV NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pENUlLYXZ5LVFuQkxkb0VULVhUYTRJUVU1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjE1Mi9CN0M2QzYwMDA2RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1R bkJMZG9FVC1YVGE0SVFVNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKtS+AprSXzl9Gw4lmEZEKSOl5Gri0d/sFGv/zRoBHztC2RTd/6PMKMkeELk Kac3+g+AJVBp0Du0tdQQis22jzGNcF6smG+CbVathnDaI+yA5ZGJeGTu1r/pLl3w lLz07adVXm5F8ZsiA0yXtvFyI+EYdGgPwIuvnYVlevJvdO8JGe1yYFoe83jq7pKf r20ohNRy1WcILKyJeokdZKi/nSUk7tq/BtcAzwa3OL+D4SGtzOlOS6DYrcuREYuD DMWMh/PiSgVTtlI1NfQHnsfmh9zSnGgmsXF3N72I3JjbPA3gbKACMlR9Qcwektnk OgT209mH/41TpdCTMJKbUH3ZXg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:11 2026 by rpki-client