$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json) Hash identifier: mag1FJ74zJrqM0EizgL0vpI8Hmmrddn91nqfF4+Tt7Q= Subject key identifier: 0B:A2:16:B2:04:A8:0A:99:3F:0B:25:66:19:1B:10:B5:1A:FD:BC:A3 Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft Manifest number: 0253 Signing time: Sun 19 Apr 2026 02:01:51 +0000 Manifest this update: Sun 19 Apr 2026 02:01:50 +0000 Manifest next update: Sun 26 Apr 2026 02:01:50 +0000 Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: T/yfMhDYmT+ZVWjYmOQqMNYA5Jc2DM1o67ji6kP6F34=) 2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: ThH+uRO/NK0/JqzhTteBatdGoRYQgyv/pPCLt6AvEMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Validity Not Before: Apr 19 02:01:50 2026 GMT Not After : Apr 26 02:01:50 2026 GMT Subject: CN=69e4378f-6a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:ce:4d:b3:d1:5f:36:d6:49:25:4f:bc:ce: 06:31:55:d6:11:94:06:54:18:90:d6:33:e1:ab:79: d5:db:30:ca:4f:6b:6b:b2:f2:ad:91:cf:7c:55:4c: 6f:e7:38:c2:60:e6:b1:04:b2:07:1c:d7:b8:3c:ed: 17:ea:ca:bc:2a:9e:df:18:26:67:17:69:bf:a2:7e: 6b:36:0f:20:cc:4b:3e:01:1c:aa:e7:93:b9:78:ed: b0:ac:d2:96:ce:06:36:e6:1b:5e:97:be:24:5e:91: 87:24:53:39:e8:56:12:00:58:44:5a:70:3f:0b:ed: 98:82:79:5b:f5:ac:a7:bf:ef:95:40:25:15:cb:6a: 39:8b:c4:10:46:ec:49:6a:3e:02:63:3d:5f:eb:87: ce:a1:37:db:35:08:89:4a:0d:ff:73:01:db:3d:dd: 2e:24:c9:4c:e2:82:24:63:6b:a5:55:13:54:92:f0: 3f:6a:96:e4:51:82:7d:7c:40:5b:64:63:f7:b5:43: 75:8c:f0:91:31:3d:a2:32:7c:a8:54:21:82:b2:50: b1:e9:b7:0a:cb:a3:3d:dd:75:76:f8:9b:44:0b:a1: 43:bc:3f:18:33:5e:2c:cd:9c:5a:93:6d:c7:63:af: 4f:92:00:ae:2a:2e:f8:31:af:69:98:ca:de:30:eb: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:16:B2:04:A8:0A:99:3F:0B:25:66:19:1B:10:B5:1A:FD:BC:A3 X509v3 Authority Key Identifier: keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:82:fc:4a:05:bc:9a:14:63:4d:19:44:11:0d:18:38:9e:f5: 86:b7:2a:e9:04:89:53:65:33:fd:14:ef:22:b0:ce:d7:d5:04: 2d:14:75:86:11:0d:fa:04:04:4b:72:53:ce:23:0c:5f:9c:1e: c9:1d:0e:ca:c7:63:f1:b4:f5:5d:dc:f4:5f:1f:cf:29:b6:36: e1:f9:60:e0:03:b2:8c:3d:c2:a2:8c:80:9a:91:fd:ad:5e:ca: 3d:ba:fd:73:07:c1:d2:93:0c:a2:f8:01:73:e7:fc:df:53:97: d8:9f:37:1d:74:3e:2f:35:18:3b:61:6a:7d:10:1c:3a:36:de: 0a:d9:f6:cf:ef:5b:ca:5d:4c:f6:9a:50:ff:cc:cc:0e:2b:1f: 58:3a:81:da:e7:68:70:d2:01:3d:03:34:77:06:f9:71:82:3a: 2f:d6:f8:00:fa:c4:25:a4:de:39:15:83:1b:0c:1f:08:c8:65: 1b:c4:65:8c:a4:6f:11:01:d6:e8:63:25:be:52:b4:d6:08:25: ef:7c:eb:94:03:4c:89:79:d0:8d:a7:91:22:3e:02:03:01:2c: 72:cb:11:f3:55:ed:4b:a8:f8:22:59:09:20:35:d2:54:37:ac: 1e:63:6f:d9:f8:f1:86:8d:96:f8:d1:97:05:46:01:b6:cb:58: 2e:d8:85:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4 REFBRkRDREUwHhcNMjYwNDE5MDIwMTUwWhcNMjYwNDI2MDIwMTUwWjAYMRYwFAYD VQQDEw02OWU0Mzc4Zi02YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbPOTbPRXzbWSSVPvM4GMVXWEZQGVBiQ1jPhq3nV2zDKT2trsvKtkc98VUxv 5zjCYOaxBLIHHNe4PO0X6sq8Kp7fGCZnF2m/on5rNg8gzEs+ARyq55O5eO2wrNKW zgY25htel74kXpGHJFM56FYSAFhEWnA/C+2Ygnlb9aynv++VQCUVy2o5i8QQRuxJ aj4CYz1f64fOoTfbNQiJSg3/cwHbPd0uJMlM4oIkY2ulVRNUkvA/apbkUYJ9fEBb ZGP3tUN1jPCRMT2iMnyoVCGCslCx6bcKy6M93XV2+JtEC6FDvD8YM14szZxak23H Y69PkgCuKi74Ma9pmMreMOup+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuiFrIE qAqZPwslZhkbELUa/byjMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGIL8SgW8mhRjTRlEEQ0YOJ71hrcq6QSJU2Uz/RTvIrDO19UELRR1hhEN+gQE S3JTziMMX5weyR0Oysdj8bT1Xdz0Xx/PKbY24flg4AOyjD3CooyAmpH9rV7KPbr9 cwfB0pMMovgBc+f831OX2J83HXQ+LzUYO2FqfRAcOjbeCtn2z+9byl1M9ppQ/8zM DisfWDqB2udocNIBPQM0dwb5cYI6L9b4APrEJaTeORWDGwwfCMhlG8RljKRvEQHW 6GMlvlK01ggl73zrlANMiXnQjaeRIj4CAwEscssR81XtS6j4IlkJIDXSVDesHmNv 2fjxho2W+NGXBUYBtstYLtiFtg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:18:42 2026 by rpki-client