$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json) Hash identifier: NFHLAuVIlHtTkRjPkT5up7HzR/nTzoqpPO6FNsAwzSQ= Subject key identifier: B6:84:3F:CA:83:F4:7A:9F:2A:53:CB:CF:36:E4:E8:0B:F0:F4:32:44 Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft Manifest number: 03D5 Signing time: Fri 17 Apr 2026 00:28:26 +0000 Manifest this update: Fri 17 Apr 2026 00:28:25 +0000 Manifest next update: Fri 24 Apr 2026 00:28:25 +0000 Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: qlZ/fwrrqNEc05FH+Ssa/DIn1XmOUiZ8qdMAD6XWX5s=) 2: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: 8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=) 3: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: eJU27ZylxWRdH4yTS7w9NECP9sf6xkVZe7M8HJ4Q68w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Validity Not Before: Apr 17 00:28:25 2026 GMT Not After : Apr 24 00:28:25 2026 GMT Subject: CN=69e17eaa-8412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:d5:74:05:36:19:ae:4f:37:23:df:6d:54: 68:f3:2d:7c:b2:15:70:b2:2d:9c:0b:53:b7:74:14: a7:38:59:82:d3:31:2e:3b:c1:58:66:2a:24:65:61: ef:6f:a2:bf:99:16:4c:91:38:3f:dd:0a:bb:5c:cd: 79:00:c2:18:49:fc:ea:65:35:3c:ec:17:14:f9:24: d8:6c:4f:aa:22:d1:13:66:b7:41:85:2e:68:71:e1: 49:7b:90:96:f4:79:86:8f:fa:0b:64:dd:fb:bc:7e: 4d:28:d8:d9:d0:f4:d8:3d:50:62:6d:d5:4a:6e:d8: 14:d4:ca:72:eb:05:67:0b:02:b9:69:7d:03:95:19: 59:64:9b:46:a0:77:65:83:35:65:80:2a:bd:b8:7a: 61:f3:ff:ef:08:e1:a9:46:1a:67:9c:9c:32:8a:05: 2b:c0:65:02:e0:4c:c7:d0:69:62:07:08:b6:36:f7: 16:8c:fa:fa:c9:71:73:10:a4:45:74:5e:db:38:b6: 81:1c:75:2a:b1:74:ba:2b:99:34:f7:b6:b8:2c:92: f7:fe:6f:18:2e:f5:98:b1:4a:9f:5d:ff:20:f1:f9: 48:c9:9b:39:18:ef:d5:da:23:eb:fe:1c:14:fc:fc: aa:c7:d0:b1:99:7e:6b:b0:cd:6b:80:da:de:2f:23: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:3F:CA:83:F4:7A:9F:2A:53:CB:CF:36:E4:E8:0B:F0:F4:32:44 X509v3 Authority Key Identifier: keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f6:c9:9c:d5:f4:1d:af:bc:4d:ab:c4:d8:1a:e1:1a:62:e4: dc:74:52:59:46:23:51:97:18:b7:76:ac:88:e1:f2:cb:9f:7a: 90:51:64:c4:90:75:54:57:87:23:9f:5f:ac:17:28:bf:b2:18: ed:2e:cc:74:7c:c3:a0:93:6b:71:b9:17:3a:bf:ba:75:12:e7: cb:81:66:dd:0c:ae:c4:ad:e1:90:36:fb:e0:db:9f:4b:70:d3: fe:a9:98:87:7b:ab:a2:6c:f2:a1:73:00:78:d5:13:aa:c9:1d: 48:ca:b6:37:0e:62:88:28:fa:2d:37:24:d1:64:05:fb:bc:01: 52:0a:a2:bb:ed:78:9d:96:53:8b:e8:c3:08:2e:52:14:2a:2e: 2f:ce:3e:c9:1d:ad:68:44:b9:87:eb:62:89:5c:a5:8d:04:8e: f4:04:d2:30:39:2c:d9:ff:0f:13:77:f4:94:13:53:e4:b2:ff: 5f:21:a9:09:2e:d0:6f:36:8b:70:68:a6:38:47:2b:cd:e8:30: 6f:ae:07:65:69:95:ac:da:80:26:cd:d4:c2:da:1b:f7:18:7a: f4:93:07:a2:1f:28:34:16:52:37:9d:ad:80:c7:9a:8c:ef:ec: b0:13:af:dd:02:67:66:71:f0:97:2f:05:a0:36:6d:d9:8e:eb: 5b:4d:7f:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz RENBNjFCMUMwHhcNMjYwNDE3MDAyODI1WhcNMjYwNDI0MDAyODI1WjAYMRYwFAYD VQQDEw02OWUxN2VhYS04NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhLVdAU2Ga5PNyPfbVRo8y18shVwsi2cC1O3dBSnOFmC0zEuO8FYZiokZWHv b6K/mRZMkTg/3Qq7XM15AMIYSfzqZTU87BcU+STYbE+qItETZrdBhS5oceFJe5CW 9HmGj/oLZN37vH5NKNjZ0PTYPVBibdVKbtgU1Mpy6wVnCwK5aX0DlRlZZJtGoHdl gzVlgCq9uHph8//vCOGpRhpnnJwyigUrwGUC4EzH0GliBwi2NvcWjPr6yXFzEKRF dF7bOLaBHHUqsXS6K5k097a4LJL3/m8YLvWYsUqfXf8g8flIyZs5GO/V2iPr/hwU /Pyqx9CxmX5rsM1rgNreLyNe/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaEP8qD 9HqfKlPLzzbk6Avw9DJEMB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2 MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDBDQy9CNEE3Q0NFOEM2MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lX YlVOeE83Rzg2T0E5eW1HeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUfbJnNX0Ha+8TavE2BrhGmLk3HRSWUYjUZcYt3asiOHyy596kFFkxJB1VFeH I59frBcov7IY7S7MdHzDoJNrcbkXOr+6dRLny4Fm3QyuxK3hkDb74NufS3DT/qmY h3uromzyoXMAeNUTqskdSMq2Nw5iiCj6LTck0WQF+7wBUgqiu+14nZZTi+jDCC5S FCouL84+yR2taES5h+tiiVyljQSO9ATSMDks2f8PE3f0lBNT5LL/XyGpCS7QbzaL cGimOEcrzegwb64HZWmVrNqAJs3Uwtob9xh69JMHoh8oNBZSN52tgMeajO/ssBOv 3QJnZnHwly8FoDZt2Y7rW01/VA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:15 2026 by rpki-client