$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: mYbRm+GwIxACuvPXuDhQVpiXNbUmK4isL8iTGF/Gvuc= Subject key identifier: 05:A6:05:0C:ED:21:D7:72:B6:CD:A9:63:9F:AE:78:FF:3A:A6:CC:F3 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 032D Signing time: Fri 17 Apr 2026 00:58:55 +0000 Manifest this update: Fri 17 Apr 2026 00:58:55 +0000 Manifest next update: Fri 24 Apr 2026 00:58:55 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: vqCHsbQRiznLJX4cqGos3oXBFEzgquW1nQltdKLfU6I=) 2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: LAY/2oYEWNptyjPMrgoY8aWftbMtB6LPjdcoOOw1Kqc=) 3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Apr 17 00:58:55 2026 GMT Not After : Apr 24 00:58:55 2026 GMT Subject: CN=69e185cf-af51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:7a:4c:ec:5f:b7:5f:56:a8:a4:2f:18:b7: 12:08:58:c8:51:48:d9:fa:9c:4d:d7:6e:94:62:f6: b8:bd:48:c4:1d:5d:de:42:6c:78:9b:29:ff:9c:b6: 6a:03:23:fe:12:9a:78:9b:8f:f4:19:58:f2:fe:ff: 9d:48:8e:85:1e:55:40:2d:9f:13:55:fc:73:94:ce: 66:cc:d2:ba:4e:2f:01:9c:38:45:3b:70:27:25:2d: b1:21:3a:c8:1d:35:0d:5a:e8:86:49:d5:ad:1d:25: a9:e6:8f:36:40:4b:74:cf:f3:bb:be:55:8e:8f:f6: d9:ec:3e:ea:3d:05:86:d1:eb:ae:72:da:d6:8d:f7: 8a:f0:9c:e7:ac:4e:24:46:d8:3c:76:f7:53:86:79: fa:28:6b:47:cd:71:55:20:d6:92:8c:46:1b:82:44: d3:7c:5f:20:48:37:d5:88:97:c6:4d:1e:b1:74:d0: 78:44:23:18:b5:2a:13:e2:72:99:50:b9:48:b9:46: b2:8a:6b:3f:ee:b7:08:94:6d:d4:2e:39:43:af:79: bb:2d:83:2e:19:f3:6d:0c:ad:0a:de:f6:2a:96:c9: 7f:47:6e:99:c6:d9:c5:a5:ea:4e:ea:d3:74:23:2f: 9d:e3:e6:6e:34:c2:48:58:3a:28:26:12:7d:df:85: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A6:05:0C:ED:21:D7:72:B6:CD:A9:63:9F:AE:78:FF:3A:A6:CC:F3 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:18:9d:2a:df:e9:2c:7e:34:46:1e:b0:fa:1f:b9:45:ca: 36:4a:b3:93:d8:69:37:3c:bc:82:53:5a:46:d1:9f:66:8f:95: ad:64:fc:33:aa:8c:85:32:db:d6:73:08:d6:14:d4:c5:6d:03: df:9e:f2:8b:dc:34:b3:76:c4:a1:22:dd:47:c1:ba:f2:3a:e6: d3:9b:48:de:75:af:be:5b:59:c4:de:81:dd:cb:2f:55:0b:8e: 81:c3:d9:23:8e:65:08:1b:f9:6b:02:12:fc:26:2f:23:ae:a3: 0d:ea:0c:86:15:5d:21:b9:3e:b4:8b:cb:a0:ea:df:fd:78:dc: bd:9f:49:62:08:f1:f2:b9:0c:3e:61:05:83:39:41:e7:bf:85: 0e:93:dd:bb:e6:43:b3:a6:c4:c3:0c:fa:7b:26:13:c5:69:cd: af:84:55:dc:37:04:f6:1e:68:52:7f:00:81:79:3b:73:ac:56: ea:97:69:cb:ec:4f:93:1b:29:3e:e0:be:26:59:44:b3:a8:89: 14:6c:45:34:84:27:e6:45:d3:0c:f4:f3:9d:49:e9:0b:dc:a1: 57:6f:6d:a7:94:14:04:5c:74:df:49:52:0e:5b:d2:ea:ec:b5: 2d:21:60:1d:8c:4d:d8:67:87:83:0e:ab:18:86:ff:9e:29:04: ab:52:f9:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwNDE3MDA1ODU1WhcNMjYwNDI0MDA1ODU1WjAYMRYwFAYD VQQDEw02OWUxODVjZi1hZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqF6TOxft19WqKQvGLcSCFjIUUjZ+pxN126UYva4vUjEHV3eQmx4myn/nLZq AyP+Epp4m4/0GVjy/v+dSI6FHlVALZ8TVfxzlM5mzNK6Ti8BnDhFO3AnJS2xITrI HTUNWuiGSdWtHSWp5o82QEt0z/O7vlWOj/bZ7D7qPQWG0euuctrWjfeK8JznrE4k Rtg8dvdThnn6KGtHzXFVINaSjEYbgkTTfF8gSDfViJfGTR6xdNB4RCMYtSoT4nKZ ULlIuUayims/7rcIlG3ULjlDr3m7LYMuGfNtDK0K3vYqlsl/R26ZxtnFpepO6tN0 Iy+d4+ZuNMJIWDooJhJ934X16QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWmBQzt Iddyts2pY5+ueP86pszzMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXzkYnSrf6Sx+NEYesPofuUXKNkqzk9hpNzy8glNaRtGfZo+VrWT8M6qMhTLb 1nMI1hTUxW0D357yi9w0s3bEoSLdR8G68jrm05tI3nWvvltZxN6B3csvVQuOgcPZ I45lCBv5awIS/CYvI66jDeoMhhVdIbk+tIvLoOrf/XjcvZ9JYgjx8rkMPmEFgzlB 57+FDpPdu+ZDs6bEwwz6eyYTxWnNr4RV3DcE9h5oUn8AgXk7c6xW6pdpy+xPkxsp PuC+JllEs6iJFGxFNIQn5kXTDPTznUnpC9yhV29tp5QUBFx030lSDlvS6uy1LSFg HYxN2GeHgw6rGIb/nikEq1L5Kg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:02 2026 by rpki-client