$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: axOgXZsne919m3i7fN4LCCHOLLKf49ZUvsOsom+USgk= Subject key identifier: D0:07:7D:B5:AA:60:74:2C:C8:DD:00:FD:AC:B4:AE:3A:CB:09:DF:74 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A14 Signing time: Fri 12 Jun 2026 19:49:12 +0000 Manifest this update: Fri 12 Jun 2026 19:49:11 +0000 Manifest next update: Fri 19 Jun 2026 19:49:11 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: v1jfHimGijz8Nr3i2itojH93I02C175t+BzeWGfkkfY=) 2: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: DAvvM9WZjvxbegKaF7G0bCegMv1ld81gFHwRyYHJ0vY=) 3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: QqaVtXOsQ3g2/ddOuRomNusHtKcEc9UpR1465Wcagcc=) 4: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 4+wSosNz8NVRn6V4mMR47c6x1Lj87Hhq2R9wSUX/xWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jun 12 19:49:11 2026 GMT Not After : Jun 19 19:49:11 2026 GMT Subject: CN=6a2c62b8-dbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:8e:3d:9e:73:8f:0c:8c:04:1e:55:8d:22: 04:bf:ce:5a:9c:dc:58:58:22:d7:48:29:37:1d:ce: 41:e3:cc:c9:4c:77:c1:04:0c:a8:47:55:91:f6:de: 4b:5e:e0:26:42:fd:fa:0c:91:fe:3c:5e:a8:8d:7d: 48:46:6c:77:a7:19:eb:cc:3a:ab:20:39:d2:e2:a0: 8d:f3:4e:1c:bf:da:3e:14:f2:5e:27:40:0f:d3:ff: 55:fb:a5:93:50:23:c6:64:76:f1:0a:c6:f8:26:be: 10:bc:a0:ad:18:ef:71:cc:a1:67:5b:f5:82:3c:51: 75:27:c1:07:c0:a5:73:61:e2:1c:bd:56:dd:b2:8b: 93:d7:b1:32:21:74:b5:cb:74:23:86:52:af:1e:06: 84:f7:9f:0b:7c:a8:98:60:dc:5c:0e:45:80:01:41: 0e:0f:02:90:56:88:4f:e8:e3:4c:48:f4:f3:78:49: ca:c1:4d:4b:fc:86:bf:41:01:b0:27:1c:97:8f:95: a0:23:02:29:78:47:00:c5:c1:bd:9b:ed:00:9c:e6: 95:84:33:10:31:f3:1f:6e:54:46:d3:34:42:0c:67: bb:e6:b9:8b:6a:60:41:dc:0d:d1:7a:cb:97:0c:1e: 6a:0d:6d:22:9f:47:c8:b9:00:01:68:4a:cb:62:98: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:7D:B5:AA:60:74:2C:C8:DD:00:FD:AC:B4:AE:3A:CB:09:DF:74 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:84:1e:14:97:0c:11:7a:b7:3c:0c:6d:a2:ab:8f:dd:fd:59: 93:b3:e2:cd:5d:52:54:65:7c:22:01:17:f1:73:98:f7:d5:d9: 6e:d1:06:23:46:30:ee:90:92:b9:67:6e:a2:e8:91:c2:cb:5d: c5:2a:f9:fc:55:82:81:a3:53:b9:df:6d:7c:db:c3:83:3d:bd: 65:a4:54:52:b3:c5:f1:44:19:ac:0d:c1:7f:85:16:7d:aa:e6: ae:b9:7f:40:fd:45:e3:6c:37:7c:57:52:90:b5:a7:82:12:a9: 55:6c:1a:93:d6:d6:32:d5:91:a2:d0:35:85:52:7e:11:bf:f7: 9e:a3:81:7b:26:8c:df:3f:35:ac:21:53:34:f4:5f:e5:02:1e: e1:7f:b0:0a:14:e4:92:d5:60:e9:5e:6b:6d:36:7a:cf:09:ca: 2e:62:f8:03:f7:80:05:d7:d0:c6:ef:ea:ea:cf:26:ea:75:70: 6a:b7:c7:83:c8:ed:41:9f:19:ff:d6:b3:01:5a:2c:e9:76:4e: 44:3a:c7:14:35:ec:3d:f7:ee:5d:3f:34:cb:aa:ef:ae:29:6c: 4e:51:66:08:72:6c:87:1c:a3:ec:3c:ce:2d:fe:b4:32:95:10: 7d:39:de:7d:2c:3a:5d:fa:28:80:51:f8:b9:ac:b7:1f:4b:e8: 55:c2:cf:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwNjEyMTk0OTExWhcNMjYwNjE5MTk0OTExWjAYMRYwFAYD VQQDEw02YTJjNjJiOC1kYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7SOPZ5zjwyMBB5VjSIEv85anNxYWCLXSCk3Hc5B48zJTHfBBAyoR1WR9t5L XuAmQv36DJH+PF6ojX1IRmx3pxnrzDqrIDnS4qCN804cv9o+FPJeJ0AP0/9V+6WT UCPGZHbxCsb4Jr4QvKCtGO9xzKFnW/WCPFF1J8EHwKVzYeIcvVbdsouT17EyIXS1 y3QjhlKvHgaE958LfKiYYNxcDkWAAUEODwKQVohP6ONMSPTzeEnKwU1L/Ia/QQGw JxyXj5WgIwIpeEcAxcG9m+0AnOaVhDMQMfMfblRG0zRCDGe75rmLamBB3A3ResuX DB5qDW0in0fIuQABaErLYpgf5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAHfbWq YHQsyN0A/ay0rjrLCd90MB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXYQeFJcMEXq3PAxtoquP3f1Zk7PizV1SVGV8IgEX8XOY99XZbtEGI0Yw7pCS uWduouiRwstdxSr5/FWCgaNTud9tfNvDgz29ZaRUUrPF8UQZrA3Bf4UWfarmrrl/ QP1F42w3fFdSkLWnghKpVWwak9bWMtWRotA1hVJ+Eb/3nqOBeyaM3z81rCFTNPRf 5QIe4X+wChTkktVg6V5rbTZ6zwnKLmL4A/eABdfQxu/q6s8m6nVwarfHg8jtQZ8Z /9azAVos6XZORDrHFDXsPffuXT80y6rvrilsTlFmCHJshxyj7DzOLf60MpUQfTne fSw6XfoogFH4uay3H0voVcLPNw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:53:53 2026 by rpki-client