$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: 4BD/O2dRancIh5okP8OrN000B6v6UWVrtxA3eAcabBw= Subject key identifier: DC:6B:E6:EA:6F:9A:A0:26:08:E5:C4:E1:3B:C7:59:1D:E1:BD:75:1D Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 09C9 Signing time: Thu 16 Apr 2026 19:53:09 +0000 Manifest this update: Thu 16 Apr 2026 19:53:08 +0000 Manifest next update: Thu 23 Apr 2026 19:53:08 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: BxcdfHaGM2UMsbu4PObh82VsX8+KAlkIrFEgGQ+O0jQ=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: OaT/XW874M87KUD4zgcewRueFDXkVs/stxI74eZUrZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Apr 16 19:53:08 2026 GMT Not After : Apr 23 19:53:08 2026 GMT Subject: CN=69e13e25-7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:a7:6a:a8:44:e1:1d:48:29:40:cf:d7:e2: 72:58:a4:c7:99:51:f7:87:12:db:55:26:6b:ba:c1: a5:cc:ff:7f:32:90:6f:e1:2c:51:6b:2c:a8:21:74: 8e:fb:82:d6:7b:8a:f5:d6:fe:c8:c7:a7:c3:62:df: f8:d3:7d:73:16:02:cc:fb:0f:be:15:36:3d:a5:89: da:49:e6:2f:c9:46:cb:5e:a2:df:eb:49:ee:08:3a: 8c:62:c2:00:1f:38:2f:14:67:c0:f9:1c:54:85:27: d3:1f:e0:ea:8d:7c:75:fa:8f:b3:3f:28:de:02:62: 1d:ae:7c:96:1b:eb:17:37:f4:01:e7:cf:ce:4c:b4: fa:5c:b4:9e:7b:f9:a5:03:9d:ea:df:24:57:ff:0b: 17:f6:df:8f:15:97:13:95:b6:e5:17:9f:d0:eb:25: a0:e2:b1:36:22:1f:74:f2:d6:d8:b0:4b:2e:6a:27: 66:31:7c:fa:55:11:5e:48:95:5c:0c:2b:9c:cf:8d: d6:a6:aa:d8:32:bd:ed:fd:c2:36:4a:d0:34:40:f4: ab:49:54:2a:ca:f0:ca:ec:ce:99:53:1e:6b:27:b6: e7:bd:b6:96:05:b2:8d:4b:ba:2a:7a:5b:5b:d9:93: 2b:0d:58:b7:33:4d:f8:82:a8:db:9a:af:57:df:21: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6B:E6:EA:6F:9A:A0:26:08:E5:C4:E1:3B:C7:59:1D:E1:BD:75:1D X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:89:09:88:1a:2f:aa:c3:e5:e1:38:40:b2:c3:f7:7f:a1:cc: b1:f6:d2:71:8f:ac:22:86:9b:76:97:b6:cc:40:09:a0:66:27: ae:63:f3:b0:ff:e1:fe:76:18:f7:8b:be:8c:84:dd:ce:e5:30: 7d:8b:78:1b:26:37:f2:e7:73:4e:e5:67:ae:b3:08:7d:82:60: 2e:13:f4:9e:bf:2c:2d:57:6c:62:cc:a4:62:b7:0c:dd:78:83: d9:c6:43:bf:cc:f4:59:a8:fe:e5:d9:e5:cd:12:7f:ef:35:60: 41:59:b1:a4:6e:71:ec:e9:92:09:29:65:f4:2d:ae:5c:9a:49: fc:7e:98:b2:4d:61:02:8c:d1:b9:86:69:be:a5:3a:cc:19:8c: 12:35:ad:2b:27:36:23:5a:f7:1c:d7:50:72:bd:cf:fc:56:d5: ce:79:67:44:56:24:2b:4b:f7:4f:4c:fe:81:d4:a6:96:b6:c2: 95:c7:eb:3a:eb:69:b2:f6:b6:29:8f:a7:33:6a:68:d5:bc:96: 91:2f:37:6c:99:c3:f4:d9:83:af:e5:66:31:86:d5:7b:17:d5: e1:d2:3c:6d:cc:fc:67:7c:ac:c4:ef:ae:69:0e:bc:05:f7:b2: 1f:4a:a3:1e:be:95:5a:e1:2a:87:4d:65:a6:57:f2:e5:98:4d: b7:e6:d8:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjYwNDE2MTk1MzA4WhcNMjYwNDIzMTk1MzA4WjAYMRYwFAYD VQQDEw02OWUxM2UyNS03NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLenaqhE4R1IKUDP1+JyWKTHmVH3hxLbVSZrusGlzP9/MpBv4SxRayyoIXSO +4LWe4r11v7Ix6fDYt/4031zFgLM+w++FTY9pYnaSeYvyUbLXqLf60nuCDqMYsIA HzgvFGfA+RxUhSfTH+DqjXx1+o+zPyjeAmIdrnyWG+sXN/QB58/OTLT6XLSee/ml A53q3yRX/wsX9t+PFZcTlbblF5/Q6yWg4rE2Ih908tbYsEsuaidmMXz6VRFeSJVc DCucz43WpqrYMr3t/cI2StA0QPSrSVQqyvDK7M6ZUx5rJ7bnvbaWBbKNS7oqeltb 2ZMrDVi3M034gqjbmq9X3yFNQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxr5upv mqAmCOXE4TvHWR3hvXUdMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZIkJiBovqsPl4ThAssP3f6HMsfbScY+sIoabdpe2zEAJoGYnrmPzsP/h/nYY 94u+jITdzuUwfYt4GyY38udzTuVnrrMIfYJgLhP0nr8sLVdsYsykYrcM3XiD2cZD v8z0Waj+5dnlzRJ/7zVgQVmxpG5x7OmSCSll9C2uXJpJ/H6Ysk1hAozRuYZpvqU6 zBmMEjWtKyc2I1r3HNdQcr3P/FbVznlnRFYkK0v3T0z+gdSmlrbClcfrOutpsva2 KY+nM2po1byWkS83bJnD9NmDr+VmMYbVexfV4dI8bcz8Z3ysxO+uaQ68BfeyH0qj Hr6VWuEqh01lplfy5ZhNt+bYUg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:50 2026 by rpki-client