$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft File: juyxGYDtEVNPQZL03gjRss25Fsg.mft (raw, json) Hash identifier: kTL0TzIWU07tIpUN3Su6ZEzaYfvYZCBNtCiJDpsMqFc= Subject key identifier: 06:04:A1:A6:C8:DA:0D:27:90:51:84:73:A8:4E:66:64:4E:1F:88:47 Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 Certificate issuer: /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft Manifest number: 3A Signing time: Thu 16 Apr 2026 19:40:36 +0000 Manifest this update: Thu 16 Apr 2026 19:40:36 +0000 Manifest next update: Thu 23 Apr 2026 19:40:36 +0000 Files and hashes: 1: juyxGYDtEVNPQZL03gjRss25Fsg.crl (hash: kIDfwFmzt5xT7zi2xEN8h9ziqCejNc3eD4mifmTs520=) 2: A4C79C9AEC4611F0B45F05E8456F56BC.roa (hash: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Validity Not Before: Apr 16 19:40:36 2026 GMT Not After : Apr 23 19:40:36 2026 GMT Subject: CN=69e13b34-b8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:8f:c1:68:fc:9b:00:2f:43:b9:76:28:3c: a9:07:a9:df:dc:52:78:05:40:b5:f5:a6:25:68:a1: d8:e6:ea:ac:1d:1f:eb:5a:dd:a3:55:37:54:f9:25: 8e:5a:90:77:a8:dc:0b:95:32:3c:97:33:9b:53:73: 2a:96:f5:53:f0:07:ab:a5:d6:ce:a8:c6:bf:35:eb: 90:18:ff:e7:07:71:3d:66:f3:c5:94:7d:c6:8a:e8: 40:64:a0:95:e6:f4:c7:f2:a3:a5:04:3c:7b:2b:2b: b4:7d:f3:71:1e:18:5b:82:5c:36:93:66:cf:a4:f6: bc:16:c1:ce:a0:7e:68:d9:80:37:40:32:df:e8:12: 41:9c:7d:c0:b8:c5:b1:9b:ab:2c:7b:92:62:24:e6: bd:a5:b0:8a:e0:13:e2:99:f7:02:94:16:a9:f5:3e: 25:38:d3:cd:51:a3:94:26:31:7c:f7:6f:a4:0f:3d: f7:e9:02:6d:d3:7e:8d:9b:ea:e5:a2:01:50:64:47: 84:dc:c9:5a:b8:c0:18:a6:32:3d:7e:04:86:8e:df: 48:7e:36:08:c8:4e:41:6f:ce:6e:a8:89:52:18:3f: 73:c9:f6:26:b0:1a:13:1f:8d:02:0a:57:a2:0a:f0: 1d:d8:1c:1e:9e:1d:58:41:a3:dd:65:f6:b8:2c:70: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:04:A1:A6:C8:DA:0D:27:90:51:84:73:A8:4E:66:64:4E:1F:88:47 X509v3 Authority Key Identifier: keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fa:24:21:73:46:25:80:98:ef:c2:c2:ca:11:60:74:42:2e: 23:4a:c3:fb:49:03:bf:ad:0b:6b:00:c1:77:fb:e9:bc:a9:c7: 93:ec:b3:5d:77:a5:5c:71:48:16:5d:78:05:42:3d:5a:78:3d: 5d:e9:ae:00:c7:50:b2:7c:75:25:36:cf:53:48:b3:18:36:af: 35:a6:d0:9d:94:ac:1d:62:8d:02:75:8d:d7:17:15:1c:54:2d: 0c:0c:f4:93:9e:42:09:08:d4:8c:6d:7c:8e:3d:3b:6f:00:94: b9:b8:f7:c5:16:b4:50:c4:ad:df:ec:7a:ef:7b:5b:dc:c8:8d: f1:46:b7:5b:cd:9e:32:a2:1f:14:cc:d8:63:53:f1:78:83:42: 63:7b:7f:8c:3a:82:83:68:68:64:75:aa:73:a8:f3:de:3c:e8: 9e:a6:fd:14:dd:78:f3:5e:ae:fe:02:39:8a:71:01:eb:cb:47: d8:7d:fe:18:4c:4e:b3:33:64:9d:13:64:74:35:7f:27:c4:46: 04:13:01:64:4b:25:cf:1a:01:51:7c:8a:7a:26:5f:92:89:43: a0:68:17:95:80:f2:1b:c4:1c:d0:e4:b3:53:71:8c:70:5b:78: 50:63:fd:1a:58:40:10:ca:0e:32:e9:c6:ec:5f:58:08:c5:29: 0c:c7:76:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MURFMDExMC8GA1UEBRMoOEVFQ0IxMTk4MEVEMTE1MzRGNDE5MkY0REUwOEQxQjJD REI5MTZDODAeFw0yNjA0MTYxOTQwMzZaFw0yNjA0MjMxOTQwMzZaMBgxFjAUBgNV BAMTDTY5ZTEzYjM0LWI4YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe6I/BaPybAC9DuXYoPKkHqd/cUngFQLX1piVoodjm6qwdH+ta3aNVN1T5JY5a kHeo3AuVMjyXM5tTcyqW9VPwB6ul1s6oxr8165AY/+cHcT1m88WUfcaK6EBkoJXm 9Mfyo6UEPHsrK7R983EeGFuCXDaTZs+k9rwWwc6gfmjZgDdAMt/oEkGcfcC4xbGb qyx7kmIk5r2lsIrgE+KZ9wKUFqn1PiU4081Ro5QmMXz3b6QPPffpAm3Tfo2b6uWi AVBkR4TcyVq4wBimMj1+BIaO30h+NgjITkFvzm6oiVIYP3PJ9iawGhMfjQIKV6IK 8B3YHB6eHVhBo91l9rgscMpzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBgShpsja DSeQUYRzqE5mZE4fiEcwHwYDVR0jBBgwFoAUjuyxGYDtEVNPQZL03gjRss25Fsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxREUwL0VCQTk4REY0RUMy MjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZOUFFaTDAzZ2pSc3MyNUZz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvanV5eEdZRHRFVk5QUVpMMDNnalJzczI1RnNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx REUwL0VCQTk4REY0RUMyMjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZO UFFaTDAzZ2pSc3MyNUZzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBc+iQhc0YlgJjvwsLKEWB0Qi4jSsP7SQO/rQtrAMF3++m8qceT7LNdd6VccUgW XXgFQj1aeD1d6a4Ax1CyfHUlNs9TSLMYNq81ptCdlKwdYo0CdY3XFxUcVC0MDPST nkIJCNSMbXyOPTtvAJS5uPfFFrRQxK3f7Hrve1vcyI3xRrdbzZ4yoh8UzNhjU/F4 g0Jje3+MOoKDaGhkdapzqPPePOiepv0U3XjzXq7+AjmKcQHry0fYff4YTE6zM2Sd E2R0NX8nxEYEEwFkSyXPGgFRfIp6Jl+SiUOgaBeVgPIbxBzQ5LNTcYxwW3hQY/0a WEAQyg4y6cbsX1gIxSkMx3YV -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:43 2026 by rpki-client