$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: gVjkLJWfGUxV6MvViLgT0tM+LeTtlsV3dw6GGQmYA2o= Subject key identifier: 55:51:6B:93:F4:C0:28:1D:E9:F0:34:8E:BC:75:86:D2:76:0D:D9:7B Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 355C Signing time: Thu 16 Apr 2026 14:18:11 +0000 Manifest this update: Thu 16 Apr 2026 14:18:11 +0000 Manifest next update: Thu 23 Apr 2026 14:18:11 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: Y7+NveHt6cLne2oJGAQ1NagAU6kPPzw/YAYhDHtr5pg=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Apr 16 14:18:11 2026 GMT Not After : Apr 23 14:18:11 2026 GMT Subject: CN=69e0efa3-c5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:79:cc:90:7c:c1:5b:44:93:3b:0c:0e:11: ee:df:85:f1:12:de:7a:af:11:f1:14:63:21:40:bc: 1f:45:46:2b:95:39:40:60:65:ae:cb:36:b7:23:00: 73:0c:f8:c1:7a:0a:f3:7c:ad:55:da:d5:46:7e:c3: 3c:9b:46:27:aa:74:86:09:9c:00:9e:e9:bf:a8:18: 73:27:75:87:e9:ab:68:df:2a:bb:cd:d4:c8:f3:92: 0c:5e:d3:05:d2:8b:6b:5f:11:a3:c2:d1:b2:1f:7a: 12:90:24:ca:73:02:2b:91:42:3a:81:68:69:43:29: 5b:ef:21:3c:68:61:5b:4f:2c:f4:de:77:9f:21:8c: 1c:22:b6:9f:02:1e:33:04:1a:90:21:42:0c:4d:c4: 0a:e8:7c:37:ab:76:83:86:b7:23:f0:86:03:ae:a5: 78:ed:86:d4:a0:50:a5:45:9b:cc:50:2a:7b:64:8b: 29:d3:ef:2d:7a:5a:3d:b9:70:97:14:b5:d3:7d:4e: b2:82:37:da:8b:d5:0f:3e:c7:e7:9d:5e:37:9b:60: 8a:9f:0d:a8:ca:36:d1:06:64:d2:e0:eb:81:47:90: a3:d6:7c:c4:dd:1c:2d:e0:8f:76:e9:1a:80:16:ab: 6f:92:bb:5f:a5:b8:43:7e:9c:34:96:9f:a0:92:38: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:6B:93:F4:C0:28:1D:E9:F0:34:8E:BC:75:86:D2:76:0D:D9:7B X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:ab:3f:fc:9d:4f:02:62:39:28:90:f6:8f:05:14:aa:6e: 6b:1d:c3:97:fb:e0:bd:13:a8:64:4e:a8:20:b6:46:61:61:47: 97:b0:30:33:e8:9f:39:8a:4e:73:95:98:ba:ae:fc:47:55:94: 91:c1:08:9a:b1:2a:0d:75:3c:75:df:2c:d2:85:9d:f0:a2:0a: 24:46:72:e1:f7:e3:df:63:69:c9:d9:91:d4:24:8a:f6:dd:4e: aa:80:c3:cf:b1:fd:cd:14:18:93:8e:3e:d2:60:85:21:a5:b6: e2:38:3b:a3:b3:5a:bf:ca:88:1c:b6:f2:da:dd:91:bb:10:cc: 81:e7:db:4f:e4:b1:18:5a:4d:0d:49:04:0a:2e:60:e4:8d:a9: 65:8e:3a:55:8b:0b:e7:db:1b:69:d3:37:dd:c0:61:2e:14:03: 9e:15:04:df:26:d9:c5:69:39:8a:4c:b9:45:9b:c2:bd:c3:4a: 88:e2:f5:ac:78:54:4a:da:80:e7:ed:12:6c:63:54:07:ef:cd: c4:82:a9:84:e1:8f:3c:4f:8c:34:6e:7f:33:57:f8:91:34:5f: 5f:60:dc:58:7c:fa:1f:9b:01:82:50:0a:7d:06:89:36:83:f1: 8a:10:79:d9:93:43:00:b9:a9:5d:26:4c:26:f1:1e:ec:ee:ce: 7b:35:2a:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwNDE2MTQxODExWhcNMjYwNDIzMTQxODExWjAYMRYwFAYD VQQDEw02OWUwZWZhMy1jNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5N5zJB8wVtEkzsMDhHu34XxEt56rxHxFGMhQLwfRUYrlTlAYGWuyza3IwBz DPjBegrzfK1V2tVGfsM8m0YnqnSGCZwAnum/qBhzJ3WH6ato3yq7zdTI85IMXtMF 0otrXxGjwtGyH3oSkCTKcwIrkUI6gWhpQylb7yE8aGFbTyz03nefIYwcIrafAh4z BBqQIUIMTcQK6Hw3q3aDhrcj8IYDrqV47YbUoFClRZvMUCp7ZIsp0+8telo9uXCX FLXTfU6ygjfai9UPPsfnnV43m2CKnw2oyjbRBmTS4OuBR5Cj1nzE3Rwt4I926RqA FqtvkrtfpbhDfpw0lp+gkjgKNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVRa5P0 wCgd6fA0jrx1htJ2Ddl7MB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE+qrP/ydTwJiOSiQ9o8FFKpuax3Dl/vgvROoZE6oILZGYWFHl7AwM+ifOYpO c5WYuq78R1WUkcEImrEqDXU8dd8s0oWd8KIKJEZy4ffj32NpydmR1CSK9t1OqoDD z7H9zRQYk44+0mCFIaW24jg7o7Nav8qIHLby2t2RuxDMgefbT+SxGFpNDUkECi5g 5I2pZY46VYsL59sbadM33cBhLhQDnhUE3ybZxWk5iky5RZvCvcNKiOL1rHhUStqA 5+0SbGNUB+/NxIKphOGPPE+MNG5/M1f4kTRfX2DcWHz6H5sBglAKfQaJNoPxihB5 2ZNDALmpXSZMJvEe7O7OezUqSQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:38:06 2026 by rpki-client