$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft File: JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json) Hash identifier: cLyBLnroO58iT08bMBRpFbUK7G/Ty5QztZZuOWEI5iU= Subject key identifier: A4:26:7E:DD:DC:D2:4D:4E:35:2B:60:9D:5A:74:27:27:B8:C5:89:B1 Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft Manifest number: 0D2A Signing time: Tue 28 Jul 2026 18:23:44 +0000 Manifest this update: Tue 28 Jul 2026 18:23:43 +0000 Manifest next update: Tue 04 Aug 2026 18:23:43 +0000 Files and hashes: 1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: SmJx6YAKDUcJuO0Z2Ic4HYbUAS76Tg4NYl2cXRo1qnY=) 2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: VuO6oFmdrg28zC8aljPGAA2mZqdTmBMcrxACwaZ0phY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Validity Not Before: Jul 28 18:23:43 2026 GMT Not After : Aug 4 18:23:43 2026 GMT Subject: CN=6a68f3af-f7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:b2:1b:c0:49:f0:2f:2b:b4:37:08:07:af: 11:80:d1:f4:5c:4f:7b:95:36:4a:93:a2:13:f5:99: 3b:e9:b5:2d:a0:0b:a1:6d:3e:9c:47:df:85:e3:9d: 9a:36:b6:a9:b0:4b:42:04:22:cc:ec:fd:ce:05:79: d6:1f:38:4f:f3:d6:71:36:45:6b:ba:a6:12:53:7e: 45:fc:15:e7:03:34:a7:5d:82:50:4a:7f:9a:ba:8e: 65:92:a0:68:23:29:86:15:de:1a:c0:50:5d:fa:ce: ff:4a:aa:b8:09:62:3b:c1:07:5a:a9:24:e0:20:96: d8:e6:3c:48:f2:28:0a:a8:42:b8:0b:1e:f5:77:7f: a4:1b:51:e7:18:5d:da:96:b4:47:62:ed:03:26:c8: 98:53:e2:e5:2e:72:9c:b1:10:07:c5:cc:0e:34:dd: 37:25:68:82:ea:b5:58:d0:48:c1:23:cd:61:eb:1c: ae:0a:cc:a8:a7:f0:b8:d6:6f:e5:bf:b8:29:81:04: d5:da:ad:ce:04:dd:ae:06:9a:76:88:20:a9:ca:ff: da:f2:33:d0:69:71:97:2f:a3:38:43:a8:ac:ad:91: 66:9e:46:bc:78:54:2c:17:92:04:56:18:04:5f:f4: 03:ac:39:48:cb:e1:aa:c8:e8:b3:62:80:79:1a:72: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:26:7E:DD:DC:D2:4D:4E:35:2B:60:9D:5A:74:27:27:B8:C5:89:B1 X509v3 Authority Key Identifier: keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:32:34:a5:3c:81:18:a7:6f:dd:3c:33:32:5d:c4:d0:7e: 30:ac:ce:db:2f:5a:73:46:a9:5a:dd:3a:24:23:13:5f:47:00: 42:20:81:40:14:84:28:db:c5:02:0b:c2:76:07:02:62:ed:95: b6:77:1c:5a:8e:f0:bd:9b:07:de:9c:d9:07:82:3e:a2:b5:1a: 18:7f:d5:73:99:a3:61:95:94:df:ed:8b:f5:c5:66:b1:61:05: 40:ba:9f:89:6c:cd:c4:ca:61:9a:28:03:2e:e7:3e:6d:6c:b8: 7b:66:c2:48:3c:97:aa:49:1f:bc:dc:ce:83:d9:88:16:04:23: f4:86:aa:a0:6c:18:96:9d:4d:e6:b3:53:93:ae:b1:84:ff:b4: 7d:81:fb:25:1a:08:c6:8c:3d:74:2b:6f:55:b3:17:34:6a:9c: 90:21:f9:17:1e:f3:f3:21:55:65:5f:f4:93:c2:9d:43:45:92: a2:db:91:41:ef:0e:1a:fc:92:7b:79:13:29:ee:cc:03:0d:62: 4f:50:ee:b8:61:78:d3:17:16:d7:d8:b9:b2:d2:37:ed:f3:0d: 11:0a:3c:b4:97:83:86:fe:eb:bb:c6:2f:56:8d:8c:19:c1:97: e0:68:b6:53:23:41:9d:b7:c3:6a:6c:ab:b6:70:d2:dc:c1:1b: 14:58:4e:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIxNTIxMTAvBgNVBAUTKDI0M0U0ODI5QUJGMkY5MDlDMTJEREEwNDRGRTVEMzZC ODIxMDUzOTIwHhcNMjYwNzI4MTgyMzQzWhcNMjYwODA0MTgyMzQzWjAYMRYwFAYD VQQDEw02YTY4ZjNhZi1mN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnr+yG8BJ8C8rtDcIB68RgNH0XE97lTZKk6IT9Zk76bUtoAuhbT6cR9+F452a NrapsEtCBCLM7P3OBXnWHzhP89ZxNkVruqYSU35F/BXnAzSnXYJQSn+auo5lkqBo IymGFd4awFBd+s7/Sqq4CWI7wQdaqSTgIJbY5jxI8igKqEK4Cx71d3+kG1HnGF3a lrRHYu0DJsiYU+LlLnKcsRAHxcwONN03JWiC6rVY0EjBI81h6xyuCsyop/C41m/l v7gpgQTV2q3OBN2uBpp2iCCpyv/a8jPQaXGXL6M4Q6isrZFmnka8eFQsF5IEVhgE X/QDrDlIy+GqyOizYoB5GnJyYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQmft3c 0k1ONStgnVp0Jye4xYmxMB8GA1UdIwQYMBaAFCQ+SCmr8vkJwS3aBE/l02uCEFOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjE1Mi9CN0M2QzYwMDA2 RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1RbkJMZG9FVC1YVGE0SVFV NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pENUlLYXZ5LVFuQkxkb0VULVhUYTRJUVU1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjE1Mi9CN0M2QzYwMDA2RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1R bkJMZG9FVC1YVGE0SVFVNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFj0yNKU8gRinb908MzJdxNB+MKzO2y9ac0apWt06JCMTX0cAQiCBQBSEKNvF AgvCdgcCYu2VtnccWo7wvZsH3pzZB4I+orUaGH/Vc5mjYZWU3+2L9cVmsWEFQLqf iWzNxMphmigDLuc+bWy4e2bCSDyXqkkfvNzOg9mIFgQj9IaqoGwYlp1N5rNTk66x hP+0fYH7JRoIxow9dCtvVbMXNGqckCH5Fx7z8yFVZV/0k8KdQ0WSotuRQe8OGvyS e3kTKe7MAw1iT1DuuGF40xcW19i5stI37fMNEQo8tJeDhv7ru8YvVo2MGcGX4Gi2 UyNBnbfDamyrtnDS3MEbFFhOng== -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:53 2026 by rpki-client