$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: IPczT2lmrKMzaZ0/+LXSb9T3qxRLaXTqqyEEgpV+4tU= Subject key identifier: 5F:CD:5B:F0:16:B2:05:0F:BB:11:42:1C:AD:AC:6F:C1:8A:A2:AD:DC Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 01BA Signing time: Fri 17 Apr 2026 03:40:41 +0000 Manifest this update: Fri 17 Apr 2026 03:40:41 +0000 Manifest next update: Fri 24 Apr 2026 03:40:41 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: wg9G4m3uMBiJU1cbGbLkUghA5FeZO3nyJ0AQT41lxDU=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Apr 17 03:40:41 2026 GMT Not After : Apr 24 03:40:41 2026 GMT Subject: CN=69e1abb9-d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:dd:1c:79:66:92:3e:67:ca:08:9d:06:80: 0b:0c:58:f3:b4:a9:24:d6:fb:ee:ab:4d:21:34:66: 55:3a:c6:b2:87:c4:b5:a2:04:e4:6d:1f:3f:31:de: ec:15:72:8a:a1:29:a5:84:6b:e7:de:94:6f:65:eb: d2:23:b3:4c:5f:8b:9e:4a:77:34:ee:e2:a8:36:3a: 34:71:46:be:4f:bb:33:3b:61:b5:80:68:fd:16:bb: c8:9e:1f:a9:27:e4:4a:91:3d:97:4b:9e:91:b1:e1: b9:cb:ff:13:fc:f1:c9:a7:1f:42:8f:e7:90:2a:54: c2:92:03:38:92:c8:23:5c:5a:dc:dd:3b:8c:18:c9: ad:32:99:42:12:d8:93:f5:f6:d1:45:fb:77:f4:0c: 9c:79:a6:71:cf:c4:7b:42:9a:47:bd:a9:6a:d1:93: 52:fd:fb:e0:5e:d2:40:a4:55:bb:94:19:09:b3:74: 02:b2:85:08:97:ef:37:7f:19:d8:d9:8b:6d:4d:74: e2:65:41:35:2b:d1:f1:8f:38:25:ec:cb:a3:22:21: 8f:34:48:6c:47:8b:ee:66:3f:1b:e9:5b:b5:17:40: 80:f2:95:a8:1a:d5:94:49:a0:f6:41:7a:10:77:ae: 40:c8:e4:72:42:9c:6b:5e:b4:9a:1e:b1:9f:3e:72: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CD:5B:F0:16:B2:05:0F:BB:11:42:1C:AD:AC:6F:C1:8A:A2:AD:DC X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:94:d3:57:9d:6c:69:6b:9f:17:d8:d1:dc:bb:5b:1d:e1:88: 47:8b:94:a0:cd:cb:6b:87:8f:d2:ea:df:d8:ef:03:a3:3a:5b: ce:a7:41:26:c8:1b:aa:02:68:bd:f6:b5:b4:75:31:1c:eb:28: c1:5c:5f:f4:14:5f:64:ce:19:30:5a:cc:f8:60:b6:5e:0e:83: 9f:e1:c5:2f:ab:a7:3d:c3:ef:60:fe:11:bd:58:78:d3:31:f4: b5:92:7b:12:a0:29:56:74:0d:cc:ac:98:ec:c0:80:58:83:16: e0:2a:8b:c5:56:f0:3c:05:28:65:1a:89:c6:d8:5e:9e:70:ca: 24:20:9e:d0:67:0f:22:28:d1:b0:58:ae:f5:d8:3a:bd:02:ae: 30:f4:38:88:83:a3:ec:b6:89:26:cc:14:e5:b9:70:da:5d:55: 1a:04:b9:9b:a8:08:7f:91:a7:60:10:91:1f:f0:48:15:46:d5: 1d:e6:5c:52:39:c8:35:07:4e:83:2c:23:9e:a3:09:10:3b:30: c4:18:00:85:2f:b2:cb:63:cb:30:75:29:4e:00:b1:9b:dc:63: 35:a7:cf:ab:31:db:c9:1c:31:2c:21:96:c0:a8:64:b7:cd:3c: 32:30:64:be:58:7a:c3:41:09:a5:6f:7a:51:aa:4b:26:2e:38: 0a:f4:38:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjYwNDE3MDM0MDQxWhcNMjYwNDI0MDM0MDQxWjAYMRYwFAYD VQQDEw02OWUxYWJiOS1kMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnrdHHlmkj5nygidBoALDFjztKkk1vvuq00hNGZVOsayh8S1ogTkbR8/Md7s FXKKoSmlhGvn3pRvZevSI7NMX4ueSnc07uKoNjo0cUa+T7szO2G1gGj9FrvInh+p J+RKkT2XS56RseG5y/8T/PHJpx9Cj+eQKlTCkgM4ksgjXFrc3TuMGMmtMplCEtiT 9fbRRft39AyceaZxz8R7QppHvalq0ZNS/fvgXtJApFW7lBkJs3QCsoUIl+83fxnY 2YttTXTiZUE1K9Hxjzgl7MujIiGPNEhsR4vuZj8b6Vu1F0CA8pWoGtWUSaD2QXoQ d65AyORyQpxrXrSaHrGfPnKifwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/NW/AW sgUPuxFCHK2sb8GKoq3cMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjZTTV51saWufF9jR3LtbHeGIR4uUoM3La4eP0urf2O8DozpbzqdBJsgbqgJo vfa1tHUxHOsowVxf9BRfZM4ZMFrM+GC2Xg6Dn+HFL6unPcPvYP4RvVh40zH0tZJ7 EqApVnQNzKyY7MCAWIMW4CqLxVbwPAUoZRqJxthennDKJCCe0GcPIijRsFiu9dg6 vQKuMPQ4iIOj7LaJJswU5blw2l1VGgS5m6gIf5GnYBCRH/BIFUbVHeZcUjnINQdO gywjnqMJEDswxBgAhS+yy2PLMHUpTgCxm9xjNafPqzHbyRwxLCGWwKhkt808MjBk vlh6w0EJpW96UapLJi44CvQ4mw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:10 2026 by rpki-client