$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: B+qInwZ20QkMZakmjkerNyx1ErIyR/t7xz+7NeqwKm8= Subject key identifier: 00:74:D4:44:3C:79:75:35:D1:7A:E0:73:86:E8:DD:D8:CC:F5:B1:0C Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0D06 Signing time: Thu 16 Apr 2026 18:04:00 +0000 Manifest this update: Thu 16 Apr 2026 18:03:59 +0000 Manifest next update: Thu 23 Apr 2026 18:03:59 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: 249TMdUA3iYyj+7s/LzVd7b/PyLP7oHYr0Wrttn23r0=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: a71ernoBhJIlyoCkOYC1Njwd07ZtjDlydhtppbwh5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Apr 16 18:03:59 2026 GMT Not After : Apr 23 18:03:59 2026 GMT Subject: CN=69e12490-250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:74:76:ca:7e:33:92:35:31:46:d0:24:3c: 36:d8:12:37:ac:71:c5:b5:f5:ef:5c:ad:57:2c:20: 56:0e:22:9d:59:21:ae:03:ff:7f:7a:7e:9c:c6:29: 08:20:29:cb:0c:5b:de:ca:47:27:c8:f2:03:7b:2f: 9d:9a:33:63:03:a6:2e:c2:c5:2b:b0:6b:88:d4:6b: 84:fd:0e:58:dd:60:69:01:10:1e:90:1c:7b:8d:d8: 02:11:7f:87:21:08:6c:bb:95:df:5b:9c:91:0b:50: f1:32:b3:75:f1:1c:f4:3a:57:f5:bf:79:79:79:e9: 11:4a:69:6d:7a:3b:de:99:81:bb:3f:13:78:99:d8: 35:d1:99:20:ef:0a:f8:93:d8:c2:19:3d:bc:8b:31: c9:bb:a2:92:20:21:2d:07:5e:8a:b4:f0:15:85:d8: 91:ff:05:98:2c:b6:da:ba:e2:ff:fb:a3:73:43:f7: 05:6b:4c:01:32:ae:41:f1:eb:70:8c:2c:6b:4a:c9: 2d:79:7c:9b:19:ac:c4:cc:bc:e6:57:99:55:7b:ac: 83:c3:fe:75:16:fe:12:f6:8e:b6:a5:54:8c:a7:09: 29:2a:78:90:cc:d7:6f:24:78:72:ba:c1:27:97:63: 52:1e:b7:b9:64:f0:62:6e:70:53:81:1f:24:40:14: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:D4:44:3C:79:75:35:D1:7A:E0:73:86:E8:DD:D8:CC:F5:B1:0C X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:0d:3c:f5:d6:b7:d9:7f:87:80:f9:80:e8:81:19:a2:26: 1b:f0:18:4f:07:fc:32:a2:a5:40:71:14:aa:c5:c2:61:90:8f: 9c:11:01:d3:93:8b:93:cf:5e:b2:0b:fa:ec:c9:b7:3b:19:10: 65:0e:ad:0f:7f:50:d6:18:43:8d:91:9a:80:64:44:e3:f9:1b: 73:99:2b:81:a4:25:e5:f9:5c:dc:f0:70:29:fc:24:c2:77:53: 60:47:8a:a1:5c:a0:05:a8:cb:16:e9:01:69:ef:63:db:2f:58: 36:9c:8a:d5:44:79:b7:60:1d:41:57:5d:90:f4:eb:9e:f8:7a: c1:7a:65:8c:45:4a:7c:d7:b1:65:72:fa:ad:5e:86:da:80:94: 0a:78:61:b4:c9:fc:91:53:c2:7f:25:02:5a:18:1f:27:ae:ff: 3d:ee:3e:0d:01:f2:a9:ca:75:e4:c3:6a:1b:a7:0d:29:63:64: 2a:5b:69:56:eb:72:45:05:c8:d0:ce:db:a2:dd:c8:96:e9:bc: 0f:15:7e:a7:d7:25:ed:c3:53:76:31:2d:d4:38:8e:49:88:70: 13:53:cd:e3:29:4c:ee:53:2d:0a:88:47:67:4d:55:f4:9e:44: 79:46:95:6a:01:1d:8f:2e:a1:31:19:a9:5a:36:ea:04:46:5a: b0:12:4c:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjYwNDE2MTgwMzU5WhcNMjYwNDIzMTgwMzU5WjAYMRYwFAYD VQQDEw02OWUxMjQ5MC0yNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyt0dsp+M5I1MUbQJDw22BI3rHHFtfXvXK1XLCBWDiKdWSGuA/9/en6cxikI ICnLDFveykcnyPIDey+dmjNjA6YuwsUrsGuI1GuE/Q5Y3WBpARAekBx7jdgCEX+H IQhsu5XfW5yRC1DxMrN18Rz0Olf1v3l5eekRSmltejvemYG7PxN4mdg10Zkg7wr4 k9jCGT28izHJu6KSICEtB16KtPAVhdiR/wWYLLbauuL/+6NzQ/cFa0wBMq5B8etw jCxrSskteXybGazEzLzmV5lVe6yDw/51Fv4S9o62pVSMpwkpKniQzNdvJHhyusEn l2NSHre5ZPBibnBTgR8kQBSy6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAB01EQ8 eXU10Xrgc4bo3djM9bEMMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASGQNPPXWt9l/h4D5gOiBGaImG/AYTwf8MqKlQHEUqsXCYZCPnBEB05OLk89e sgv67Mm3OxkQZQ6tD39Q1hhDjZGagGRE4/kbc5krgaQl5flc3PBwKfwkwndTYEeK oVygBajLFukBae9j2y9YNpyK1UR5t2AdQVddkPTrnvh6wXpljEVKfNexZXL6rV6G 2oCUCnhhtMn8kVPCfyUCWhgfJ67/Pe4+DQHyqcp15MNqG6cNKWNkKltpVutyRQXI 0M7bot3Ilum8DxV+p9cl7cNTdjEt1DiOSYhwE1PN4ylM7lMtCohHZ01V9J5EeUaV agEdjy6hMRmpWjbqBEZasBJMtQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:22 2026 by rpki-client