$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: u9r+bAWHqSjlarI3PyNzdKEjhDYtNJVGn0UhplOvpNo= Subject key identifier: 36:D3:9A:23:44:45:96:3A:A3:17:2C:EF:D0:29:5F:FB:6D:A2:B2:28 Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 048F Signing time: Thu 16 Apr 2026 23:55:07 +0000 Manifest this update: Thu 16 Apr 2026 23:55:06 +0000 Manifest next update: Thu 23 Apr 2026 23:55:06 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 5eVdrrqyaNiJuY+nmqEFztW+yTw4phqZHY781HnxQjQ=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: Apr 16 23:55:06 2026 GMT Not After : Apr 23 23:55:06 2026 GMT Subject: CN=69e176db-05e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:93:a3:bd:a0:18:ba:01:91:7a:78:3c:a0: e5:ce:10:67:dc:67:6d:96:aa:96:c3:16:c7:70:f4: 2c:63:67:27:c0:67:85:bd:22:91:9d:f7:f5:3d:db: 28:9b:10:96:15:43:f9:53:5c:ac:2f:89:51:bb:c8: c3:95:10:4c:05:df:cd:89:d7:d9:5f:c7:b6:4a:fc: 09:d8:b5:87:74:43:b5:97:ba:b3:68:6d:7a:c2:78: 0d:88:62:82:16:23:99:fd:3d:42:47:0b:a0:58:4b: f7:6f:4e:4a:87:0a:e3:25:3d:61:04:a8:29:72:93: 8f:d8:7d:df:2a:dd:17:be:33:21:c0:2b:c7:24:20: 85:00:b5:61:51:27:e5:a7:15:82:94:5a:71:17:a3: 1d:27:0c:30:20:27:1c:2d:1c:5a:63:ec:0f:b5:cd: 3a:77:2f:83:9b:32:d0:ae:4e:c1:8e:e9:46:97:61: d2:6b:5d:fe:3f:82:62:72:a7:ca:22:5e:ed:c3:41: e6:19:a0:09:eb:36:07:a8:83:ae:0b:1b:b1:a7:d5: 7c:5a:11:fe:ed:6e:47:71:f1:b7:31:0e:64:45:41: a0:17:c5:e2:aa:8f:f5:52:cf:f7:4a:a2:68:8e:91: 1e:ba:39:c2:f2:cd:c6:1e:14:a5:02:d4:4b:99:4e: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:9A:23:44:45:96:3A:A3:17:2C:EF:D0:29:5F:FB:6D:A2:B2:28 X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:7a:e2:b0:ee:4f:86:e7:b3:62:a5:e6:2b:e0:e9:84:f2:27: 31:68:21:8f:60:b5:a6:7e:70:ed:d4:bb:86:d3:0f:68:32:07: 97:95:12:cc:2e:da:e3:d2:3a:47:18:ef:49:fb:ac:bd:b2:b2: bb:49:74:d8:21:62:8c:61:6d:16:bb:41:91:a3:57:e9:5a:e0: 67:35:7a:9f:00:4c:3c:49:d9:64:9c:48:03:c4:fc:09:0c:8c: a3:e8:0e:9a:39:8e:ae:2e:21:4e:49:94:24:db:40:e3:20:70: 44:2c:e6:1e:1d:48:36:89:ec:1c:dd:1e:e3:01:53:b7:a3:79: b7:fe:fe:3a:f9:e6:13:3e:b1:01:e7:1c:28:43:27:d0:97:46: 06:64:fa:07:bf:c5:0d:fd:65:31:30:8c:3a:8b:b7:35:de:cf: 70:6b:2b:9f:ea:3a:04:d4:40:68:d0:c5:2b:8d:8a:25:3c:ed: b2:bc:eb:d9:de:eb:36:51:99:26:29:fd:1c:5a:04:87:e0:6c: 27:47:b8:da:25:36:51:a1:48:4e:b8:5c:e6:94:8e:6d:9f:1e: 49:a9:a2:f5:21:7d:80:17:cf:8f:da:11:58:b9:59:80:ff:e4: 28:06:7b:5a:f6:27:c7:d6:aa:5f:f9:bb:21:cd:98:81:58:a0: 49:ff:f0:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjYwNDE2MjM1NTA2WhcNMjYwNDIzMjM1NTA2WjAYMRYwFAYD VQQDEw02OWUxNzZkYi0wNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXaTo72gGLoBkXp4PKDlzhBn3GdtlqqWwxbHcPQsY2cnwGeFvSKRnff1Pdso mxCWFUP5U1ysL4lRu8jDlRBMBd/NidfZX8e2SvwJ2LWHdEO1l7qzaG16wngNiGKC FiOZ/T1CRwugWEv3b05KhwrjJT1hBKgpcpOP2H3fKt0XvjMhwCvHJCCFALVhUSfl pxWClFpxF6MdJwwwICccLRxaY+wPtc06dy+DmzLQrk7BjulGl2HSa13+P4JicqfK Il7tw0HmGaAJ6zYHqIOuCxuxp9V8WhH+7W5HcfG3MQ5kRUGgF8Xiqo/1Us/3SqJo jpEeujnC8s3GHhSlAtRLmU4IOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbTmiNE RZY6oxcs79ApX/ttorIoMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQHrisO5PhuezYqXmK+DphPInMWghj2C1pn5w7dS7htMPaDIHl5USzC7a49I6 RxjvSfusvbKyu0l02CFijGFtFrtBkaNX6VrgZzV6nwBMPEnZZJxIA8T8CQyMo+gO mjmOri4hTkmUJNtA4yBwRCzmHh1INonsHN0e4wFTt6N5t/7+OvnmEz6xAeccKEMn 0JdGBmT6B7/FDf1lMTCMOou3Nd7PcGsrn+o6BNRAaNDFK42KJTztsrzr2d7rNlGZ Jin9HFoEh+BsJ0e42iU2UaFITrhc5pSObZ8eSami9SF9gBfPj9oRWLlZgP/kKAZ7 WvYnx9aqX/m7Ic2YgVigSf/wJA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:13:37 2026 by rpki-client