$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: KwL3qIqLAFB/WmIVAkiph8Zmrep2EipvtMXmqkoZww0= Subject key identifier: 96:A2:B6:C6:97:C4:70:9C:06:E7:91:3F:6A:0C:0A:A6:13:CE:2A:E4 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F34 Signing time: Fri 12 Jun 2026 17:32:10 +0000 Manifest this update: Fri 12 Jun 2026 17:32:10 +0000 Manifest next update: Fri 19 Jun 2026 17:32:10 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: BCNY4xUvSaka7uzln6hOsWP5Mkb+IOasQ5CSHkD/raU=) 2: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) 3: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3913 (0xf49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Jun 12 17:32:10 2026 GMT Not After : Jun 19 17:32:10 2026 GMT Subject: CN=6a2c429a-3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:83:ed:c1:b7:08:bd:3b:49:a6:17:91:15: d7:6e:2a:46:9c:74:f8:63:2f:d7:71:83:c8:ce:e4: ce:6c:5c:22:2e:47:f0:8d:d6:a6:82:f0:90:f5:51: 03:95:52:d8:c0:82:9c:a5:eb:00:2a:b0:f1:69:ed: 35:d7:69:95:22:29:84:e4:b5:c1:88:63:c8:b0:ab: 1f:90:61:aa:d5:72:09:3e:bb:34:be:ff:55:9e:e2: fb:12:3e:19:0d:b7:2e:be:74:de:7e:e5:84:cd:eb: b9:85:2a:f3:d2:db:3b:70:65:41:1d:39:19:b2:6b: 90:25:4c:2d:70:89:4f:d4:0f:a8:93:a5:e8:3f:67: a7:fe:69:cb:97:6e:e2:82:66:dc:3c:53:68:c5:bc: 38:27:47:ad:e0:13:11:cf:d9:da:2b:2a:4f:4a:e1: 60:94:74:7b:b4:f6:f7:75:0a:83:1b:62:ff:c2:ba: 6d:88:44:6d:4c:e2:4a:88:26:ef:a1:5f:94:4a:90: 28:57:bc:17:ae:3c:5a:c7:27:82:a7:d4:1b:36:8a: 72:aa:c8:f4:23:f4:ff:c8:7b:39:79:39:dd:42:e0: cb:4c:0b:65:a3:29:14:ee:bb:cb:a3:2e:19:c4:9a: 4f:62:29:6c:21:b5:78:ab:a3:17:7b:53:b7:02:98: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:B6:C6:97:C4:70:9C:06:E7:91:3F:6A:0C:0A:A6:13:CE:2A:E4 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6e:34:3c:d7:de:1b:ab:c6:72:9a:b7:50:0f:f4:34:4b:a2: 57:ea:ab:f7:8c:a5:a7:b7:66:4e:15:3b:6b:38:21:e1:e4:03: e5:5e:e3:4d:09:c6:13:b5:ec:b2:da:f9:7b:b9:96:1f:8a:d6: 41:57:71:74:df:b4:29:02:bf:b2:fd:4c:a4:5d:47:70:46:db: 42:4e:51:14:8c:a0:3f:c0:c6:c3:80:80:0c:cc:38:65:68:78: 1e:3c:bf:e5:c8:f4:92:33:59:37:00:b1:fc:83:d9:e4:46:48: d6:b5:48:11:cc:94:1d:71:f7:5c:a2:63:c3:f4:cf:13:8c:62: 7c:45:dd:ad:99:3e:ca:18:80:ec:25:da:2d:2f:de:1a:5c:23: b1:e4:bc:cc:8c:1e:23:9c:ef:70:37:e0:7c:3b:4c:84:f8:01: 54:4c:d5:ed:f6:8b:7f:b4:6d:4f:ee:37:63:0b:2d:d6:b9:d2: 08:49:a9:93:dc:7b:1e:92:b1:43:cc:94:71:8a:d5:d4:a1:6d: b5:6f:f2:46:4b:1b:51:77:84:d8:e8:56:7f:ba:c2:b2:f1:0b: a7:b6:30:f7:fc:65:9b:bf:4f:e5:b4:10:73:41:99:d3:cc:2e: f1:99:d3:c1:84:c3:d4:7c:ea:0c:62:e1:d9:9d:45:56:36:fb: 16:b0:bb:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwNjEyMTczMjEwWhcNMjYwNjE5MTczMjEwWjAYMRYwFAYD VQQDEw02YTJjNDI5YS0zNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIWD7cG3CL07SaYXkRXXbipGnHT4Yy/XcYPIzuTObFwiLkfwjdamgvCQ9VED lVLYwIKcpesAKrDxae0112mVIimE5LXBiGPIsKsfkGGq1XIJPrs0vv9VnuL7Ej4Z DbcuvnTefuWEzeu5hSrz0ts7cGVBHTkZsmuQJUwtcIlP1A+ok6XoP2en/mnLl27i gmbcPFNoxbw4J0et4BMRz9naKypPSuFglHR7tPb3dQqDG2L/wrptiERtTOJKiCbv oV+USpAoV7wXrjxaxyeCp9QbNopyqsj0I/T/yHs5eTndQuDLTAtloykU7rvLoy4Z xJpPYilsIbV4q6MXe1O3AphbowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaitsaX xHCcBueRP2oMCqYTzirkMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVm40PNfeG6vGcpq3UA/0NEuiV+qr94ylp7dmThU7azgh4eQD5V7jTQnGE7Xs str5e7mWH4rWQVdxdN+0KQK/sv1MpF1HcEbbQk5RFIygP8DGw4CADMw4ZWh4Hjy/ 5cj0kjNZNwCx/IPZ5EZI1rVIEcyUHXH3XKJjw/TPE4xifEXdrZk+yhiA7CXaLS/e GlwjseS8zIweI5zvcDfgfDtMhPgBVEzV7faLf7RtT+43Ywst1rnSCEmpk9x7HpKx Q8yUcYrV1KFttW/yRksbUXeE2OhWf7rCsvELp7Yw9/xlm79P5bQQc0GZ08wu8ZnT wYTD1HzqDGLh2Z1FVjb7FrC7WA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:32:34 2026 by rpki-client