$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: fFSh79fsBNVHzdTWA03wMF8Qo2BpqqAIrWJznm9/QIs= Subject key identifier: AB:C8:CB:56:8A:B3:7E:23:5D:E9:53:06:2A:BF:75:F7:20:68:8C:5B Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 014A Signing time: Fri 17 Apr 2026 04:53:33 +0000 Manifest this update: Fri 17 Apr 2026 04:53:33 +0000 Manifest next update: Fri 24 Apr 2026 04:53:33 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: KMsj7bAYv8+x7sPMyo/sJN/zD/BFnAdrdKPFn//3rbQ=) 2: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw=) 3: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Apr 17 04:53:33 2026 GMT Not After : Apr 24 04:53:33 2026 GMT Subject: CN=69e1bccd-5ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:a9:39:1b:6b:70:68:dc:08:73:9f:66:5a: aa:ae:74:ee:c0:40:b3:ca:2d:6d:68:ed:84:3c:58: 88:f2:fe:e4:28:39:b6:4e:04:b9:83:76:ea:58:ed: 1a:13:35:06:6d:cc:9a:8d:42:c7:ed:88:97:0a:86: d7:ef:d0:a9:86:dc:42:b0:68:88:b2:57:34:5a:94: 17:11:9a:1b:71:34:87:e9:9e:77:00:f1:96:5e:5c: 2d:3b:9a:5f:11:a6:ca:14:40:f5:e4:e2:75:62:f4: a9:00:ca:ac:3d:b5:ab:f7:2d:84:e0:e0:77:52:d9: fb:52:15:30:37:61:64:77:6a:83:34:d6:f8:f2:ba: 8b:7f:62:00:c5:98:ad:16:14:f3:18:f9:63:34:1f: 32:18:a7:15:fc:6f:ca:7d:e6:d5:e4:7e:a6:55:6a: f6:7b:30:ac:9e:0e:cb:2a:70:31:8c:24:9f:53:73: d6:2d:53:87:db:9e:85:a0:66:d3:c9:66:e4:66:ee: 4f:12:e9:81:7a:53:aa:a4:99:f2:9c:c7:c0:04:af: 07:da:cc:d8:01:50:15:6e:e5:14:7b:51:ce:e4:b6: 96:fe:17:f6:d7:f4:b9:bd:e3:f3:ae:85:43:e0:c0: 2e:68:08:c5:d4:20:1d:a7:02:c5:b7:31:de:f0:e8: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:CB:56:8A:B3:7E:23:5D:E9:53:06:2A:BF:75:F7:20:68:8C:5B X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4b:e1:0d:01:77:b0:2c:49:10:d0:4a:5d:ad:1e:e6:a0:21: ca:8d:55:7c:18:3a:a2:4d:29:d1:d6:e4:f4:4d:b2:14:cf:10: 7f:8c:85:b7:79:fa:63:55:33:12:da:ad:95:3a:4c:84:83:b0: d3:e3:a0:d9:40:25:99:8f:a7:7d:40:0e:6b:f7:9e:c0:e8:53: 74:7b:59:50:15:40:54:5c:4b:45:ac:5c:01:4e:86:06:af:ea: 07:d0:95:77:b2:a8:9c:ff:1c:77:b7:df:1d:9f:ab:e4:cb:15: 18:e7:14:5c:88:77:ca:9f:24:76:90:31:fc:6a:50:8d:b0:d0: 2e:a6:bd:68:5b:8c:4d:88:72:8a:5e:8b:66:c7:56:e4:90:47: 66:09:c4:e8:20:3e:80:d2:cc:0b:29:5d:8a:0a:8e:6b:b2:e1: cf:52:05:b5:76:32:07:05:64:ce:2d:18:2d:6f:4c:be:fa:56: 8a:ee:c6:fa:f7:5e:b1:3b:ae:88:aa:78:8e:21:f8:7b:02:fc: 75:a3:88:8f:b6:22:e1:dc:7d:82:82:27:c7:89:55:4c:de:70: 60:5f:df:72:a5:34:52:cf:41:66:c9:3c:41:05:9f:9a:78:27: bc:af:02:01:06:ba:4b:73:16:2e:c8:49:37:6c:00:fa:6e:c7: bf:ad:33:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjYwNDE3MDQ1MzMzWhcNMjYwNDI0MDQ1MzMzWjAYMRYwFAYD VQQDEw02OWUxYmNjZC01ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSipORtrcGjcCHOfZlqqrnTuwECzyi1taO2EPFiI8v7kKDm2TgS5g3bqWO0a EzUGbcyajULH7YiXCobX79CphtxCsGiIslc0WpQXEZobcTSH6Z53APGWXlwtO5pf EabKFED15OJ1YvSpAMqsPbWr9y2E4OB3Utn7UhUwN2Fkd2qDNNb48rqLf2IAxZit FhTzGPljNB8yGKcV/G/KfebV5H6mVWr2ezCsng7LKnAxjCSfU3PWLVOH256FoGbT yWbkZu5PEumBelOqpJnynMfABK8H2szYAVAVbuUUe1HO5LaW/hf21/S5vePzroVD 4MAuaAjF1CAdpwLFtzHe8OggBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKvIy1aK s34jXelTBiq/dfcgaIxbMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALEvhDQF3sCxJENBKXa0e5qAhyo1VfBg6ok0p0dbk9E2yFM8Qf4yFt3n6Y1Uz EtqtlTpMhIOw0+Og2UAlmY+nfUAOa/eewOhTdHtZUBVAVFxLRaxcAU6GBq/qB9CV d7KonP8cd7ffHZ+r5MsVGOcUXIh3yp8kdpAx/GpQjbDQLqa9aFuMTYhyil6LZsdW 5JBHZgnE6CA+gNLMCyldigqOa7Lhz1IFtXYyBwVkzi0YLW9MvvpWiu7G+vdesTuu iKp4jiH4ewL8daOIj7Yi4dx9goInx4lVTN5wYF/fcqU0Us9BZsk8QQWfmngnvK8C AQa6S3MWLshJN2wA+m7Hv60zlQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:24 2026 by rpki-client