$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: 59RDh+MqckXdOshAGMhGMGEg4zQGYe89jEpXciowudw= Subject key identifier: 2C:A1:A3:8A:A4:30:21:F8:F8:06:D7:9D:5F:64:1D:B5:8D:78:90:18 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0215 Signing time: Fri 17 Apr 2026 02:37:56 +0000 Manifest this update: Fri 17 Apr 2026 02:37:56 +0000 Manifest next update: Fri 24 Apr 2026 02:37:56 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: zQbzJGIdeBjQHPdEYbXbi0cTSqFb2BGdbiO+DICj39k=) 2: 27623F48040711F193DC81CA173D8C67.roa (hash: 4UQuwImlHbzxK5xAml0mOBA2CK1r1LRApTKclWV+/nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Apr 17 02:37:56 2026 GMT Not After : Apr 24 02:37:56 2026 GMT Subject: CN=69e19d04-4c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:98:bd:0f:66:9c:ea:23:07:89:74:3a:57:18: 9a:2b:14:ae:b7:30:1a:bc:eb:25:25:7f:86:ec:2b: b2:e1:27:23:c6:3f:d2:57:32:48:e4:3d:2c:fa:90: 77:aa:c4:c0:27:c4:8d:52:4b:da:84:96:2d:24:f9: 25:c2:a5:93:ae:bc:4e:49:2e:c4:db:76:28:63:24: ab:d4:96:8a:81:68:5a:f0:8e:de:35:26:2c:0e:65: 62:a5:f2:eb:6e:0d:ab:bd:35:43:61:a7:39:d1:1c: 82:09:34:a7:26:17:3d:79:01:31:e8:cd:fb:dc:d3: 7e:d7:c5:0a:4d:49:d7:bf:7a:a2:3a:e3:10:19:3e: ec:f9:d6:d4:60:46:5c:b6:2e:d4:55:1e:c3:8f:4d: 75:db:6b:16:d9:40:15:45:14:37:60:dc:dc:97:cf: ba:56:70:08:fa:45:d7:e7:4e:4e:1e:39:60:64:a2: 78:6b:62:30:05:6a:36:6a:80:66:3c:c9:5d:7b:54: d8:0b:d2:b3:bf:f5:4b:21:71:99:b3:ef:cc:ad:58: 33:59:d0:44:0c:56:d0:7e:99:74:40:3f:8d:d9:56: 6f:ec:84:8b:64:d1:87:a4:44:e8:eb:3c:a1:37:56: 85:61:76:58:76:74:1e:aa:b2:8f:7e:7b:ea:4b:08: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:A3:8A:A4:30:21:F8:F8:06:D7:9D:5F:64:1D:B5:8D:78:90:18 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9e:f6:02:19:58:d0:c5:f2:cd:3c:eb:65:6b:64:9c:78:8a: 5b:1f:e0:c7:19:7c:3a:55:a2:65:ee:a5:59:f4:13:ad:14:3a: 8a:fa:8e:11:cc:01:c4:06:0b:31:14:c1:fc:5a:37:e1:b7:ef: 0d:9b:d9:88:0a:3c:fb:e3:91:4d:99:b5:fa:20:66:2b:d5:d0: ef:35:0e:32:a5:d8:37:44:7b:97:0f:e4:14:59:74:85:f6:64: 08:d2:b8:8f:32:6c:2c:55:0f:86:22:c6:be:a8:ee:a8:32:f9: 27:d5:23:64:2b:f0:eb:c6:29:e2:f0:a8:c2:7d:58:a6:8c:14: 65:2f:4b:cc:8a:e3:c9:b5:09:5d:d2:02:0f:d8:a3:00:f6:31: ae:3d:f9:cf:9d:92:fd:a6:9c:36:de:7c:dc:1a:1f:a3:74:1d: 84:b0:bc:a6:cb:60:02:10:7f:ef:df:cd:39:a3:4e:38:53:20: 27:0c:69:88:5e:be:6b:36:50:7c:6f:9a:e8:be:6b:b4:7c:86: fe:cd:36:95:39:f4:21:48:69:bc:d7:f1:25:97:30:54:81:6e: 96:86:f5:74:3d:41:a6:92:3d:5b:10:57:75:fb:ca:2a:dc:ea: f2:45:ba:cc:2f:e0:0d:ce:3c:86:86:6c:98:46:93:8b:21:1a: 6a:e4:ff:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjYwNDE3MDIzNzU2WhcNMjYwNDI0MDIzNzU2WjAYMRYwFAYD VQQDEw02OWUxOWQwNC00YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ji9D2ac6iMHiXQ6VxiaKxSutzAavOslJX+G7Cuy4Scjxj/SVzJI5D0s+pB3 qsTAJ8SNUkvahJYtJPklwqWTrrxOSS7E23YoYySr1JaKgWha8I7eNSYsDmVipfLr bg2rvTVDYac50RyCCTSnJhc9eQEx6M373NN+18UKTUnXv3qiOuMQGT7s+dbUYEZc ti7UVR7Dj01122sW2UAVRRQ3YNzcl8+6VnAI+kXX505OHjlgZKJ4a2IwBWo2aoBm PMlde1TYC9Kzv/VLIXGZs+/MrVgzWdBEDFbQfpl0QD+N2VZv7ISLZNGHpETo6zyh N1aFYXZYdnQeqrKPfnvqSwiCTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyho4qk MCH4+AbXnV9kHbWNeJAYMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZ72AhlY0MXyzTzrZWtknHiKWx/gxxl8OlWiZe6lWfQTrRQ6ivqOEcwBxAYL MRTB/Fo34bfvDZvZiAo8++ORTZm1+iBmK9XQ7zUOMqXYN0R7lw/kFFl0hfZkCNK4 jzJsLFUPhiLGvqjuqDL5J9UjZCvw68Yp4vCown1YpowUZS9LzIrjybUJXdICD9ij APYxrj35z52S/aacNt583Bofo3QdhLC8pstgAhB/79/NOaNOOFMgJwxpiF6+azZQ fG+a6L5rtHyG/s02lTn0IUhpvNfxJZcwVIFulob1dD1BppI9WxBXdfvKKtzq8kW6 zC/gDc48hoZsmEaTiyEaauT/zg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:30:57 2026 by rpki-client