$ rpki-client -vvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json) Hash identifier: lhmtCO9B/l9n+jCRSzd+1NWO6Lcnp2yc3q3tEySqD6c= Subject key identifier: 16:ED:EA:97:19:E0:C3:D6:13:0A:B6:40:11:A9:D9:34:30:F8:E4:C7 Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft Manifest number: 88 Signing time: Mon 11 May 2026 07:43:40 +0000 Manifest this update: Mon 11 May 2026 07:43:39 +0000 Manifest next update: Mon 18 May 2026 07:43:39 +0000 Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: wq1YtL5tyQtTvD5hrDt4PzSPjIRW0JcDPbO3SxzmMds=) 2: 707D9934829811F094DDE01BC4F9AE02.roa (hash: AllGpF4KU2W3TzGcGQm1tETu18F81+5vNhnXER9+Qao=) 3: 7007614C829811F094DDE01BC4F9AE02.roa (hash: 3Tk53WJDcoEbmK8DIvMlxLaZgRNmWC+MaBXdvt1+Y1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Validity Not Before: May 11 07:43:39 2026 GMT Not After : May 18 07:43:39 2026 GMT Subject: CN=6a0188ac-c4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:73:49:75:9f:f2:79:8c:9a:51:2b:cb:91: 8f:57:09:d4:69:45:7c:c3:c7:4a:9d:bb:b5:65:b4: e9:03:28:7a:8b:76:19:38:eb:c9:bf:c4:88:b2:6e: 2b:05:28:27:e5:c7:5e:e6:b3:00:d6:61:19:ba:a1: 58:3b:57:07:f3:b5:ee:39:f0:fc:fd:4f:6a:12:7a: 7b:e9:3d:5a:6f:bb:c2:34:d1:10:02:15:6e:39:1c: cb:22:5a:2c:2b:d7:e3:51:85:fd:4f:fa:7e:62:39: 7f:89:f7:5e:07:84:53:d4:ed:20:fb:87:79:2e:a5: cb:06:2c:1f:fc:e9:1b:b6:f7:8a:61:82:77:e7:92: 37:e7:5f:a3:ed:bf:48:6e:c0:86:62:4e:47:1c:b7: dd:6f:24:82:62:32:79:f2:1b:c0:4d:4d:21:d2:2a: c4:76:19:71:fd:c0:4d:5e:16:f5:a3:36:d0:b8:c2: 44:09:45:90:5c:ff:3b:be:fd:ae:0f:03:5e:fb:40: dc:9b:0d:68:a2:e3:69:bf:75:46:e3:35:c7:b7:90: fe:48:9e:0c:98:ef:7a:9e:1a:4f:fb:b1:27:81:8c: cd:50:79:3a:25:d5:71:65:18:e6:be:49:e2:eb:da: 13:c5:36:bc:90:b9:a5:38:9a:bd:4a:53:5a:42:21: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:ED:EA:97:19:E0:C3:D6:13:0A:B6:40:11:A9:D9:34:30:F8:E4:C7 X509v3 Authority Key Identifier: keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:76:0f:0d:ad:86:30:a5:dc:38:ca:f0:a0:d8:bb:cb:d3:58: 7a:d0:a4:22:7d:41:73:3b:a8:ec:91:3f:fd:67:f0:59:44:76: 80:85:15:70:35:11:65:1b:36:ea:48:e2:e4:a0:a6:da:a7:e0: 6f:5d:f9:83:f1:62:8a:57:bc:13:43:62:3b:91:52:c6:b5:5f: 0f:bc:c8:fe:84:b8:20:a5:03:69:09:38:2a:e3:40:2a:ec:06: 60:a3:e4:08:a3:45:95:d8:64:28:48:c2:a9:06:72:5d:a0:07: 14:ec:c5:6d:f1:1b:fc:28:4e:52:49:e1:5a:3d:47:1c:3b:8e: 17:ea:b2:bc:c6:c6:6a:b6:0c:d4:17:bb:eb:25:1b:df:1b:0a: be:c4:6a:a1:08:6f:ee:23:9b:f6:22:c8:8d:78:ff:a8:4d:9d: b9:1e:3f:e1:59:2c:a0:e9:06:d5:94:c0:be:53:4c:c5:c6:2a: 27:50:55:00:99:43:28:83:57:c5:1c:72:b7:a5:10:1b:00:3d: 10:4d:29:cd:a4:79:9c:65:bf:ca:68:35:f2:45:ba:c9:9b:64: ef:e3:6c:f9:0e:24:e4:58:e1:54:91:03:b3:f5:78:1d:f3:7a: b7:15:1b:e9:34:33:da:46:68:d7:5d:dc:92:5a:84:0b:8c:93: a7:67:0d:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1N0YxMTAvBgNVBAUTKDI3NTdEMTFGN0I3ODY3NDg3QjhFODcwMUQ3MkFDNjFB RDMyNzlFMEUwHhcNMjYwNTExMDc0MzM5WhcNMjYwNTE4MDc0MzM5WjAYMRYwFAYD VQQDEw02YTAxODhhYy1jNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1JzSXWf8nmMmlEry5GPVwnUaUV8w8dKnbu1ZbTpAyh6i3YZOOvJv8SIsm4r BSgn5cde5rMA1mEZuqFYO1cH87XuOfD8/U9qEnp76T1ab7vCNNEQAhVuORzLIlos K9fjUYX9T/p+Yjl/ifdeB4RT1O0g+4d5LqXLBiwf/OkbtveKYYJ355I351+j7b9I bsCGYk5HHLfdbySCYjJ58hvATU0h0irEdhlx/cBNXhb1ozbQuMJECUWQXP87vv2u DwNe+0Dcmw1oouNpv3VG4zXHt5D+SJ4MmO96nhpP+7EngYzNUHk6JdVxZRjmvkni 69oTxTa8kLmlOJq9SlNaQiE3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbt6pcZ 4MPWEwq2QBGp2TQw+OTHMB8GA1UdIwQYMBaAFCdX0R97eGdIe46HAdcqxhrTJ54O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzU3Ri9BNENDREM2MjdG NkYxMUYwQjYzRTRFM0JDNEY5QUUwMi9KMWZSSDN0NFowaDdqb2NCMXlyR0d0TW5u ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxZlJIM3Q0WjBoN2pvY0IxeXJHR3RNbm5nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzU3Ri9BNENDREM2MjdGNkYxMUYwQjYzRTRFM0JDNEY5QUUwMi9KMWZSSDN0NFow aDdqb2NCMXlyR0d0TW5uZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACXYPDa2GMKXcOMrwoNi7y9NYetCkIn1Bczuo7JE//WfwWUR2gIUVcDURZRs2 6kji5KCm2qfgb135g/Fiile8E0NiO5FSxrVfD7zI/oS4IKUDaQk4KuNAKuwGYKPk CKNFldhkKEjCqQZyXaAHFOzFbfEb/ChOUknhWj1HHDuOF+qyvMbGarYM1Be76yUb 3xsKvsRqoQhv7iOb9iLIjXj/qE2duR4/4VksoOkG1ZTAvlNMxcYqJ1BVAJlDKINX xRxyt6UQGwA9EE0pzaR5nGW/ymg18kW6yZtk7+Ns+Q4k5FjhVJEDs/V4HfN6txUb 6TQz2kZo113cklqEC4yTp2cN9A== -----END CERTIFICATE-----Generated at Wed May 13 06:17:09 2026 by rpki-client