$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: Bof3ZAkQApLGQorqyRCkec0OljjAOVyhMS/vysOGBzo= Subject key identifier: 88:13:CB:4E:82:11:D1:8A:21:E7:6F:E6:27:35:6C:6A:7E:C4:9C:5C Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0D3A Signing time: Sun 26 Jul 2026 18:21:01 +0000 Manifest this update: Sun 26 Jul 2026 18:21:00 +0000 Manifest next update: Sun 02 Aug 2026 18:21:00 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: smbFVcnsr4YZ3fJoNW1egZiaTEY3VajPo705ocEUgbA=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: RiwHeRk8VWcBAazIYgTzPI1hQB18IPCOX+XKmTtPU4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Jul 26 18:21:00 2026 GMT Not After : Aug 2 18:21:00 2026 GMT Subject: CN=6a66500d-ae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:6d:a5:f6:6a:be:ee:ac:d5:8a:7e:d3:d8: 88:5d:67:41:52:ed:1e:7c:9b:d3:d4:1c:4c:e3:0c: 40:ea:6f:a7:56:63:6a:12:d7:c3:ce:68:ef:7c:49: 20:4a:49:ca:1a:1a:81:c2:c7:e6:86:f8:e1:3d:76: bc:1f:a4:42:13:a4:37:5d:93:26:2f:f2:02:d3:01: 94:0b:98:37:02:c1:c2:b2:99:7c:62:ad:0c:e0:aa: d2:0c:0d:e0:d4:57:4a:06:7f:b2:e2:99:79:6e:54: 65:5a:f3:47:03:57:56:cb:70:f0:72:15:c7:88:43: d6:0a:69:77:17:81:c7:47:2b:ff:92:88:2c:bc:d4: 4d:7e:53:e0:8e:0f:ff:9e:bd:6d:1e:9b:7f:71:96: fb:91:30:08:7d:82:4e:95:fc:e7:f4:ea:68:4f:58: 4b:60:14:b3:09:cf:6c:3a:6c:c3:7d:ef:90:28:ce: 8c:5a:6c:8f:99:98:23:ee:45:59:5e:44:24:57:6b: 84:b9:66:ae:43:5c:f0:96:b0:e8:e4:16:a0:af:04: 81:1b:08:0e:eb:e4:92:70:7f:88:fc:c7:32:2a:c5: b0:6c:f1:f7:a7:15:d3:48:52:fe:bc:2b:8d:f2:cb: dc:9f:b2:6f:b9:38:b0:3d:ef:56:9b:79:7a:f9:af: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:13:CB:4E:82:11:D1:8A:21:E7:6F:E6:27:35:6C:6A:7E:C4:9C:5C X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ba:0e:59:b7:e4:13:1c:dd:b4:3c:1d:34:7b:9f:92:62:d8: 14:56:4b:ab:12:ed:2c:04:30:92:2e:f4:32:97:fc:b0:55:57: bd:97:89:d9:8c:a4:f4:3d:b7:ed:36:92:cd:c7:5c:78:20:25: 44:16:99:28:69:1d:21:8b:1e:d8:c2:82:d8:6d:7b:fb:d3:6f: b5:00:6e:6f:a8:e6:e1:b1:b3:46:27:9b:5a:37:12:85:58:c8: 27:5c:3e:2f:91:28:c9:22:66:21:12:d8:62:d8:5a:fe:2f:dc: a2:bc:54:6b:da:cf:56:73:55:56:cc:6b:ef:f5:28:c3:7e:e7: 2b:f3:3d:f3:77:5d:35:ea:ff:24:ae:fd:14:1b:0e:01:64:1e: dd:78:c2:1a:5a:67:81:29:3e:65:08:ce:aa:e6:74:76:e1:d5: ea:ef:71:c7:10:14:c6:4f:a7:98:d9:20:27:3e:89:2d:0d:44: 5b:70:89:07:12:23:e4:99:d3:d7:59:d1:fc:77:26:f0:ea:e3: 17:98:c3:86:08:bf:f3:19:d3:a5:d1:6a:75:b5:8c:bc:07:87: 10:24:2d:f7:a4:ee:6b:44:9e:b5:73:aa:65:f7:79:a3:cb:89: f4:e2:11:f7:72:85:77:4f:9c:73:f9:90:41:ff:9e:be:89:8d: 94:20:f0:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjYwNzI2MTgyMTAwWhcNMjYwODAyMTgyMTAwWjAYMRYwFAYD VQQDEw02YTY2NTAwZC1hZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVFtpfZqvu6s1Yp+09iIXWdBUu0efJvT1BxM4wxA6m+nVmNqEtfDzmjvfEkg SknKGhqBwsfmhvjhPXa8H6RCE6Q3XZMmL/IC0wGUC5g3AsHCspl8Yq0M4KrSDA3g 1FdKBn+y4pl5blRlWvNHA1dWy3DwchXHiEPWCml3F4HHRyv/kogsvNRNflPgjg// nr1tHpt/cZb7kTAIfYJOlfzn9OpoT1hLYBSzCc9sOmzDfe+QKM6MWmyPmZgj7kVZ XkQkV2uEuWauQ1zwlrDo5BagrwSBGwgO6+SScH+I/McyKsWwbPH3pxXTSFL+vCuN 8svcn7JvuTiwPe9Wm3l6+a9anQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgTy06C EdGKIedv5ic1bGp+xJxcMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgboOWbfkExzdtDwdNHufkmLYFFZLqxLtLAQwki70Mpf8sFVXvZeJ2Yyk9D23 7TaSzcdceCAlRBaZKGkdIYse2MKC2G17+9NvtQBub6jm4bGzRiebWjcShVjIJ1w+ L5EoySJmIRLYYtha/i/corxUa9rPVnNVVsxr7/Uow37nK/M983ddNer/JK79FBsO AWQe3XjCGlpngSk+ZQjOquZ0duHV6u9xxxAUxk+nmNkgJz6JLQ1EW3CJBxIj5JnT 11nR/Hcm8OrjF5jDhgi/8xnTpdFqdbWMvAeHECQt96Tua0SetXOqZfd5o8uJ9OIR 93KFd0+cc/mQQf+evomNlCDwgw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:41 2026 by rpki-client