$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft File: JSBFeBemYmHoez5BhOhi2ka6nw0.mft (raw, json) Hash identifier: F4wd6Cx7yg56o3Wb4EnAS9NVa8m7Fj0R20Kx3h6mDwQ= Subject key identifier: 6F:D5:25:D7:72:F2:70:66:CE:ED:1B:B4:A0:7C:24:7D:A0:EF:8C:25 Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D Certificate issuer: /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft Manifest number: 070C Signing time: Thu 16 Apr 2026 21:50:22 +0000 Manifest this update: Thu 16 Apr 2026 21:50:22 +0000 Manifest next update: Thu 23 Apr 2026 21:50:22 +0000 Files and hashes: 1: JSBFeBemYmHoez5BhOhi2ka6nw0.crl (hash: M74cwUavUupfpNUGdNkJr3wTGdOxmR7eiH41l1/aUJQ=) 2: 81ACEA76E74711EFA8F61A3DC4F9AE02.roa (hash: kfS4iOZmAZy5oXv5dUoQWf5OndRU1jlnd3+B/6ccXOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Validity Not Before: Apr 16 21:50:22 2026 GMT Not After : Apr 23 21:50:22 2026 GMT Subject: CN=69e1599e-0aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:0e:eb:bf:9e:7b:5a:85:45:c2:28:49:6f: 58:ae:0e:51:f5:2f:de:21:34:1f:27:b4:84:c8:1a: 3f:d4:4c:42:19:5c:00:44:f5:74:c2:38:63:79:a2: cf:3b:9e:45:94:40:90:d7:3d:65:b6:c1:66:bf:ef: 12:9a:3e:58:46:a8:24:25:7d:67:3c:48:dc:d8:09: 1f:c7:4e:fd:0c:40:61:7f:52:2f:30:93:86:89:fe: 66:ee:3f:34:bb:88:e2:f2:7e:81:80:ce:2f:85:77: 04:5b:b1:1e:fe:a3:47:f7:f0:a9:47:5b:93:9e:a6: d1:11:de:2b:64:4f:df:86:62:4d:1b:e3:63:f1:e0: f6:e9:7a:9c:0c:19:03:8d:8b:73:a1:56:42:47:20: 0c:fb:ec:7c:44:80:66:f3:53:dc:dc:b3:20:57:34: d6:bf:b4:b6:b7:dd:9f:00:67:9b:66:ab:a9:c8:0c: 9d:30:c1:73:e8:e3:ab:5a:ff:c0:48:09:17:3b:40: 1a:7f:47:a3:63:6d:23:b0:d7:32:08:30:2d:41:81: 83:bf:0a:32:23:e9:30:b9:84:de:32:eb:0a:c8:81: 31:52:5b:fe:16:28:7c:1e:9e:02:aa:5a:75:f1:a4: c5:88:d6:c4:1c:2d:29:91:93:8c:16:90:22:74:3d: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:25:D7:72:F2:70:66:CE:ED:1B:B4:A0:7C:24:7D:A0:EF:8C:25 X509v3 Authority Key Identifier: keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0f:68:c9:cf:f1:0c:5f:7b:96:48:09:71:a4:88:cd:ad:25: 91:1e:fd:f4:63:aa:69:8e:3f:58:c4:af:55:2e:58:b5:84:40: e7:d1:ca:fa:5d:48:e4:80:4a:ca:d2:b5:ef:f0:22:15:20:a9: 39:04:f1:da:8e:92:65:b6:41:9c:ce:7f:e5:62:88:66:df:96: 3c:e0:f8:c0:14:cb:9b:0c:1b:3a:b9:69:54:32:97:64:fd:4e: fa:ba:c2:46:48:31:08:38:c1:b6:a4:69:e4:c0:a0:82:48:eb: ec:1b:72:e8:26:8a:c2:05:6f:fc:b6:d4:3a:2e:c1:57:7e:ba: 96:79:a5:dc:b9:9f:c1:ac:d7:20:43:97:e8:a9:8b:35:66:89: a9:fd:b9:49:ca:90:f7:37:d5:1d:5a:f2:77:11:b8:0f:70:4a: c4:33:6a:61:19:c0:6f:3a:d4:7e:1c:34:a9:7c:e6:75:d2:aa: d3:4e:9b:f3:91:9f:9a:25:86:20:a6:44:6b:09:3b:b3:66:94: e8:87:be:ca:35:fd:5a:de:70:00:03:d2:cb:ed:81:e2:c7:42: 12:ff:bd:8c:34:37:df:4b:44:02:82:56:5a:e1:3a:fa:22:41: 8a:f8:5d:51:ea:05:f7:da:79:19:7a:34:37:b4:c3:ce:e2:d7: e6:8f:31:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFQjUxMTAvBgNVBAUTKDI1MjA0NTc4MTdBNjYyNjFFODdCM0U0MTg0RTg2MkRB NDZCQTlGMEQwHhcNMjYwNDE2MjE1MDIyWhcNMjYwNDIzMjE1MDIyWjAYMRYwFAYD VQQDEw02OWUxNTk5ZS0wYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGkO67+ee1qFRcIoSW9Yrg5R9S/eITQfJ7SEyBo/1ExCGVwARPV0wjhjeaLP O55FlECQ1z1ltsFmv+8Smj5YRqgkJX1nPEjc2Akfx079DEBhf1IvMJOGif5m7j80 u4ji8n6BgM4vhXcEW7Ee/qNH9/CpR1uTnqbREd4rZE/fhmJNG+Nj8eD26XqcDBkD jYtzoVZCRyAM++x8RIBm81Pc3LMgVzTWv7S2t92fAGebZqupyAydMMFz6OOrWv/A SAkXO0Aaf0ejY20jsNcyCDAtQYGDvwoyI+kwuYTeMusKyIExUlv+Fih8Hp4Cqlp1 8aTFiNbEHC0pkZOMFpAidD3PCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/VJddy 8nBmzu0btKB8JH2g74wlMB8GA1UdIwQYMBaAFCUgRXgXpmJh6Hs+QYToYtpGup8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUVCNS9DNTdFMzhGQzdG OUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVltSG9lejVCaE9oaTJrYTZu dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTQkZlQmVtWW1Ib2V6NUJoT2hpMmthNm53MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUVCNS9DNTdFMzhGQzdGOUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVlt SG9lejVCaE9oaTJrYTZudzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXA9oyc/xDF97lkgJcaSIza0lkR799GOqaY4/WMSvVS5YtYRA59HK+l1I5IBK ytK17/AiFSCpOQTx2o6SZbZBnM5/5WKIZt+WPOD4wBTLmwwbOrlpVDKXZP1O+rrC RkgxCDjBtqRp5MCggkjr7Bty6CaKwgVv/LbUOi7BV366lnml3LmfwazXIEOX6KmL NWaJqf25ScqQ9zfVHVrydxG4D3BKxDNqYRnAbzrUfhw0qXzmddKq006b85GfmiWG IKZEawk7s2aU6Ie+yjX9Wt5wAAPSy+2B4sdCEv+9jDQ330tEAoJWWuE6+iJBivhd UeoF99p5GXo0N7TDzuLX5o8xxg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:33 2026 by rpki-client