$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft File: mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json) Hash identifier: mGPJJauAUKxCWXo+cCUSoWUCrJkvIk9YvgbYNOShNLc= Subject key identifier: 44:10:24:A3:7B:B6:0E:AB:DE:DE:3C:40:A8:C0:5D:1A:97:CC:C4:4C Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft Manifest number: 35 Signing time: Mon 11 May 2026 08:54:44 +0000 Manifest this update: Mon 11 May 2026 08:54:43 +0000 Manifest next update: Mon 18 May 2026 08:54:43 +0000 Files and hashes: 1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: 8ERstacX6qCBR00goapIm45NXNvvtL3eN1jTt9bDsyc=) 2: 198EDB1034E511F1828F838E91833773.roa (hash: vfUkhhZvC+GnQyu1JxTO9mkMqnpFyY7JrCSKN7gLZzM=) 3: 4CCA7C1E34E511F1AF14078F91833773.roa (hash: IjUm+BH6SUivx0UO20wJhS2k8Pz3XHEgptYkjotxwWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Validity Not Before: May 11 08:54:43 2026 GMT Not After : May 18 08:54:43 2026 GMT Subject: CN=6a019954-bc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e7:fc:c4:8e:98:aa:1a:70:c0:69:11:2f:6c: 0d:c5:2f:18:b9:e0:b7:1c:e3:3b:7e:c8:1a:2a:25: 76:bd:7a:6b:06:37:b9:0b:9c:c0:50:8e:56:bd:20: 07:c6:33:3e:6f:82:69:86:5b:6a:e9:0b:ee:50:ad: 1f:fa:c3:8e:1b:84:a6:14:8c:9d:49:04:54:62:74: 81:f5:a7:d6:20:5c:1e:cb:e2:96:f4:3b:bd:ac:37: f7:92:a1:e6:28:3f:a0:06:63:9e:20:c2:86:ef:d6: c4:12:56:f6:65:a5:cd:23:87:f8:bb:58:19:65:dd: c3:39:f9:2b:a8:fb:77:b3:2b:03:05:6e:28:ce:09: 1d:c8:7b:ff:29:b0:bc:38:00:1a:07:76:9a:37:0e: fc:5d:be:28:1c:b1:4c:3f:0b:e5:1e:3e:0b:9c:2b: 56:c6:5f:48:db:95:96:61:19:8d:bf:45:8d:0d:e6: a2:e3:61:16:27:83:55:65:b4:ed:98:d5:57:ef:ab: 7c:d5:54:4c:9c:88:10:19:c2:46:5d:6a:cf:91:6f: ec:b7:48:7e:8f:d9:0d:4c:06:bd:6c:7c:bf:6b:3e: 78:98:e5:ba:b1:78:d0:43:de:e5:60:78:f1:c8:d1: 57:7e:14:9c:1d:d6:25:79:07:e4:f0:72:99:32:e3: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:24:A3:7B:B6:0E:AB:DE:DE:3C:40:A8:C0:5D:1A:97:CC:C4:4C X509v3 Authority Key Identifier: keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:7c:67:5c:05:7c:7a:c6:b7:d5:41:b7:92:c1:47:fc:d1: 08:ca:5e:16:1d:c6:39:e6:48:d0:1e:22:c2:60:71:b1:7b:1f: 88:87:be:d9:e9:f4:68:24:36:40:e2:36:f5:31:4a:fb:64:ad: 03:84:79:27:53:f8:ae:aa:a4:e0:3e:ba:b0:d9:e4:7e:de:87: 32:ab:f1:74:7a:98:7e:99:fe:cb:b4:6b:41:5f:6c:01:b1:ad: 3b:89:70:1f:99:ac:69:84:6f:fa:9d:c0:71:23:bc:9a:94:58: d9:29:31:e4:5b:73:60:48:c3:4b:5c:d3:37:4c:45:38:39:42: 1f:a8:5f:10:61:39:82:ef:59:21:ae:da:a4:af:cc:72:2a:7a: 42:23:40:20:53:b8:7f:fb:3c:33:d6:f1:25:1a:3a:f7:11:6f: 41:7e:f2:ef:92:4b:61:9f:15:bd:6e:67:a7:e8:54:bf:f0:0f: 22:f9:7a:d6:9c:31:46:83:f7:6b:0d:5e:3e:fc:f9:72:5b:1e: af:79:e5:17:5e:a7:5f:04:63:4d:f8:4e:e0:1d:15:a0:10:1a: 66:d3:5c:44:97:ba:32:0a:2c:d3:b0:1c:18:e4:ef:4a:fe:2e: 57:71:4f:9c:b6:55:9c:1a:8e:1d:63:5c:e7:2d:e5:b0:da:c9: db:9e:d3:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM5RjExMC8GA1UEBRMoOUE5MjVFODY4QzI2QUUzQ0U3RTA4Q0VENkZDMzExMkY2 NDBGMkNDRjAeFw0yNjA1MTEwODU0NDNaFw0yNjA1MTgwODU0NDNaMBgxFjAUBgNV BAMTDTZhMDE5OTU0LWJjMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq5/zEjpiqGnDAaREvbA3FLxi54Lcc4zt+yBoqJXa9emsGN7kLnMBQjla9IAfG Mz5vgmmGW2rpC+5QrR/6w44bhKYUjJ1JBFRidIH1p9YgXB7L4pb0O72sN/eSoeYo P6AGY54gwobv1sQSVvZlpc0jh/i7WBll3cM5+Suo+3ezKwMFbijOCR3Ie/8psLw4 ABoHdpo3DvxdvigcsUw/C+UePgucK1bGX0jblZZhGY2/RY0N5qLjYRYng1VltO2Y 1Vfvq3zVVEyciBAZwkZdas+Rb+y3SH6P2Q1MBr1sfL9rPniY5bqxeNBD3uVgePHI 0Vd+FJwd1iV5B+Twcpky402nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURBAko3u2 Dqve3jxAqMBdGpfMxEwwHwYDVR0jBBgwFoAUmpJehowmrjzn4Iztb8MRL2QPLM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzlGLzdGRDk2QkY2MEQ4 MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6bjRJenRiOE1STDJRUExN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbXBKZWhvd21yanpuNEl6dGI4TVJMMlFQTE04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC QzlGLzdGRDk2QkY2MEQ4MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6 bjRJenRiOE1STDJRUExNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3zHxnXAV8esa31UG3ksFH/NEIyl4WHcY55kjQHiLCYHGxex+Ih77Z6fRoJDZA 4jb1MUr7ZK0DhHknU/iuqqTgPrqw2eR+3ocyq/F0eph+mf7LtGtBX2wBsa07iXAf maxphG/6ncBxI7yalFjZKTHkW3NgSMNLXNM3TEU4OUIfqF8QYTmC71khrtqkr8xy KnpCI0AgU7h/+zwz1vElGjr3EW9BfvLvkkthnxW9bmen6FS/8A8i+XrWnDFGg/dr DV4+/PlyWx6veeUXXqdfBGNN+E7gHRWgEBpm01xEl7oyCizTsBwY5O9K/i5XcU+c tlWcGo4dY1znLeWw2snbntNd -----END CERTIFICATE-----Generated at Tue May 12 23:23:47 2026 by rpki-client