$ rpki-client -vvf rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft File: Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft (raw, json) Hash identifier: z5bHh1xEBa5A3evd9DNtjErz+yrLEMJrkEkRKQy80GI= Subject key identifier: FD:00:5C:7A:2C:83:0E:B4:BE:52:B1:BB:F2:75:1D:6F:D0:1B:4F:2B Authority key identifier: 26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41 Certificate issuer: /CN=A914860F/serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 08:54:35 +0000 Manifest this update: Fri 17 Apr 2026 08:54:35 +0000 Manifest next update: Fri 24 Apr 2026 08:54:35 +0000 Files and hashes: 1: Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl (hash: Omi7O5Sw1qnHz+Adu1erzcgPRBv/6QOdPQuuVwqUb0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914860F, serialNumber=268E596E291A7FAF510D1BF72848DFB086D5C941 Validity Not Before: Apr 17 08:54:35 2026 GMT Not After : Apr 24 08:54:35 2026 GMT Subject: CN=69e1f54b-68d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:28:d2:39:9d:dd:11:b3:14:57:61:58:d7: 70:6e:2d:7c:1b:5c:6b:ea:35:f2:90:72:0b:13:cf: 50:94:8a:7b:68:60:01:ce:37:b0:b0:0d:e4:d8:90: 12:31:f3:82:8b:db:08:44:3f:2e:a8:7d:ae:15:0c: 13:c1:6c:07:1f:08:6f:86:e6:77:64:31:76:84:50: fd:e3:09:e4:3a:d8:88:1e:21:4a:85:a3:14:ed:ba: be:7a:6c:f2:33:ac:fc:ba:b5:f5:22:fb:48:bb:79: 09:40:46:45:06:b7:a9:e1:87:11:c9:5f:85:cd:b1: 30:0e:0e:4d:d3:48:db:43:ec:7b:ae:5d:b5:1e:77: d9:85:45:c6:db:d2:d1:fa:33:f1:26:eb:70:91:2b: 93:b7:a0:33:96:1d:b4:10:2f:91:05:62:2b:5a:16: 53:c3:b3:bb:6e:f1:b5:79:32:e4:9e:ff:70:6b:85: 4e:4d:98:89:a1:de:aa:e3:12:d7:5d:b3:80:c6:67: ce:d3:85:f2:76:10:19:1a:cb:ce:f4:b4:90:3a:6c: da:37:39:e5:ed:61:fa:47:a3:c7:72:59:bc:2d:7e: dc:56:33:8b:07:9f:ca:f4:70:7a:7d:2f:50:30:39: b2:e5:45:a1:f8:dc:9a:d7:2c:b4:bb:9f:84:74:ce: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:5C:7A:2C:83:0E:B4:BE:52:B1:BB:F2:75:1D:6F:D0:1B:4F:2B X509v3 Authority Key Identifier: keyid:26:8E:59:6E:29:1A:7F:AF:51:0D:1B:F7:28:48:DF:B0:86:D5:C9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jo5Zbikaf69RDRv3KEjfsIbVyUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914860F/4A96477A386E11F18432F34FB3833773/Jo5Zbikaf69RDRv3KEjfsIbVyUE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:0b:b9:4c:4c:d9:9b:71:a0:70:38:7a:91:7e:b7:03:ea: 42:06:b7:df:42:4d:5e:eb:17:04:be:4a:ef:3e:0f:f7:be:10: f3:5f:7e:24:92:43:cd:b1:79:fe:67:77:c7:77:6e:bf:ed:18: 8c:64:fd:93:26:bf:71:53:78:3f:86:87:0e:6b:b8:87:d1:7d: a6:76:3a:8b:59:9e:1f:e4:ec:f8:dd:98:7f:5f:30:c3:cf:e8: 70:6d:94:16:29:4f:52:03:c3:b2:65:e1:e9:69:c0:ae:d4:94: a8:9d:89:e9:56:77:cd:33:a0:07:ad:3d:81:34:82:3f:f0:ed: 2b:0a:5d:83:c3:15:03:3e:c4:97:90:35:f9:2a:13:cc:82:13: bc:1f:5f:51:7d:15:31:15:26:22:d7:a2:0c:8a:e9:c7:f0:15: 03:b0:ce:90:58:2e:ff:65:b5:20:49:96:da:fc:c1:0a:8f:27: d7:6b:b5:3c:45:18:64:e0:ea:91:c3:da:b4:bc:f2:05:6f:f0: 57:ca:3f:86:de:2b:9e:2e:6f:23:ec:89:2c:11:67:84:78:82: d7:d1:71:13:d0:cd:24:16:fe:5d:57:16:53:44:5a:bf:dd:6c: cd:cf:2f:ae:df:57:40:af:81:98:70:18:ac:e3:73:96:da:bb: e0:40:3d:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODYwRjExMC8GA1UEBRMoMjY4RTU5NkUyOTFBN0ZBRjUxMEQxQkY3Mjg0OERGQjA4 NkQ1Qzk0MTAeFw0yNjA0MTcwODU0MzVaFw0yNjA0MjQwODU0MzVaMBgxFjAUBgNV BAMTDTY5ZTFmNTRiLTY4ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCimijSOZ3dEbMUV2FY13BuLXwbXGvqNfKQcgsTz1CUintoYAHON7CwDeTYkBIx 84KL2whEPy6ofa4VDBPBbAcfCG+G5ndkMXaEUP3jCeQ62IgeIUqFoxTtur56bPIz rPy6tfUi+0i7eQlARkUGt6nhhxHJX4XNsTAODk3TSNtD7HuuXbUed9mFRcbb0tH6 M/Em63CRK5O3oDOWHbQQL5EFYitaFlPDs7tu8bV5MuSe/3BrhU5NmImh3qrjEtdd s4DGZ87ThfJ2EBkay870tJA6bNo3OeXtYfpHo8dyWbwtftxWM4sHn8r0cHp9L1Aw ObLlRaH43JrXLLS7n4R0znp/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/QBceiyD DrS+UrG78nUdb9AbTyswHwYDVR0jBBgwFoAUJo5Zbikaf69RDRv3KEjfsIbVyUEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NjBGLzRBOTY0NzdBMzg2 RTExRjE4NDMyRjM0RkIzODMzNzczL0pvNVpiaWthZjY5UkRSdjNLRWpmc0liVnlV RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSm81WmJpa2FmNjlSRFJ2M0tFamZzSWJWeVVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 NjBGLzRBOTY0NzdBMzg2RTExRjE4NDMyRjM0RkIzODMzNzczL0pvNVpiaWthZjY5 UkRSdjNLRWpmc0liVnlVRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACUQu5TEzZm3GgcDh6kX63A+pCBrffQk1e6xcEvkrvPg/3vhDzX34kkkPNsXn+ Z3fHd26/7RiMZP2TJr9xU3g/hocOa7iH0X2mdjqLWZ4f5Oz43Zh/XzDDz+hwbZQW KU9SA8OyZeHpacCu1JSonYnpVnfNM6AHrT2BNII/8O0rCl2DwxUDPsSXkDX5KhPM ghO8H19RfRUxFSYi16IMiunH8BUDsM6QWC7/ZbUgSZba/MEKjyfXa7U8RRhk4OqR w9q0vPIFb/BXyj+G3iueLm8j7IksEWeEeILX0XET0M0kFv5dVxZTRFq/3WzNzy+u 31dAr4GYcBis43OW2rvgQD3t -----END CERTIFICATE-----Generated at Fri Apr 17 16:11:10 2026 by rpki-client