$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: DHEF+DXoO9UTlD5hDruG7Ev9pUkS9ne1a2IVlRIzhQ8= Subject key identifier: 38:B7:8B:98:D0:CC:AA:47:F2:48:1B:18:F1:AE:24:0E:A3:73:1D:32 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 0280 Signing time: Fri 17 Apr 2026 01:37:07 +0000 Manifest this update: Fri 17 Apr 2026 01:37:06 +0000 Manifest next update: Fri 24 Apr 2026 01:37:06 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: WD3zY3PJYgeDzQ+82T3KPMfb2e9iV/xJ4ofy7apezmg=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: SrQLMleMB4YU3ZEQhfOBgMc2EpS7tNcL9YRSRP+wumw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Apr 17 01:37:06 2026 GMT Not After : Apr 24 01:37:06 2026 GMT Subject: CN=69e18ec2-f43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:99:30:20:08:63:5d:bc:24:f3:98:9c:07: 4d:26:76:25:11:39:6c:86:1b:db:0a:61:15:6b:da: 4b:b9:d6:03:34:80:d6:df:95:66:78:b7:72:75:5d: b8:3a:8d:85:c7:df:48:ec:5f:a9:77:6f:40:64:d3: a8:89:06:a6:fd:ab:b5:5a:eb:be:22:7c:19:e6:82: 29:d0:0e:04:78:82:4d:15:e2:4c:ff:31:f3:1b:82: 86:c2:27:26:4d:99:3d:60:e7:49:95:f4:da:02:53: 69:cb:7c:f5:4a:5b:dd:9c:e2:ba:98:bb:cd:eb:0a: 2d:80:6b:85:4c:1d:80:65:9b:4d:d9:22:04:6f:32: fe:21:69:8b:1c:7b:f0:4d:6e:db:f9:a9:af:40:4e: 9f:04:80:67:18:91:83:19:c7:26:c2:57:83:cd:48: 04:d0:04:54:6c:45:19:fc:6c:be:e7:d6:91:5d:cb: ad:a1:56:d0:40:09:22:ce:76:9b:06:04:e1:32:44: bc:3d:13:29:e3:d5:45:ee:90:28:28:fb:8f:f1:b9: ae:45:0c:41:de:3e:fa:60:cc:7b:e3:78:21:23:76: 24:65:3b:82:81:e7:d9:63:3b:79:59:03:c1:e9:29: 6b:60:e7:4a:20:0e:f2:14:4e:e4:03:7a:6d:4e:26: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:8B:98:D0:CC:AA:47:F2:48:1B:18:F1:AE:24:0E:A3:73:1D:32 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:42:e5:9a:34:28:28:d1:8e:be:95:30:cf:5d:81:95:bc:7c: 7d:7a:a5:47:b4:f1:67:4a:7f:1b:19:1b:f1:b9:bc:7a:bb:1a: 62:37:e3:29:bf:cc:b0:1c:bb:43:85:15:bd:1d:a3:aa:ca:d4: 25:3d:8e:09:ed:1e:9b:3a:e6:44:e3:56:ce:a6:8b:93:eb:fa: 86:39:e9:bb:d3:40:e2:1c:ba:50:e0:9e:a1:5d:f7:a1:e3:4a: 2d:12:03:3d:be:c3:f6:63:b0:67:df:6e:8b:f6:62:f9:13:69: 74:f4:c9:14:62:85:73:e2:00:f1:a9:04:0f:95:e5:6f:4b:ba: d4:0b:2c:7d:3f:76:9e:41:a2:0e:75:74:cd:da:53:54:0e:51: 0c:cd:fa:2e:ac:87:99:2d:47:8a:d3:e3:78:9c:cd:b4:69:85: e6:55:36:8e:ad:96:18:d2:30:18:b0:bc:ee:b0:8d:fe:63:7b: 3b:89:30:fe:a0:75:dc:4b:31:e1:7d:7a:8d:84:8c:c3:46:61: 62:91:e3:12:86:4b:18:08:fc:16:28:03:c4:68:e3:0a:4d:bf: 69:53:8f:05:b2:9a:6a:e6:2c:fd:17:dc:bb:ae:62:df:fa:a6: a6:6a:fd:80:75:6c:9f:29:14:62:9f:4e:be:35:3c:ee:99:43: 2a:c8:1a:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjYwNDE3MDEzNzA2WhcNMjYwNDI0MDEzNzA2WjAYMRYwFAYD VQQDEw02OWUxOGVjMi1mNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI6ZMCAIY128JPOYnAdNJnYlETlshhvbCmEVa9pLudYDNIDW35VmeLdydV24 Oo2Fx99I7F+pd29AZNOoiQam/au1Wuu+InwZ5oIp0A4EeIJNFeJM/zHzG4KGwicm TZk9YOdJlfTaAlNpy3z1SlvdnOK6mLvN6wotgGuFTB2AZZtN2SIEbzL+IWmLHHvw TW7b+amvQE6fBIBnGJGDGccmwleDzUgE0ARUbEUZ/Gy+59aRXcutoVbQQAkiznab BgThMkS8PRMp49VF7pAoKPuP8bmuRQxB3j76YMx743ghI3YkZTuCgefZYzt5WQPB 6SlrYOdKIA7yFE7kA3ptTiapRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDi3i5jQ zKpH8kgbGPGuJA6jcx0yMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUULlmjQoKNGOvpUwz12Blbx8fXqlR7TxZ0p/Gxkb8bm8ersaYjfjKb/MsBy7 Q4UVvR2jqsrUJT2OCe0emzrmRONWzqaLk+v6hjnpu9NA4hy6UOCeoV33oeNKLRID Pb7D9mOwZ99ui/Zi+RNpdPTJFGKFc+IA8akED5Xlb0u61AssfT92nkGiDnV0zdpT VA5RDM36LqyHmS1HitPjeJzNtGmF5lU2jq2WGNIwGLC87rCN/mN7O4kw/qB13Esx 4X16jYSMw0ZhYpHjEoZLGAj8FigDxGjjCk2/aVOPBbKaauYs/Rfcu65i3/qmpmr9 gHVsnykUYp9OvjU87plDKsga4w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:06:12 2026 by rpki-client