$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: DXzO2kQrZGSpWtLpNMji+EhF7WvJZEWwD2z8pTGdXGg= Subject key identifier: DD:71:91:BD:8A:7E:2E:0E:B4:A8:77:24:13:B6:C0:2F:D5:06:C3:EC Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 0141 Signing time: Fri 17 Apr 2026 05:00:59 +0000 Manifest this update: Fri 17 Apr 2026 05:00:59 +0000 Manifest next update: Fri 24 Apr 2026 05:00:59 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: sDd9Q72hJx5YYvYP+Mygrx1rgFBOsixDtncscOP+/UE=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Apr 17 05:00:59 2026 GMT Not After : Apr 24 05:00:59 2026 GMT Subject: CN=69e1be8b-c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:a2:8b:0c:d2:a7:a6:f8:ae:84:4e:19:ae: 5c:7a:d8:dd:9e:f2:5d:03:79:c6:eb:1f:27:e3:1e: 76:89:28:cc:87:b2:bf:4a:2f:b0:59:62:85:dc:43: fb:6c:ae:7b:a3:95:23:e0:59:1c:93:9c:58:1b:d3: 5b:f7:04:2d:b3:55:1b:59:2e:24:59:ad:7e:7f:d2: 5f:c7:21:c3:e0:53:37:7b:50:30:ee:17:9b:17:0e: 3d:f4:0d:49:69:55:18:7e:8f:06:c8:a3:05:3b:3c: 18:09:a1:e0:e5:6a:b0:a6:56:7f:80:d7:1b:b4:4c: 43:13:07:01:fb:4b:07:60:0b:48:a4:d1:4f:31:3c: d6:8c:28:e8:70:31:ea:eb:1c:1f:fe:bc:10:31:3c: d2:3e:3f:eb:46:e0:1c:5e:00:3f:3c:6f:50:8c:20: 73:ab:da:86:31:d3:b6:55:bd:a2:33:98:38:d5:cd: 93:c8:f4:67:4a:eb:c6:b7:2a:26:29:9c:f9:16:9b: 41:de:94:8d:06:f7:89:25:dc:71:a3:b9:9c:2c:c6: 7d:36:73:a6:6e:cf:6d:ac:c4:14:e9:46:64:01:6e: ce:b6:dc:35:50:c1:0d:61:8f:c5:90:ec:43:e1:ab: 28:9b:99:64:2d:36:ca:95:ff:d0:78:b8:12:24:7f: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:91:BD:8A:7E:2E:0E:B4:A8:77:24:13:B6:C0:2F:D5:06:C3:EC X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c1:13:e8:ed:c5:03:db:30:bb:ac:e1:27:22:88:46:5c:f2: 2c:5c:79:05:79:84:b6:d8:3a:93:ac:8a:2d:b4:61:0b:d1:19: c4:b9:c6:54:5b:46:e4:b5:9a:bc:35:0c:4a:b0:38:66:17:67: 3a:80:6d:1c:a3:4b:ae:71:fa:f4:95:6e:6a:e7:68:57:02:c5: 1f:5e:d1:08:2e:e0:f7:f0:ae:23:0f:c1:68:51:d5:b1:32:0c: 96:24:3d:00:d9:a0:f8:9a:cd:0c:20:f6:34:48:1b:da:4f:db: 16:2c:82:0b:c4:50:c7:56:e8:c1:75:4e:c3:8c:b7:cb:3e:ef: 59:b7:06:3a:66:58:ad:49:bc:65:32:9e:49:78:4e:8d:3b:55: 10:3d:6d:fa:db:ab:0d:8a:af:34:c1:df:07:aa:7c:29:8c:d1: d8:e0:64:4d:1b:64:f0:20:94:63:1a:9d:bf:03:bb:e2:5d:ea: de:89:31:d0:b9:c4:79:2b:a5:fd:72:e1:d5:5b:0d:e0:ab:02: 46:c3:7c:df:ae:f3:0b:e8:c1:fe:55:ee:0a:24:69:5a:f2:88: 85:24:42:d4:2e:2b:5d:00:eb:9a:62:26:4b:7d:4c:e8:8f:f3: c6:51:ea:58:97:1b:19:03:21:eb:3a:cc:4a:db:1d:7a:92:c8: fa:ba:1a:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjYwNDE3MDUwMDU5WhcNMjYwNDI0MDUwMDU5WjAYMRYwFAYD VQQDEw02OWUxYmU4Yi1jNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqeiiwzSp6b4roROGa5cetjdnvJdA3nG6x8n4x52iSjMh7K/Si+wWWKF3EP7 bK57o5Uj4Fkck5xYG9Nb9wQts1UbWS4kWa1+f9JfxyHD4FM3e1Aw7hebFw499A1J aVUYfo8GyKMFOzwYCaHg5WqwplZ/gNcbtExDEwcB+0sHYAtIpNFPMTzWjCjocDHq 6xwf/rwQMTzSPj/rRuAcXgA/PG9QjCBzq9qGMdO2Vb2iM5g41c2TyPRnSuvGtyom KZz5FptB3pSNBveJJdxxo7mcLMZ9NnOmbs9trMQU6UZkAW7Ottw1UMENYY/FkOxD 4asom5lkLTbKlf/QeLgSJH//twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1xkb2K fi4OtKh3JBO2wC/VBsPsMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWcET6O3FA9swu6zhJyKIRlzyLFx5BXmEttg6k6yKLbRhC9EZxLnGVFtG5LWa vDUMSrA4ZhdnOoBtHKNLrnH69JVuaudoVwLFH17RCC7g9/CuIw/BaFHVsTIMliQ9 ANmg+JrNDCD2NEgb2k/bFiyCC8RQx1bowXVOw4y3yz7vWbcGOmZYrUm8ZTKeSXhO jTtVED1t+turDYqvNMHfB6p8KYzR2OBkTRtk8CCUYxqdvwO74l3q3okx0LnEeSul /XLh1VsN4KsCRsN8367zC+jB/lXuCiRpWvKIhSRC1C4rXQDrmmImS31M6I/zxlHq WJcbGQMh6zrMStsdepLI+roauA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:59 2026 by rpki-client