$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: 7cs/5kcb1INT+D2y/dhPgnNswcctlN6voG2EO/EHea8= Subject key identifier: 89:24:E5:A8:5A:7A:3E:D9:95:57:CD:1E:C1:44:B1:27:23:13:30:2E Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 3546 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 353C Signing time: Thu 16 Apr 2026 14:22:20 +0000 Manifest this update: Thu 16 Apr 2026 14:22:19 +0000 Manifest next update: Thu 23 Apr 2026 14:22:19 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 69GezkaqwFOqkZL/awmz+HVvamI6EtGmTqtRVUHbVFA=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 2zWATfmM8von1Mw8uXlPyMdmDI3bUKTZAgUpWfoAgyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13638 (0x3546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Apr 16 14:22:19 2026 GMT Not After : Apr 23 14:22:19 2026 GMT Subject: CN=69e0f09c-a57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:4b:9c:44:cc:c9:8c:86:cb:8d:2e:ba:ae: c0:ac:22:a6:3f:60:ed:7f:b6:b2:d4:64:fb:60:85: 4b:b3:04:02:36:f6:ba:7e:83:3b:0c:14:b2:62:05: 77:49:08:48:c8:42:e6:07:57:7a:7a:ca:f0:b3:4b: 77:04:91:95:b2:b0:99:eb:49:1a:f5:8f:d0:2e:3c: 7a:87:ad:56:da:f5:36:20:af:73:41:a1:a4:8b:29: bf:b4:7e:81:56:a9:c6:e1:5d:1f:75:8b:86:1d:0f: 42:b4:c8:d4:a0:a5:17:72:30:d6:77:22:2d:ea:d0: 6f:fa:70:ea:1d:c9:2e:e5:7c:89:0f:56:5f:80:bb: f7:c4:0d:5e:e9:30:f4:6f:c4:41:ff:3f:00:d1:1c: 9f:51:32:7e:8a:76:47:82:4a:0e:7f:a7:2a:00:09: 8a:8c:bd:69:0d:45:21:39:f8:f2:65:b4:80:dd:b7: 37:64:78:6c:b3:7d:de:27:5a:f3:6a:52:39:0e:6b: 4e:f1:4f:f3:54:ea:2d:86:17:ae:af:6f:53:07:4b: 5d:4e:b7:63:ea:c2:72:cb:45:92:48:17:31:8e:7b: 06:8e:2d:bb:96:d9:b9:fd:21:1f:ce:6c:4e:49:fb: ef:31:83:66:47:68:6c:1f:3a:21:7b:44:5c:19:9c: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:24:E5:A8:5A:7A:3E:D9:95:57:CD:1E:C1:44:B1:27:23:13:30:2E X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:14:65:ee:29:98:95:11:9c:b5:a3:54:3f:8f:8b:e8:ce:dc: e1:c7:ad:98:77:4d:61:53:c4:6f:c9:b6:b8:f7:0a:27:ea:3e: 54:2b:7f:74:da:28:28:0f:ac:6b:24:35:dd:a0:4d:32:e4:56: 88:12:6b:8c:e8:b5:5b:1e:e2:94:40:d5:d5:53:c5:72:20:76: 21:be:37:b9:d2:b2:00:81:7d:1c:96:2c:07:78:bb:5e:72:2b: 09:89:df:a1:32:2a:87:7c:1f:74:59:01:b3:af:e3:60:6a:f0: 90:bd:6e:d2:3b:60:ce:f9:a8:f5:48:04:15:b5:46:d4:ee:c4: 65:e5:59:32:8c:bf:f1:3c:1b:5d:2f:83:27:bb:4d:2c:ba:72: ee:63:19:7e:f0:82:98:76:be:22:1d:40:0c:f3:8f:43:92:72: 51:97:59:e3:c6:dd:64:30:ef:64:df:29:25:b8:89:69:a3:16: d6:7f:b4:94:bf:4f:ef:bc:91:3c:3f:2a:9a:27:8d:40:d8:fd: a1:77:c7:ab:f7:9b:8f:42:db:48:8b:bb:45:8d:10:3a:1b:8c: 98:cc:9e:92:3c:1a:b4:f8:00:20:bf:d0:6d:24:ab:b8:41:37: 0e:f6:b9:4d:ad:b5:6f:8c:8a:87:02:3f:3f:84:c0:23:ca:7a: fd:2f:28:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjYwNDE2MTQyMjE5WhcNMjYwNDIzMTQyMjE5WjAYMRYwFAYD VQQDEw02OWUwZjA5Yy1hNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutxLnETMyYyGy40uuq7ArCKmP2Dtf7ay1GT7YIVLswQCNva6foM7DBSyYgV3 SQhIyELmB1d6esrws0t3BJGVsrCZ60ka9Y/QLjx6h61W2vU2IK9zQaGkiym/tH6B VqnG4V0fdYuGHQ9CtMjUoKUXcjDWdyIt6tBv+nDqHcku5XyJD1ZfgLv3xA1e6TD0 b8RB/z8A0RyfUTJ+inZHgkoOf6cqAAmKjL1pDUUhOfjyZbSA3bc3ZHhss33eJ1rz alI5DmtO8U/zVOothheur29TB0tdTrdj6sJyy0WSSBcxjnsGji27ltm5/SEfzmxO SfvvMYNmR2hsHzohe0RcGZyvVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkk5aha ej7ZlVfNHsFEsScjEzAuMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuxRl7imYlRGctaNUP4+L6M7c4cetmHdNYVPEb8m2uPcKJ+o+VCt/dNooKA+s ayQ13aBNMuRWiBJrjOi1Wx7ilEDV1VPFciB2Ib43udKyAIF9HJYsB3i7XnIrCYnf oTIqh3wfdFkBs6/jYGrwkL1u0jtgzvmo9UgEFbVG1O7EZeVZMoy/8TwbXS+DJ7tN LLpy7mMZfvCCmHa+Ih1ADPOPQ5JyUZdZ48bdZDDvZN8pJbiJaaMW1n+0lL9P77yR PD8qmieNQNj9oXfHq/ebj0LbSIu7RY0QOhuMmMyekjwatPgAIL/QbSSruEE3Dva5 Ta21b4yKhwI/P4TAI8p6/S8ovw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:13 2026 by rpki-client