$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: rQrfUt1aIhF5Gxa0ey8b8KpAE2NFHbeR8VwmeSA19Vk= Subject key identifier: 37:2C:B7:3B:8E:CD:F2:E5:D8:F4:75:22:E7:E9:C5:A8:AA:FA:BE:55 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 19 Signing time: Sat 13 Jun 2026 09:03:28 +0000 Manifest this update: Sat 13 Jun 2026 09:03:28 +0000 Manifest next update: Sat 20 Jun 2026 09:03:28 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: 1g3/ot4dQ8y1HP9lD0eGOKJ+89blziAv9ufYxWqjs/U=) 2: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) 3: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Jun 13 09:03:28 2026 GMT Not After : Jun 20 09:03:28 2026 GMT Subject: CN=6a2d1ce0-91c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:0d:28:95:93:1d:e2:31:7f:97:f0:a3:81: a3:af:8c:9a:f9:04:77:f6:d2:bc:91:49:25:3e:b3: d0:be:26:b1:44:53:20:6b:9b:4a:23:53:48:0a:72: 62:83:65:cd:88:ef:7a:02:53:bc:ea:95:51:0d:8a: c8:62:02:91:40:28:2c:70:fb:e6:42:81:0f:c5:c8: 00:34:b3:8d:f9:6f:44:c4:e2:93:54:fd:e9:48:25: b5:c0:80:a1:38:77:1a:65:bd:c2:72:eb:59:d9:ce: f9:77:ed:6b:56:3d:a6:1f:d8:8f:08:23:7b:5a:39: 42:6a:da:a6:fb:08:56:a5:e4:aa:1a:9b:96:5d:26: 4e:9e:59:3f:20:08:1b:2f:ef:9f:18:9c:d8:0d:94: d1:3b:22:cf:ed:fd:64:49:94:9f:26:0f:0f:40:b9: 6e:7e:48:ef:7f:0d:4c:76:64:2b:eb:8c:00:8b:b1: 61:2e:d1:01:f1:35:55:4c:d9:7a:1c:48:08:7d:90: d6:f8:01:e3:8e:fb:0f:10:f4:96:4e:45:ef:06:18: 47:89:5e:d3:11:27:b2:ca:79:f3:85:fc:23:b8:04: 14:05:94:5c:b7:32:21:17:d9:59:68:87:11:16:ac: 64:e8:63:47:9c:af:73:a4:a3:2d:a8:9d:12:06:c0: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:B7:3B:8E:CD:F2:E5:D8:F4:75:22:E7:E9:C5:A8:AA:FA:BE:55 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:a5:3e:b2:4c:6d:16:dc:24:96:66:f2:1a:e8:75:44:c7: 44:98:9d:d6:6d:be:1a:39:69:12:ad:23:ec:93:3a:93:4b:13: 8f:bb:28:f9:24:b1:87:f9:0d:c9:7d:94:66:13:30:03:29:bb: 7f:c2:11:ac:f0:08:46:cf:5f:3c:c5:1e:2a:6e:a0:1f:61:33: ed:94:73:32:21:95:c9:33:cb:72:db:6a:0b:e5:36:db:3c:98: 2b:b9:ba:0c:c4:51:36:4a:57:cd:02:cc:90:bb:4b:e9:0c:d1: 5a:07:ea:24:de:18:22:9c:eb:e8:69:0f:77:7e:82:7e:9e:3c: 21:14:01:5e:5e:a2:bc:0d:e3:e2:71:c8:e1:ce:be:84:95:58: db:44:91:c0:ec:e5:a5:6c:a3:0c:e4:10:c3:b0:b5:ba:9f:ab: 4a:43:e0:7f:74:f1:bb:35:2e:1c:96:8d:a2:8f:af:b3:f2:ad: 11:a6:61:84:f1:02:24:e9:3b:91:d4:ef:2c:dc:60:94:72:78: fb:f9:4f:b5:b0:44:ce:be:5f:28:61:0e:d2:91:3f:b1:04:f1: 8d:0f:8d:89:d0:73:b1:cd:83:fd:2a:8b:a5:06:9a:f2:32:55: 7d:ef:36:0c:29:81:15:ba:07:5d:65:4a:41:51:f5:b6:2c:af: 6d:1e:7a:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA2MTMwOTAzMjhaFw0yNjA2MjAwOTAzMjhaMBgxFjAUBgNV BAMTDTZhMmQxY2UwLTkxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzHQ0olZMd4jF/l/CjgaOvjJr5BHf20ryRSSU+s9C+JrFEUyBrm0ojU0gKcmKD Zc2I73oCU7zqlVENishiApFAKCxw++ZCgQ/FyAA0s435b0TE4pNU/elIJbXAgKE4 dxplvcJy61nZzvl37WtWPaYf2I8II3taOUJq2qb7CFal5Koam5ZdJk6eWT8gCBsv 758YnNgNlNE7Is/t/WRJlJ8mDw9AuW5+SO9/DUx2ZCvrjACLsWEu0QHxNVVM2Xoc SAh9kNb4AeOO+w8Q9JZORe8GGEeJXtMRJ7LKefOF/CO4BBQFlFy3MiEX2VlohxEW rGToY0ecr3Okoy2onRIGwPb5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNyy3O47N 8uXY9HUi5+nFqKr6vlUwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCKPqU+skxtFtwklmbyGuh1RMdEmJ3Wbb4aOWkSrSPskzqTSxOPuyj5JLGH+Q3J fZRmEzADKbt/whGs8AhGz188xR4qbqAfYTPtlHMyIZXJM8ty22oL5TbbPJgruboM xFE2SlfNAsyQu0vpDNFaB+ok3hginOvoaQ93foJ+njwhFAFeXqK8DePiccjhzr6E lVjbRJHA7OWlbKMM5BDDsLW6n6tKQ+B/dPG7NS4clo2ij6+z8q0RpmGE8QIk6TuR 1O8s3GCUcnj7+U+1sETOvl8oYQ7SkT+xBPGND42J0HOxzYP9KoulBpryMlV97zYM KYEVugddZUpBUfW2LK9tHnrl -----END CERTIFICATE-----Generated at Sat Jun 13 23:02:57 2026 by rpki-client