$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: OhrftyWr/Cd6/nz/yj35JBQCeD+lAjwrhFpdrxu5G9E= Subject key identifier: 74:85:A2:00:ED:C2:00:AF:23:44:35:C1:99:39:08:05:0E:9D:8B:34 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0B68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0AF5 Signing time: Thu 16 Apr 2026 19:23:24 +0000 Manifest this update: Thu 16 Apr 2026 19:23:23 +0000 Manifest next update: Thu 23 Apr 2026 19:23:23 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: leT9UKxMKSs6ZJiAdVQzzpi15UD2f1i+BA45hDQ/f80=) 2: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: NMa7UpL5w1Txgsqxfm+5UqMg/zQgfsv4FmRfVL5Sn+c=) 3: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 7FNm1lP1Pe3hdsBxuVhe1eOrgDF7OuaVieb5lKlg9LI=) 4: E95058049A8C11F096D9A13AC4F9AE02.roa (hash: Al2kZd3bm7sIrq8HRQFPgDS+45qqXFnhmN7j5M3C30g=) 5: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=) 6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=) 7: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: b9jxPZOZDnRvzE7CGYRtx0ipIG0fk5b1zujNyCQ0yI0=) 8: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: A7d/aeiJtUu4K+fswUeowBZEDmHgn1F1Svvc5b1xWTc=) 9: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=) 10: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: HwFnU0dCqCQrz33mSD+K9rw/y8Y1TbFJLnxiPnPYqwc=) 11: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: Xmz75nyzzXffCP8ozi4dDJ7X2fT2ShFNR8iyCQqoj9w=) 12: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: KY96V7nPX5oq3FzsE82d+7qiOhZ/q030YiLdCFM2iGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Apr 16 19:23:23 2026 GMT Not After : Apr 23 19:23:23 2026 GMT Subject: CN=69e1372c-d318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:e1:df:de:03:a0:33:c6:39:9e:50:76:05: 86:4b:28:ea:3b:b4:f2:fb:dc:2a:5e:82:d6:a0:14: ad:fb:22:52:7b:65:9a:0a:f2:3a:5e:81:c3:07:b6: e6:fd:f2:dd:a1:56:2c:a7:25:b5:05:7c:96:c0:b4: db:b6:87:92:8c:d4:38:b6:40:3a:fc:5e:1d:18:18: d4:34:bb:fb:8c:bc:2e:bd:b2:e0:48:c3:b1:03:05: 76:61:84:6c:9f:26:a0:b7:a2:fe:94:c1:46:08:ff: 3d:23:c9:e5:6a:b6:41:e8:63:e5:d9:f3:14:92:8f: c1:66:e9:40:32:fb:a2:64:40:f1:36:72:26:ac:a1: e1:66:ca:43:0b:78:2e:d3:7c:3a:25:09:fe:9e:19: 28:5d:fe:a4:86:b9:58:1d:39:5e:53:93:dc:77:3d: 61:65:7f:64:5d:fa:f3:69:57:29:e0:20:9d:18:78: 86:ab:70:4d:02:79:78:76:c8:80:79:df:cd:4c:64: c2:78:0e:5b:54:49:a8:4d:a4:35:27:dc:70:df:58: 99:8c:7a:4a:38:4d:2b:e8:0f:26:8e:da:05:3a:8a: f7:fc:16:11:8a:14:aa:d6:3f:3d:db:ed:2d:31:39: 39:fd:32:87:18:ff:54:85:a7:98:5c:b1:10:24:74: 75:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:85:A2:00:ED:C2:00:AF:23:44:35:C1:99:39:08:05:0E:9D:8B:34 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ed:60:7e:43:ce:24:97:81:d0:6c:71:ae:74:a7:b0:7e:05: 41:a7:e2:e2:6c:91:91:68:43:4f:25:d7:02:61:90:b4:fd:0c: 04:ae:1f:6f:f5:45:34:f2:4f:59:e8:b4:13:b3:4b:66:3f:8a: b2:84:44:a0:4f:9e:70:54:97:47:d1:d2:bc:97:fb:c3:09:b1: 90:89:19:d3:8a:4c:60:ba:42:10:72:46:d3:22:d3:7a:49:45: 28:c8:05:04:51:ad:d2:71:a5:4f:0d:57:d4:95:5f:2f:e2:c2: 13:ed:8c:ce:d2:54:29:b0:aa:1e:1b:12:8c:aa:cf:4a:de:4a: 1e:e7:46:25:30:a8:65:fb:57:3b:48:4d:d9:14:b9:95:76:f6: 26:15:65:de:0d:8b:b9:4b:d3:f3:e2:53:55:71:b2:c0:48:31: 8f:4e:81:3d:1c:8b:99:6c:d1:a5:67:bd:61:cd:e0:0f:dd:f1: 11:0d:11:3a:11:20:96:e7:16:73:3b:12:71:4c:c6:ae:6e:63: 9d:f7:14:8e:25:00:3f:85:36:12:c6:0c:3f:47:55:ff:37:42: 7f:55:cf:c4:66:f6:1d:32:e1:17:30:a7:77:59:9f:cb:25:fe: 05:9a:5b:d8:60:75:81:9d:0f:c0:5d:96:35:99:6a:54:97:52: dc:38:3a:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjYwNDE2MTkyMzIzWhcNMjYwNDIzMTkyMzIzWjAYMRYwFAYD VQQDEw02OWUxMzcyYy1kMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcnh394DoDPGOZ5QdgWGSyjqO7Ty+9wqXoLWoBSt+yJSe2WaCvI6XoHDB7bm /fLdoVYspyW1BXyWwLTbtoeSjNQ4tkA6/F4dGBjUNLv7jLwuvbLgSMOxAwV2YYRs nyagt6L+lMFGCP89I8nlarZB6GPl2fMUko/BZulAMvuiZEDxNnImrKHhZspDC3gu 03w6JQn+nhkoXf6khrlYHTleU5Pcdz1hZX9kXfrzaVcp4CCdGHiGq3BNAnl4dsiA ed/NTGTCeA5bVEmoTaQ1J9xw31iZjHpKOE0r6A8mjtoFOor3/BYRihSq1j892+0t MTk5/TKHGP9UhaeYXLEQJHR1kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSFogDt wgCvI0Q1wZk5CAUOnYs0MB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMO1gfkPOJJeB0GxxrnSnsH4FQafi4myRkWhDTyXXAmGQtP0MBK4fb/VFNPJP Wei0E7NLZj+KsoREoE+ecFSXR9HSvJf7wwmxkIkZ04pMYLpCEHJG0yLTeklFKMgF BFGt0nGlTw1X1JVfL+LCE+2MztJUKbCqHhsSjKrPSt5KHudGJTCoZftXO0hN2RS5 lXb2JhVl3g2LuUvT8+JTVXGywEgxj06BPRyLmWzRpWe9Yc3gD93xEQ0ROhEglucW czsScUzGrm5jnfcUjiUAP4U2EsYMP0dV/zdCf1XPxGb2HTLhFzCnd1mfyyX+BZpb 2GB1gZ0PwF2WNZlqVJdS3Dg6NA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:22:49 2026 by rpki-client