$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: 3kZcJHI8BR5GX5Agfk63RS/qNyXUoF8y2rM2/yYWop8= Subject key identifier: DD:63:BF:9C:E9:6F:89:E0:5A:3A:99:68:D3:C2:D2:F2:F1:8C:CE:4E Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 08D6 Signing time: Thu 16 Apr 2026 20:18:48 +0000 Manifest this update: Thu 16 Apr 2026 20:18:47 +0000 Manifest next update: Thu 23 Apr 2026 20:18:47 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: nf6+lZUZntyCUa5NjfcqukdP50+epA0R4JIr7B56v+c=) 2: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: JIARhEibOKG+hTmPalueLjtwAHjRt0AI7B/r+GOVfk8=) 3: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: R9VZPmnH58tfNqZqKQPswISeOvXhiF0XOkBwsgMhZbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Apr 16 20:18:47 2026 GMT Not After : Apr 23 20:18:47 2026 GMT Subject: CN=69e14427-dac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:0d:c7:32:d3:51:58:06:c7:b3:ac:e8:e2: 96:67:c2:05:e0:2c:8b:c1:72:20:c9:14:53:92:c7: ca:df:16:5f:d0:b3:f0:21:b4:fd:3b:72:b6:a4:51: dc:76:ed:d4:ad:0a:cd:cd:7f:4e:1a:37:62:37:85: 97:7f:68:10:6e:c2:81:94:af:f5:2d:74:3e:5c:bd: 2f:42:e6:34:70:31:7e:0f:4c:b8:40:bd:49:48:68: 49:89:e4:1f:19:ee:9f:43:32:b8:16:6b:32:91:05: 84:49:ff:af:33:e2:56:74:6c:fd:0c:ca:9a:2d:24: 59:1c:d1:ce:16:f7:84:14:0e:57:90:eb:97:43:21: 4e:81:29:56:6f:5d:f0:29:4d:81:41:84:88:dc:ab: 09:e5:e0:19:04:52:a2:a9:ec:f9:ea:4c:06:21:73: 5c:37:76:92:6c:d7:ee:16:a5:1f:4f:19:39:19:74: 04:37:64:4d:1e:29:48:e0:41:fa:02:56:e3:7d:b3: e2:61:1e:ea:7d:73:17:ac:0b:2a:c1:c9:d2:97:c0: 75:84:05:20:04:e4:1a:92:f4:08:3d:b1:7e:f1:3c: 87:3b:6a:aa:1e:68:c7:77:b9:10:b3:a8:e6:14:6d: fa:85:2f:cc:99:24:12:0b:a8:4d:3b:5e:26:08:f7: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:63:BF:9C:E9:6F:89:E0:5A:3A:99:68:D3:C2:D2:F2:F1:8C:CE:4E X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:25:fa:fe:99:9c:f9:28:15:b5:6f:47:7f:64:20:15:05:88: cf:2c:8c:47:ad:61:09:e3:d7:0a:e5:d1:2b:d8:1b:7f:a3:74: c7:ca:fe:2d:8e:d2:87:fd:f5:8a:51:1a:78:2d:fc:6b:bb:33: 91:da:c7:4a:62:7d:98:7c:e8:ec:8c:43:dd:29:67:7b:48:05: 1e:21:cd:a3:2e:2a:1e:84:9a:5f:29:cf:a9:50:f9:8b:b7:7c: 62:f1:a8:27:4b:2b:33:01:d9:5c:67:4e:97:f5:f6:95:7e:0d: 42:62:4d:cf:0d:c6:4a:2f:e6:29:a5:04:a0:25:b2:ed:26:f3: 08:2f:53:f0:07:fc:2c:0b:9c:47:b1:5c:b5:df:30:2e:79:bf: 6f:81:f3:df:db:b5:b8:28:81:af:4b:22:93:31:cd:4d:68:14: 76:bd:2b:aa:a6:8b:7c:79:2a:d5:b0:94:b1:ff:50:92:77:44: 54:30:3b:81:51:b0:d5:0b:73:68:85:7e:71:7f:3a:22:c5:b5: 44:a9:33:9e:ab:bf:cb:d6:4e:9b:00:43:2c:66:01:e1:c6:cd: a5:6b:51:b7:54:03:18:99:cf:4f:eb:11:bb:7a:75:69:8a:47: 6e:c3:c3:63:56:c8:ce:fe:cc:7a:9a:f8:6d:fe:ea:3d:d2:2e: 3e:59:36:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjYwNDE2MjAxODQ3WhcNMjYwNDIzMjAxODQ3WjAYMRYwFAYD VQQDEw02OWUxNDQyNy1kYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjkQNxzLTUVgGx7Os6OKWZ8IF4CyLwXIgyRRTksfK3xZf0LPwIbT9O3K2pFHc du3UrQrNzX9OGjdiN4WXf2gQbsKBlK/1LXQ+XL0vQuY0cDF+D0y4QL1JSGhJieQf Ge6fQzK4FmsykQWESf+vM+JWdGz9DMqaLSRZHNHOFveEFA5XkOuXQyFOgSlWb13w KU2BQYSI3KsJ5eAZBFKiqez56kwGIXNcN3aSbNfuFqUfTxk5GXQEN2RNHilI4EH6 AlbjfbPiYR7qfXMXrAsqwcnSl8B1hAUgBOQakvQIPbF+8TyHO2qqHmjHd7kQs6jm FG36hS/MmSQSC6hNO14mCPdtxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1jv5zp b4ngWjqZaNPC0vLxjM5OMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwSX6/pmc+SgVtW9Hf2QgFQWIzyyMR61hCePXCuXRK9gbf6N0x8r+LY7Sh/31 ilEaeC38a7szkdrHSmJ9mHzo7IxD3Slne0gFHiHNoy4qHoSaXynPqVD5i7d8YvGo J0srMwHZXGdOl/X2lX4NQmJNzw3GSi/mKaUEoCWy7SbzCC9T8Af8LAucR7Fctd8w Lnm/b4Hz39u1uCiBr0sikzHNTWgUdr0rqqaLfHkq1bCUsf9QkndEVDA7gVGw1Qtz aIV+cX86IsW1RKkznqu/y9ZOmwBDLGYB4cbNpWtRt1QDGJnPT+sRu3p1aYpHbsPD Y1bIzv7Mepr4bf7qPdIuPlk2Kg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:24 2026 by rpki-client