$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: Cq4qQPfg5njcB0qZFXBd2T7uEh8qEAOvUPijiv5sZUk= Subject key identifier: 36:B2:DD:E8:3D:84:D9:09:6E:67:65:9F:E9:73:AC:B8:1F:CD:18:29 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 0299 Signing time: Fri 17 Apr 2026 01:24:53 +0000 Manifest this update: Fri 17 Apr 2026 01:24:53 +0000 Manifest next update: Fri 24 Apr 2026 01:24:53 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: bFLJltOKYXkvfbLcgo8JMM+7NUyKfUSMGTcKcCa+GeA=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: ZQQmEapOEB8hbnYD2748C5/tVDyFBuYad9v0XjI6Mok=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: 4oINYtmMIJAI0qB/zgs7eJ/PHXiHCKVBi4RA5fWevZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 17 01:24:53 2026 GMT Not After : Apr 24 01:24:53 2026 GMT Subject: CN=69e18be5-ae9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:f0:02:57:41:fd:1e:f4:2e:a6:88:cf:e3: 14:ae:bf:89:05:97:95:79:8b:99:da:8a:fa:79:04: d2:87:50:99:cf:c3:4b:bd:b9:69:ab:cb:eb:b7:5f: e1:cf:96:f2:d6:fe:f9:c3:59:de:79:1c:4c:62:17: a1:87:95:3e:16:94:05:08:81:ce:39:c5:28:cf:a4: 12:46:9f:23:54:bc:5f:84:5c:1a:a8:ed:83:6e:19: 09:de:68:94:e4:be:97:f4:de:aa:97:ce:90:11:80: 8c:33:8d:9a:5f:61:d0:3d:db:17:6a:4c:19:eb:0a: 69:83:08:c1:6a:56:b3:9e:ba:85:42:19:d4:12:51: 80:23:c8:50:0a:f7:58:9c:4e:4f:d1:73:a3:0f:2d: ed:d8:08:a4:08:08:7a:01:77:08:62:0a:dd:dc:78: 86:97:bf:50:b9:ac:f8:ff:69:01:a5:11:88:30:60: 97:73:b4:bb:2c:90:ea:0b:2b:74:3b:1e:37:46:e4: c7:0e:50:aa:c1:04:e8:3c:86:5b:b6:f7:38:08:4d: 39:25:b2:e4:2a:b6:da:7c:d2:98:3b:85:67:56:06: 34:25:7d:20:9d:de:b1:a6:56:ba:e6:f5:82:12:c7: 64:6d:af:1b:ec:d0:02:c6:11:7f:a9:e8:5f:cc:17: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:DD:E8:3D:84:D9:09:6E:67:65:9F:E9:73:AC:B8:1F:CD:18:29 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5c:59:b1:e6:86:26:ee:e5:d7:c6:94:69:24:95:d1:70:29: dd:ca:ef:1b:69:29:2c:c7:e0:00:cd:3c:f1:ef:a7:58:7b:83: fa:40:d0:b4:5e:c2:09:a4:23:1f:2c:92:57:3b:ac:40:a6:d3: 11:6a:fa:23:36:79:06:59:d1:01:5c:fc:00:c1:08:31:c2:47: 4e:4c:bf:28:e4:dc:aa:b4:c1:35:f2:a0:a3:68:fc:be:fd:f6: c8:fe:ee:bf:c9:75:f2:28:0d:a5:f6:4b:57:7c:f5:03:7a:c2: 4e:1f:72:77:8f:72:23:ca:1e:a4:49:f8:9e:b7:d0:4f:81:a2: d7:0f:8f:38:4e:12:fb:df:b2:1e:6f:63:3b:d1:73:9d:5e:dd: 3e:f3:63:2f:2a:33:f6:3a:5a:5e:e1:0a:45:ce:6f:1b:31:ed: 87:08:90:0b:2c:3b:3f:a4:07:b1:12:5a:b2:4c:03:34:80:40: 32:1a:2d:dd:f8:1e:38:e2:b7:59:21:33:ec:0c:73:ac:8f:3d: 76:57:70:e4:c1:2e:cb:dc:c1:e1:82:7c:f2:20:8d:ad:79:0c: 28:e2:c7:7b:8e:c7:c1:31:ef:06:b9:4f:81:09:04:0f:48:43: 7d:69:03:b5:59:9e:4f:b8:e3:ed:1c:60:50:5e:d9:8a:48:11: a5:6b:97:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjYwNDE3MDEyNDUzWhcNMjYwNDI0MDEyNDUzWjAYMRYwFAYD VQQDEw02OWUxOGJlNS1hZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0/wAldB/R70LqaIz+MUrr+JBZeVeYuZ2or6eQTSh1CZz8NLvblpq8vrt1/h z5by1v75w1neeRxMYhehh5U+FpQFCIHOOcUoz6QSRp8jVLxfhFwaqO2DbhkJ3miU 5L6X9N6ql86QEYCMM42aX2HQPdsXakwZ6wppgwjBalaznrqFQhnUElGAI8hQCvdY nE5P0XOjDy3t2AikCAh6AXcIYgrd3HiGl79Quaz4/2kBpRGIMGCXc7S7LJDqCyt0 Ox43RuTHDlCqwQToPIZbtvc4CE05JbLkKrbafNKYO4VnVgY0JX0gnd6xpla65vWC Esdkba8b7NACxhF/qehfzBdWIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDay3eg9 hNkJbmdln+lzrLgfzRgpMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWFxZseaGJu7l18aUaSSV0XAp3crvG2kpLMfgAM088e+nWHuD+kDQtF7CCaQj HyySVzusQKbTEWr6IzZ5BlnRAVz8AMEIMcJHTky/KOTcqrTBNfKgo2j8vv32yP7u v8l18igNpfZLV3z1A3rCTh9yd49yI8oepEn4nrfQT4Gi1w+POE4S+9+yHm9jO9Fz nV7dPvNjLyoz9jpaXuEKRc5vGzHthwiQCyw7P6QHsRJaskwDNIBAMhot3fgeOOK3 WSEz7AxzrI89dldw5MEuy9zB4YJ88iCNrXkMKOLHe47HwTHvBrlPgQkED0hDfWkD tVmeT7jj7RxgUF7ZikgRpWuXmA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:37:20 2026 by rpki-client