$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: Oj0nrBqdng3+tDYZY06GN8G2CuBxjcDXxIgdMXDI1tw= Subject key identifier: BA:96:AD:04:09:53:C4:4E:AC:08:FE:62:D7:B2:AC:3E:AA:64:4B:5E Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0B59 Signing time: Thu 16 Apr 2026 16:33:51 +0000 Manifest this update: Thu 16 Apr 2026 16:33:50 +0000 Manifest next update: Thu 23 Apr 2026 16:33:50 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: 5QpZUoWztRRSdsUGeCNXtm9ZjhFj7s6Z1xHNSi8hKZk=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EU2N4gJVDh7rl8ft9+ApHPFL1rUzyfoQd0sEXkYo/7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Apr 16 16:33:50 2026 GMT Not After : Apr 23 16:33:50 2026 GMT Subject: CN=69e10f6f-6e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:cf:d1:77:c5:a7:05:b0:32:3d:97:8e:ef: db:d4:74:ec:38:91:da:22:3b:d2:37:c6:97:0a:c1: 78:af:f2:85:d2:1c:bf:5d:12:4b:4b:68:bc:ed:70: 11:ad:cd:c8:81:80:54:25:62:80:d6:d4:36:ed:1e: a9:db:07:90:31:8c:fe:29:51:23:f1:e6:d1:e2:18: be:df:78:44:f9:12:af:9a:21:b0:37:f4:71:eb:2e: 36:c9:50:4d:f2:1f:fa:d6:a1:9f:cb:a4:df:c1:18: b5:a6:5e:8a:b7:ce:3c:74:11:a3:fc:85:70:15:73: 6a:e9:4a:23:c1:fb:07:f1:f5:26:f3:8f:1b:b8:0c: 65:fa:82:5b:e5:d1:1d:fd:06:3e:d4:21:3e:cf:c1: 42:bb:bc:ad:92:84:eb:92:b3:84:c2:5f:94:72:4e: 09:c7:74:d1:32:93:24:da:83:01:32:93:e4:a7:1c: 02:75:dd:f1:22:82:39:a6:ff:5c:28:e5:82:4c:04: 1e:4e:ac:9c:46:fb:b1:9b:53:f3:2e:65:1a:1a:eb: db:d4:94:b2:36:19:a9:18:d7:64:30:a2:71:7c:5f: 53:7d:cc:5e:c6:51:77:32:31:b4:f5:e7:d6:f0:eb: 34:ce:eb:bf:44:d8:28:85:65:c5:ad:63:fd:16:98: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:AD:04:09:53:C4:4E:AC:08:FE:62:D7:B2:AC:3E:AA:64:4B:5E X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cc:33:9c:fa:89:c3:2d:8c:2e:f1:80:96:1a:7c:50:be:d6: c2:b8:8f:53:f4:46:19:37:13:59:f6:f4:d2:b0:30:ae:10:24: b8:7a:76:5a:17:2f:d2:17:da:e0:16:e3:dd:94:62:23:af:da: 8a:ac:38:70:34:16:80:0e:c9:93:61:d5:82:32:bb:25:08:cd: 79:a4:81:92:be:ba:1e:68:c3:0c:52:cf:59:76:1d:81:1d:d3: ad:9a:07:ea:98:f7:99:93:0e:ec:58:b7:a3:1c:b5:d6:22:39: 0a:3c:42:4d:83:e9:1d:27:e5:10:90:3d:22:c6:66:39:04:5f: d3:5b:28:66:5f:f0:87:ac:a8:bf:5c:9d:61:f9:24:f2:2a:34: e0:f4:c0:fc:e5:4a:9a:a4:88:eb:60:51:11:8c:02:36:23:69: c1:e0:8e:3f:49:4c:8c:ec:ff:da:db:96:85:c2:02:09:9b:e7: 17:d2:a1:40:b3:f0:d2:fe:e3:36:32:75:f2:ce:13:ff:e2:58: 2d:44:31:16:ec:c8:f9:5c:32:1a:48:48:11:66:b6:de:46:e2: 01:9e:22:de:ca:98:d4:f5:3f:1e:3a:8b:8e:2f:65:84:6a:69: aa:26:5d:20:f0:52:f2:fa:a4:65:af:d2:62:56:db:9f:8a:a1: ba:e9:52:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYwNDE2MTYzMzUwWhcNMjYwNDIzMTYzMzUwWjAYMRYwFAYD VQQDEw02OWUxMGY2Zi02ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhHP0XfFpwWwMj2Xju/b1HTsOJHaIjvSN8aXCsF4r/KF0hy/XRJLS2i87XAR rc3IgYBUJWKA1tQ27R6p2weQMYz+KVEj8ebR4hi+33hE+RKvmiGwN/Rx6y42yVBN 8h/61qGfy6TfwRi1pl6Kt848dBGj/IVwFXNq6UojwfsH8fUm848buAxl+oJb5dEd /QY+1CE+z8FCu7ytkoTrkrOEwl+Uck4Jx3TRMpMk2oMBMpPkpxwCdd3xIoI5pv9c KOWCTAQeTqycRvuxm1PzLmUaGuvb1JSyNhmpGNdkMKJxfF9TfcxexlF3MjG09efW 8Os0zuu/RNgohWXFrWP9Fpg8SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqWrQQJ U8ROrAj+YteyrD6qZEteMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMwznPqJwy2MLvGAlhp8UL7WwriPU/RGGTcTWfb00rAwrhAkuHp2Whcv0hfa 4Bbj3ZRiI6/aiqw4cDQWgA7Jk2HVgjK7JQjNeaSBkr66HmjDDFLPWXYdgR3TrZoH 6pj3mZMO7Fi3oxy11iI5CjxCTYPpHSflEJA9IsZmOQRf01soZl/wh6yov1ydYfkk 8io04PTA/OVKmqSI62BREYwCNiNpweCOP0lMjOz/2tuWhcICCZvnF9KhQLPw0v7j NjJ18s4T/+JYLUQxFuzI+VwyGkhIEWa23kbiAZ4i3sqY1PU/HjqLji9lhGppqiZd IPBS8vqkZa/SYlbbn4qhuulSCw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:44 2026 by rpki-client