$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: 1JPkTCGzbHZRC+Y9AjgR2XV/J1pmIfeB+XD0DrL+6HU= Subject key identifier: 0C:E3:EC:C2:DB:90:B9:76:2B:EB:CF:73:88:3A:35:8F:79:5B:EA:B2 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0133 Signing time: Fri 17 Apr 2026 05:30:22 +0000 Manifest this update: Fri 17 Apr 2026 05:30:22 +0000 Manifest next update: Fri 24 Apr 2026 05:30:22 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: pbDmW4zEfoso9rm7EckabTiGR4Al/9BdSxKxO8knBl4=) 2: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 3: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 5: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 6: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) 7: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Apr 17 05:30:22 2026 GMT Not After : Apr 24 05:30:22 2026 GMT Subject: CN=69e1c56e-7133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:14:7c:8b:36:d0:d7:3a:64:ff:58:07:13: 4e:18:96:80:e0:4d:8d:f1:94:34:29:8a:47:b4:5d: f7:93:ea:4d:46:c1:80:69:83:95:e7:b8:76:ca:c4: e4:5a:a8:10:00:ff:51:40:81:51:b8:13:9b:fb:91: da:8b:ac:20:ed:e9:b1:0a:5f:48:b0:83:c1:50:51: 4c:68:0a:28:22:8c:bc:7f:dd:c5:cb:07:c1:65:37: a6:81:39:9b:16:c1:c1:a9:1a:08:15:09:10:73:29: 65:51:02:7c:cf:88:1f:b4:1f:e3:af:eb:d3:4d:83: 1d:07:47:99:85:62:5f:25:6e:31:cc:27:19:96:34: 1b:d0:fd:0d:57:a8:98:c8:91:5d:6b:13:a0:ae:71: 56:dd:33:33:4d:bc:2d:54:06:3b:8e:4d:aa:d4:a5: 84:0b:a0:7c:e9:f0:c4:0e:cf:3c:9b:df:85:8e:96: 22:12:1d:53:27:84:1e:1c:03:5f:28:85:56:74:64: 97:ee:c1:bb:2f:5f:c9:96:02:3d:e8:15:2b:75:22: 75:c9:46:75:d3:58:b2:39:aa:62:80:60:35:f6:37: f7:79:3f:58:e4:3c:97:31:f0:22:48:06:63:e5:38: 9a:66:74:7c:5f:bf:a9:3a:a1:7a:9b:f1:ae:fd:23: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:EC:C2:DB:90:B9:76:2B:EB:CF:73:88:3A:35:8F:79:5B:EA:B2 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c7:e6:50:b4:6f:34:9e:dd:6e:21:ce:75:4d:c4:8d:74:32: a8:db:0a:a3:12:13:76:c7:53:5b:1b:0e:16:3b:19:dd:5b:2d: f7:37:f2:58:3c:e0:47:b7:ef:7e:82:40:ce:42:79:d1:5e:42: 41:80:e6:94:39:57:d1:16:71:91:87:92:77:0e:ff:08:32:df: df:04:68:a3:b1:5a:85:a1:a7:62:2c:90:2f:15:9c:b8:ce:dc: c0:65:69:4f:95:1d:a6:41:53:cc:09:16:f0:1d:47:1d:46:ef: 73:5b:ac:95:37:b3:16:5f:77:7d:6b:43:63:b4:df:c5:fd:30: 9d:11:ce:5b:e1:ff:43:62:ce:4e:6b:6d:03:4d:2b:ea:1f:34: e5:02:42:a6:8b:e8:cc:b7:b4:bf:e6:88:67:9d:0c:98:22:0b: 2c:26:8f:c6:6c:28:6a:8c:87:be:42:fd:07:e2:fe:d5:f9:c9: d3:2c:d1:e8:95:01:c9:20:f1:a3:4e:b4:92:1e:7b:d8:48:bd: b9:d5:37:db:88:69:02:8c:05:2f:b2:75:59:27:a2:e4:9a:a8: 26:72:11:da:d4:42:63:f7:f1:89:d6:0c:d4:3e:be:47:72:9a: 8e:9e:af:e5:c8:39:78:2a:e9:9e:e3:d4:e8:39:e7:8b:8d:56: 9d:4d:cf:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwNDE3MDUzMDIyWhcNMjYwNDI0MDUzMDIyWjAYMRYwFAYD VQQDEw02OWUxYzU2ZS03MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F8UfIs20Nc6ZP9YBxNOGJaA4E2N8ZQ0KYpHtF33k+pNRsGAaYOV57h2ysTk WqgQAP9RQIFRuBOb+5Hai6wg7emxCl9IsIPBUFFMaAooIoy8f93FywfBZTemgTmb FsHBqRoIFQkQcyllUQJ8z4gftB/jr+vTTYMdB0eZhWJfJW4xzCcZljQb0P0NV6iY yJFdaxOgrnFW3TMzTbwtVAY7jk2q1KWEC6B86fDEDs88m9+FjpYiEh1TJ4QeHANf KIVWdGSX7sG7L1/JlgI96BUrdSJ1yUZ101iyOapigGA19jf3eT9Y5DyXMfAiSAZj 5TiaZnR8X7+pOqF6m/Gu/SNWaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzj7MLb kLl2K+vPc4g6NY95W+qyMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADMfmULRvNJ7dbiHOdU3EjXQyqNsKoxITdsdTWxsOFjsZ3Vst9zfyWDzgR7fv foJAzkJ50V5CQYDmlDlX0RZxkYeSdw7/CDLf3wRoo7FahaGnYiyQLxWcuM7cwGVp T5UdpkFTzAkW8B1HHUbvc1uslTezFl93fWtDY7Tfxf0wnRHOW+H/Q2LOTmttA00r 6h805QJCpovozLe0v+aIZ50MmCILLCaPxmwoaoyHvkL9B+L+1fnJ0yzR6JUBySDx o060kh572Ei9udU324hpAowFL7J1WSei5JqoJnIR2tRCY/fxidYM1D6+R3Kajp6v 5cg5eCrpnuPU6Dnni41WnU3PUg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:05:25 2026 by rpki-client