$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: Zaz11oO7z8Z7j9VqX6fZAIocDZC3OY39R7kgsQP63b0= Subject key identifier: 89:ED:CF:93:B5:FC:F7:CE:93:BF:FB:7C:B4:B5:46:79:A4:50:00:D3 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 050F Signing time: Thu 16 Apr 2026 23:32:57 +0000 Manifest this update: Thu 16 Apr 2026 23:32:56 +0000 Manifest next update: Thu 23 Apr 2026 23:32:56 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: Kgg5+0rJiQu9JJiUK/oqXb0wlyVQdHnyU0WeObdPOfs=) 2: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 3: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 4: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Apr 16 23:32:56 2026 GMT Not After : Apr 23 23:32:56 2026 GMT Subject: CN=69e171a9-be27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:45:49:18:e5:2d:7d:1d:3a:0b:1e:79:c5: 8d:7e:47:6e:ec:ba:74:1d:c0:3e:02:f2:76:e1:75: 34:fb:ca:68:0e:a1:f2:cf:44:f4:df:51:74:7d:20: 9a:9d:fc:ef:fd:07:5c:db:59:23:ec:ff:f5:ba:81: 4b:b5:c9:61:e8:c1:1b:ea:ba:a5:51:e0:dd:be:af: c0:c9:b5:6c:10:4e:fc:1f:b2:0c:88:73:32:72:f6: ca:90:3b:b2:a6:a5:85:b7:d0:29:b0:61:ef:02:be: 06:e0:2e:2b:d9:6b:99:db:5f:51:ef:3a:20:8d:10: 0a:a7:70:63:13:3d:90:96:4a:63:de:cb:f8:52:29: c5:6f:72:c1:50:4e:87:75:db:7c:aa:12:10:b0:50: e4:1f:d8:27:ae:09:fa:60:c6:87:68:8e:1e:9a:1d: 09:36:44:1c:6d:a1:c5:e5:e0:07:fe:f9:66:1e:2b: 7e:4a:24:29:4c:22:e5:0d:ba:17:95:ff:b3:d3:77: 16:44:51:43:30:66:94:db:43:b0:b0:bb:46:96:4b: 8d:25:f9:50:47:a5:50:ac:52:4c:96:de:3b:92:95: 61:89:eb:77:4b:96:71:90:c9:ce:1b:35:39:52:b6: f8:0c:87:dc:05:0a:0b:65:16:e0:d3:87:ea:51:a9: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:CF:93:B5:FC:F7:CE:93:BF:FB:7C:B4:B5:46:79:A4:50:00:D3 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c1:e6:10:10:4b:8e:2c:22:e5:82:f3:ef:2f:1a:8b:91:18: 37:fc:bf:c5:56:3b:fc:71:41:88:2b:54:3b:41:16:87:c4:45: 82:cb:55:50:59:ad:bd:65:0e:83:06:19:12:44:2b:e1:a6:f1: ce:c7:7d:b5:a7:a9:45:62:2b:b4:b4:88:b1:40:ba:ca:43:2c: 6c:f9:9c:cb:f0:87:28:69:79:18:26:08:f0:a5:cd:2d:d6:f4: 5e:45:4a:51:4e:eb:5d:9d:8e:e8:98:4b:df:f5:7e:0f:48:ee: 87:05:7f:df:db:94:56:12:1a:41:db:69:73:ae:1a:25:07:1f: db:45:9f:eb:9f:86:87:4a:66:af:26:44:fb:a8:71:5c:17:40: 44:39:ee:d0:3c:92:a0:05:93:52:73:3b:d0:4e:25:0d:b1:ec: e9:52:44:0b:93:bb:51:14:63:81:a2:3b:b6:eb:eb:96:af:6d: a0:c2:62:99:98:ce:2f:23:78:3b:96:3a:f8:80:04:1c:44:4b: 26:60:de:1a:87:11:dd:2a:4c:4e:f6:59:0f:b0:21:39:df:a8: c5:dc:31:2d:0b:3b:29:51:84:5a:c6:f9:70:4d:1e:62:06:a7: 94:c7:6e:03:74:de:cb:65:00:66:9e:00:ca:51:e3:8c:d6:d5: f6:ad:43:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwNDE2MjMzMjU2WhcNMjYwNDIzMjMzMjU2WjAYMRYwFAYD VQQDEw02OWUxNzFhOS1iZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHhFSRjlLX0dOgseecWNfkdu7Lp0HcA+AvJ24XU0+8poDqHyz0T031F0fSCa nfzv/Qdc21kj7P/1uoFLtclh6MEb6rqlUeDdvq/AybVsEE78H7IMiHMycvbKkDuy pqWFt9ApsGHvAr4G4C4r2WuZ219R7zogjRAKp3BjEz2Qlkpj3sv4UinFb3LBUE6H ddt8qhIQsFDkH9gnrgn6YMaHaI4emh0JNkQcbaHF5eAH/vlmHit+SiQpTCLlDboX lf+z03cWRFFDMGaU20OwsLtGlkuNJflQR6VQrFJMlt47kpVhiet3S5ZxkMnOGzU5 Urb4DIfcBQoLZRbg04fqUamPVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIntz5O1 /PfOk7/7fLS1RnmkUADTMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr8HmEBBLjiwi5YLz7y8ai5EYN/y/xVY7/HFBiCtUO0EWh8RFgstVUFmtvWUO gwYZEkQr4abxzsd9taepRWIrtLSIsUC6ykMsbPmcy/CHKGl5GCYI8KXNLdb0XkVK UU7rXZ2O6JhL3/V+D0juhwV/39uUVhIaQdtpc64aJQcf20Wf65+Gh0pmryZE+6hx XBdARDnu0DySoAWTUnM70E4lDbHs6VJEC5O7URRjgaI7tuvrlq9toMJimZjOLyN4 O5Y6+IAEHERLJmDeGocR3SpMTvZZD7AhOd+oxdwxLQs7KVGEWsb5cE0eYganlMdu A3Tey2UAZp4AylHjjNbV9q1Dxw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:54:57 2026 by rpki-client