$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: t2EycOrXfbcDMcwTR/11ETgunjPzFne83neaEMN2Gh0= Subject key identifier: CB:46:6C:71:04:87:D3:E1:90:21:E9:60:9A:CA:DD:B7:88:5D:B8:37 Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 05A0 Signing time: Thu 16 Apr 2026 23:07:34 +0000 Manifest this update: Thu 16 Apr 2026 23:07:34 +0000 Manifest next update: Thu 23 Apr 2026 23:07:34 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: gBdkTXC/eu8wLFDq3qYNEnzfycaZPFFonE87cvgAhE0=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: Cr23RBREtuT54zLAvnFw/R9xfkhI60wXk3xodOfPdEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Apr 16 23:07:34 2026 GMT Not After : Apr 23 23:07:34 2026 GMT Subject: CN=69e16bb6-c493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:8d:c6:6d:17:dc:e2:53:e6:a9:63:28:f4: 0a:b1:e8:e1:47:c0:4d:7a:d9:4c:9d:79:1d:7a:d2: a3:9f:f5:6e:b4:60:8e:35:af:06:be:64:18:50:a7: 4d:30:3c:a6:82:b1:f7:e5:03:11:e6:3d:9b:82:4b: b5:df:2d:a2:ce:b7:66:a6:16:2e:6d:3b:33:fe:40: a0:19:e1:ab:7b:dc:9a:95:b9:17:29:70:1c:16:e3: aa:07:60:61:9b:41:f0:79:3a:4e:45:f9:28:1b:00: 06:f7:55:ed:b3:2e:06:c1:8d:68:9b:f1:e9:2b:22: 75:00:bd:10:95:6e:7d:4d:20:96:e5:05:cb:d7:de: 36:e4:74:cc:9c:4c:46:77:d7:64:94:93:c5:fa:9a: ea:75:db:c5:e2:40:04:a1:02:12:4d:19:27:77:e1: d6:b5:3d:34:81:42:85:61:45:3b:70:f1:88:0f:4d: 1a:73:ef:33:86:c9:b6:2b:7b:77:16:74:01:bd:b8: 29:d5:8d:aa:2d:79:da:1a:81:00:e0:11:67:35:ae: f8:a7:79:5e:af:60:5d:6f:d5:96:bf:63:e4:c1:51: 04:88:5e:d2:67:36:ab:e7:f1:f2:a1:ba:f0:eb:b8: 2a:af:d7:a0:5d:69:37:e5:12:b2:75:13:9c:e2:d8: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:6C:71:04:87:D3:E1:90:21:E9:60:9A:CA:DD:B7:88:5D:B8:37 X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:03:47:3e:d4:d2:8a:86:cf:e7:2d:0a:04:6e:a4:b4:52:e5: 24:a9:27:43:b4:68:27:9d:2b:5a:ab:4d:b4:21:e8:94:07:23: 25:ed:03:26:cc:d7:5a:bb:43:89:67:f6:1c:25:98:f8:33:05: dd:b9:9e:67:84:d6:0b:99:f4:9d:24:91:f6:44:1a:86:95:48: 70:31:79:e1:89:59:08:c3:3b:52:72:16:0a:84:ac:c7:87:69: 83:3c:02:dc:cc:56:bc:0d:6d:38:83:1b:4e:1e:ca:2d:0d:dc: 79:82:ba:bc:88:2c:9e:cd:ac:81:8a:b1:32:08:ca:02:43:8c: ba:e2:88:8d:ae:44:41:8f:03:56:81:2d:1a:22:56:af:fd:ae: 9e:92:9c:17:1f:4a:d9:5e:7c:3e:43:57:04:f0:a4:6a:5a:8c: 32:96:d0:a2:d8:dd:18:1a:ae:a0:d5:dc:68:e2:c7:36:3f:c4: c7:b5:c2:6c:b1:2d:d1:40:c2:dc:c7:80:f3:e6:ad:13:36:79: bd:ce:27:60:87:66:bd:e7:ab:27:f8:d1:d9:64:8b:d2:00:86: 19:a1:91:87:4d:13:f0:2d:21:2d:6a:85:a0:04:6e:58:f1:28: bc:0e:2c:e4:b0:cf:0e:ac:0f:93:dd:1f:88:4d:c0:ce:6e:0c: 0d:cb:98:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjYwNDE2MjMwNzM0WhcNMjYwNDIzMjMwNzM0WjAYMRYwFAYD VQQDEw02OWUxNmJiNi1jNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/mNxm0X3OJT5qljKPQKsejhR8BNetlMnXkdetKjn/VutGCONa8GvmQYUKdN MDymgrH35QMR5j2bgku13y2izrdmphYubTsz/kCgGeGre9yalbkXKXAcFuOqB2Bh m0HweTpORfkoGwAG91Xtsy4GwY1om/HpKyJ1AL0QlW59TSCW5QXL19425HTMnExG d9dklJPF+prqddvF4kAEoQISTRknd+HWtT00gUKFYUU7cPGID00ac+8zhsm2K3t3 FnQBvbgp1Y2qLXnaGoEA4BFnNa74p3ler2Bdb9WWv2PkwVEEiF7SZzar5/Hyobrw 67gqr9egXWk35RKydROc4tj+7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtGbHEE h9PhkCHpYJrK3beIXbg3MB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQNHPtTSiobP5y0KBG6ktFLlJKknQ7RoJ50rWqtNtCHolAcjJe0DJszXWrtD iWf2HCWY+DMF3bmeZ4TWC5n0nSSR9kQahpVIcDF54YlZCMM7UnIWCoSsx4dpgzwC 3MxWvA1tOIMbTh7KLQ3ceYK6vIgsns2sgYqxMgjKAkOMuuKIja5EQY8DVoEtGiJW r/2unpKcFx9K2V58PkNXBPCkalqMMpbQotjdGBquoNXcaOLHNj/Ex7XCbLEt0UDC 3MeA8+atEzZ5vc4nYIdmveerJ/jR2WSL0gCGGaGRh00T8C0hLWqFoARuWPEovA4s 5LDPDqwPk90fiE3Azm4MDcuYlA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:55 2026 by rpki-client