$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: cNjLu+nKrfnrsA/ywXn2Tv3Chu4xoJWFVcS1nFzEKLM= Subject key identifier: 98:91:AB:82:4B:D1:5D:E0:B5:0C:50:0B:B4:05:D6:87:1A:E3:7C:CA Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 353E Signing time: Thu 16 Apr 2026 14:37:22 +0000 Manifest this update: Thu 16 Apr 2026 14:37:21 +0000 Manifest next update: Thu 23 Apr 2026 14:37:21 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: wMS2gwcxuy94fWJQO3GB2fl7c2AOIojSQoqL53Ry05I=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Apr 16 14:37:21 2026 GMT Not After : Apr 23 14:37:21 2026 GMT Subject: CN=69e0f422-ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:4d:6c:f1:79:87:3b:58:9f:49:01:86:68: da:87:20:57:4d:1b:57:ca:7f:30:60:4b:bc:2a:80: 32:09:07:16:4e:8f:6e:86:14:8f:f2:b4:75:64:3b: 05:62:9b:f0:32:b2:1a:e6:f8:8e:7b:8c:a9:9f:54: e1:ea:c1:04:ea:e4:5e:fe:96:06:41:d1:f0:39:ab: a7:7a:8a:09:42:19:19:59:1e:25:7c:35:be:91:1f: c8:87:56:9e:89:0b:c4:c9:44:c9:c0:ba:85:12:66: 24:bf:23:1d:52:79:3b:8f:4e:f3:8a:d7:4f:cf:7b: 05:82:1a:f0:51:bf:b2:11:54:7c:f7:ac:11:c3:36: 2c:e4:d7:06:83:86:7c:67:0a:2e:96:02:78:75:b3: 70:5b:34:43:21:4b:40:80:b0:01:76:74:b5:08:40: 87:78:4b:9a:55:de:b5:b5:71:fe:e4:5c:b3:52:35: 37:52:34:aa:23:1f:a7:7c:80:7c:2d:47:3f:48:f8: a3:bd:d1:fb:57:f3:01:9e:f6:c5:6d:7c:a7:a9:64: 85:89:c1:d8:10:aa:b4:68:67:5d:ee:61:46:9c:ac: 3c:64:a4:d7:67:08:7e:3a:62:60:37:f7:70:e3:c5: d4:92:c4:52:a3:e1:da:c0:d7:bb:5c:6a:25:bf:a5: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:91:AB:82:4B:D1:5D:E0:B5:0C:50:0B:B4:05:D6:87:1A:E3:7C:CA X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ed:05:20:80:9b:44:07:11:25:02:4b:39:66:c5:7c:99:71: 14:4c:3a:c5:fb:31:cd:83:f0:e4:2b:6f:74:7e:c5:de:56:9e: 5c:dc:d6:33:df:52:21:3d:73:4c:a6:7f:86:1b:e6:33:99:83: 61:a0:4a:93:e2:ba:5e:63:a9:a9:17:cc:fe:a9:54:a5:4d:66: 01:08:8f:28:96:03:0a:1d:9b:f9:db:8d:24:89:94:34:bc:52: 19:60:c4:3c:64:1c:d2:52:f4:28:3c:d6:c5:9b:1d:55:84:5c: 96:4f:a9:67:16:69:de:c4:ef:39:07:f7:e0:d8:6f:5a:22:6a: e6:e7:fb:b4:a4:8b:49:02:ae:c5:d4:b9:c0:e2:70:f4:2e:a8: 5c:17:9e:c6:b3:f6:71:33:2a:2b:79:c0:2a:6b:93:58:36:74: e9:8f:c5:ec:eb:83:f3:13:6d:b5:3d:8b:05:36:22:c0:d3:de: b9:d6:d9:50:d9:ec:2c:63:e1:44:50:59:6c:d2:3d:7a:7d:9e: 38:0e:53:67:e2:d0:e4:30:16:46:8b:2a:61:33:d4:a8:ab:5a: f7:8e:82:e5:f9:9c:af:82:8e:8b:bb:d9:45:60:84:46:e8:45: fb:38:17:80:c9:3e:10:2d:51:2f:9e:af:2a:ef:4c:5f:12:56: 55:4e:f0:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwNDE2MTQzNzIxWhcNMjYwNDIzMTQzNzIxWjAYMRYwFAYD VQQDEw02OWUwZjQyMi1mZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwRNbPF5hztYn0kBhmjahyBXTRtXyn8wYEu8KoAyCQcWTo9uhhSP8rR1ZDsF YpvwMrIa5viOe4ypn1Th6sEE6uRe/pYGQdHwOauneooJQhkZWR4lfDW+kR/Ih1ae iQvEyUTJwLqFEmYkvyMdUnk7j07zitdPz3sFghrwUb+yEVR896wRwzYs5NcGg4Z8 ZwoulgJ4dbNwWzRDIUtAgLABdnS1CECHeEuaVd61tXH+5FyzUjU3UjSqIx+nfIB8 LUc/SPijvdH7V/MBnvbFbXynqWSFicHYEKq0aGdd7mFGnKw8ZKTXZwh+OmJgN/dw 48XUksRSo+HawNe7XGolv6XnFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiRq4JL 0V3gtQxQC7QF1oca43zKMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+0FIICbRAcRJQJLOWbFfJlxFEw6xfsxzYPw5CtvdH7F3laeXNzWM99SIT1z TKZ/hhvmM5mDYaBKk+K6XmOpqRfM/qlUpU1mAQiPKJYDCh2b+duNJImUNLxSGWDE PGQc0lL0KDzWxZsdVYRclk+pZxZp3sTvOQf34NhvWiJq5uf7tKSLSQKuxdS5wOJw 9C6oXBeexrP2cTMqK3nAKmuTWDZ06Y/F7OuD8xNttT2LBTYiwNPeudbZUNnsLGPh RFBZbNI9en2eOA5TZ+LQ5DAWRosqYTPUqKta946C5fmcr4KOi7vZRWCERuhF+zgX gMk+EC1RL56vKu9MXxJWVU7wTg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:47:42 2026 by rpki-client