$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: hx2nNt6zNNppEd3EIR8CVOXlH/pU9IhM28T6wJ8X6ao= Subject key identifier: 2E:B7:BF:A9:6B:39:14:F9:29:AE:79:3F:B5:1E:59:50:1B:B2:06:5C Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 08:40:57 +0000 Manifest this update: Sat 13 Jun 2026 08:40:56 +0000 Manifest next update: Sat 20 Jun 2026 08:40:56 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: +oB4R6RA+TPvyAR697sP2iD67G2ejZm1/AbUAzMtTyc=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Jun 13 08:40:56 2026 GMT Not After : Jun 20 08:40:56 2026 GMT Subject: CN=6a2d1798-8e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:66:e4:cd:e1:c5:2d:e7:6c:9e:30:49:a0: a5:da:f6:e1:6a:f7:46:56:35:74:57:21:f0:6e:76: 5d:d0:eb:14:df:73:ab:82:4e:a8:45:8c:cc:71:37: 3d:66:be:e4:b1:0e:8d:a6:ad:50:e0:0a:cf:08:05: 66:53:29:6a:5f:06:05:39:c6:08:84:d9:db:7b:39: 6d:d5:72:4f:3e:64:d0:b6:95:5f:e1:c7:d6:22:24: e2:9e:30:54:f8:f5:fc:f6:a5:29:60:84:b2:84:2b: 44:89:9d:ae:38:0a:41:e5:51:86:e3:6c:37:73:96: cb:d9:a5:7c:22:c7:8c:1c:d7:ac:5b:bc:14:79:12: cd:76:ca:87:2e:b0:6d:53:4c:26:e9:11:e1:93:c5: 1a:85:5e:c3:7e:54:f0:6e:58:b9:25:32:11:97:df: 8b:a1:d6:d5:61:ed:c6:8f:e9:4d:dc:d2:47:51:ce: 9a:ac:4d:b9:20:b7:5a:f8:02:45:4f:ea:dd:36:b6: 37:34:db:7d:df:f5:67:56:e2:09:98:25:c2:2e:40: 96:7a:b5:96:85:60:82:b4:e7:09:75:c6:8e:e7:0d: 7b:dc:57:7e:90:88:04:3a:89:f7:59:5b:8e:5f:da: b0:31:54:2e:c9:a0:82:62:9b:b0:67:83:2f:7b:b6: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:BF:A9:6B:39:14:F9:29:AE:79:3F:B5:1E:59:50:1B:B2:06:5C X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:39:5a:da:d0:bd:94:3f:14:8b:9c:fa:c3:81:90:89:32:f5: 5d:77:22:fb:e0:cb:cb:95:d4:5a:af:e1:54:b3:6a:a2:12:8e: e5:c5:62:ea:49:1a:48:17:1e:8a:fe:0e:7f:d8:61:3e:c3:9f: 5a:02:5d:a7:c3:07:e1:00:41:22:af:88:c6:b0:f2:13:25:49: 37:16:ed:e7:67:ed:96:ec:29:7d:21:80:ff:7e:27:7c:f8:18: 33:8c:7b:2f:be:50:10:68:82:0a:d5:c3:e5:5f:65:e9:14:d0: 0a:3f:04:43:cc:ae:f3:9e:b5:5c:19:5e:44:aa:3b:59:b9:d2: db:d0:4a:c1:59:1b:47:cb:ff:12:f0:e6:d7:6e:f9:e4:79:15: d0:15:57:c7:d6:c2:4a:1f:0c:4c:e2:7e:d9:40:a0:a3:8c:95: 46:7c:a9:f5:31:5e:49:3a:36:5d:1a:d8:b5:a1:68:a5:93:cb: 00:6d:79:b2:a1:56:36:2a:f0:61:1a:bb:23:c0:de:8b:46:3e: ca:e2:75:97:de:12:41:e2:c5:e9:c3:29:ca:2e:e8:48:00:62: 61:ef:6f:6f:45:e9:ec:91:c3:e1:99:0a:79:e4:d2:fa:48:ff: 18:fd:83:7d:d5:10:de:0f:37:ca:e2:f0:6a:2c:3f:cd:46:d7: 23:08:17:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjA2MTMwODQwNTZaFw0yNjA2MjAwODQwNTZaMBgxFjAUBgNV BAMTDTZhMmQxNzk4LThlMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx7WbkzeHFLedsnjBJoKXa9uFq90ZWNXRXIfBudl3Q6xTfc6uCTqhFjMxxNz1m vuSxDo2mrVDgCs8IBWZTKWpfBgU5xgiE2dt7OW3Vck8+ZNC2lV/hx9YiJOKeMFT4 9fz2pSlghLKEK0SJna44CkHlUYbjbDdzlsvZpXwix4wc16xbvBR5Es12yocusG1T TCbpEeGTxRqFXsN+VPBuWLklMhGX34uh1tVh7caP6U3c0kdRzpqsTbkgt1r4AkVP 6t02tjc0233f9WdW4gmYJcIuQJZ6tZaFYIK05wl1xo7nDXvcV36QiAQ6ifdZW45f 2rAxVC7JoIJim7Bngy97tnn9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULre/qWs5 FPkprnk/tR5ZUBuyBlwwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDOVra0L2UPxSLnPrDgZCJMvVddyL74MvLldRar+FUs2qiEo7lxWLqSRpIFx6K /g5/2GE+w59aAl2nwwfhAEEir4jGsPITJUk3Fu3nZ+2W7Cl9IYD/fid8+BgzjHsv vlAQaIIK1cPlX2XpFNAKPwRDzK7znrVcGV5EqjtZudLb0ErBWRtHy/8S8ObXbvnk eRXQFVfH1sJKHwxM4n7ZQKCjjJVGfKn1MV5JOjZdGti1oWilk8sAbXmyoVY2KvBh GrsjwN6LRj7K4nWX3hJB4sXpwynKLuhIAGJh729vRenskcPhmQp55NL6SP8Y/YN9 1RDeDzfK4vBqLD/NRtcjCBch -----END CERTIFICATE-----Generated at Sat Jun 13 15:27:47 2026 by rpki-client