$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: U8UnmUUqwLagMmm194sj37EPc4hu288oXb1bbBluFUs= Subject key identifier: D0:06:CC:3A:CF:D4:8D:B5:9B:D8:1F:EB:D9:3F:F9:DC:4F:0D:C5:F9 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 03CA Signing time: Fri 17 Apr 2026 00:30:47 +0000 Manifest this update: Fri 17 Apr 2026 00:30:47 +0000 Manifest next update: Fri 24 Apr 2026 00:30:47 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: HNgpTLBxacBA0fsb3sF0BsTaDKuljSG8uJ3XUs+vlFc=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Apr 17 00:30:47 2026 GMT Not After : Apr 24 00:30:47 2026 GMT Subject: CN=69e17f37-7e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:a6:ce:d7:52:14:c1:45:a0:c1:d7:a1:af: c7:a7:56:91:b1:41:fa:98:c3:d1:01:df:53:9f:11: d2:95:d1:28:e5:f5:bf:09:c3:01:b7:db:f0:39:1d: 4c:96:23:4c:d4:48:92:d4:d8:66:35:e5:30:97:e9: 7e:b1:52:c2:ab:cd:3c:d3:45:a7:26:01:ed:23:d8: c0:8a:fb:a9:d9:14:6a:11:36:4e:e5:cc:bf:30:5a: d5:44:70:b2:a0:d5:3a:20:e7:57:eb:5b:78:bd:75: 90:00:88:01:39:c3:51:99:cc:2f:c2:46:1d:e9:63: fd:69:0e:64:e8:66:ed:62:e0:71:c8:08:51:e4:b9: 58:72:8a:bf:00:2e:28:67:df:f1:94:30:aa:37:ba: a1:18:c3:f9:57:0a:51:8c:01:8a:6b:76:e5:4d:46: 12:da:63:e9:26:55:6d:b3:e7:33:3f:2c:28:60:ab: 7f:7d:37:7c:87:ae:f3:76:18:fa:c3:69:19:6f:f3: 94:53:56:a5:a1:86:82:28:57:bd:91:08:75:8e:bf: 4d:86:3a:4b:ae:f9:f0:99:fe:d5:dd:0e:79:e4:bb: 83:2f:7b:79:04:75:45:31:bd:9d:84:c3:e4:30:30: cf:c8:c5:c3:1f:f7:08:63:0e:0f:7f:ed:99:7d:8c: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:06:CC:3A:CF:D4:8D:B5:9B:D8:1F:EB:D9:3F:F9:DC:4F:0D:C5:F9 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:9a:47:73:13:0b:6c:54:b0:39:68:d0:6f:e8:0b:24:84:7c: d8:fe:0f:1d:39:20:0e:0b:fa:85:3d:ae:a8:9d:d2:d5:7f:5a: f1:f3:46:d3:72:54:5e:66:aa:4e:dc:4e:92:32:d7:a6:58:1c: 89:98:8d:f5:08:c9:59:86:10:09:d5:a3:78:0d:37:1e:d4:c8: 14:66:9d:f3:01:d8:74:dd:b5:55:43:ac:a8:ca:99:bf:1a:17: d8:d1:51:a2:2e:39:f3:a1:75:29:c0:0a:2e:4f:06:0f:d8:31: 9b:fc:2a:2b:3f:76:f1:be:8c:ab:3c:d5:2d:20:1e:0c:10:6f: ff:bc:c6:94:8e:29:8d:7c:28:bd:25:a6:6b:5b:d1:68:3f:51: 26:92:f1:e9:3e:ae:95:63:33:da:69:63:75:ce:5a:45:56:5f: ff:6e:51:2a:03:4f:e3:27:76:fb:1d:6b:12:43:9e:25:e5:02: 98:f2:c1:d2:69:29:1d:e4:0f:41:15:99:b3:19:01:79:89:5b: e1:60:83:64:bd:20:a8:6f:66:b9:17:98:54:b2:6a:13:f9:cd: 3a:12:3f:0b:39:ad:c5:aa:e8:79:ad:29:12:7b:0e:eb:da:71: 9f:56:b0:b5:ac:fc:45:16:38:6c:8a:32:c7:66:db:43:26:3f: 45:94:ef:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjYwNDE3MDAzMDQ3WhcNMjYwNDI0MDAzMDQ3WjAYMRYwFAYD VQQDEw02OWUxN2YzNy03ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9ymztdSFMFFoMHXoa/Hp1aRsUH6mMPRAd9TnxHSldEo5fW/CcMBt9vwOR1M liNM1EiS1NhmNeUwl+l+sVLCq80800WnJgHtI9jAivup2RRqETZO5cy/MFrVRHCy oNU6IOdX61t4vXWQAIgBOcNRmcwvwkYd6WP9aQ5k6GbtYuBxyAhR5LlYcoq/AC4o Z9/xlDCqN7qhGMP5VwpRjAGKa3blTUYS2mPpJlVts+czPywoYKt/fTd8h67zdhj6 w2kZb/OUU1aloYaCKFe9kQh1jr9NhjpLrvnwmf7V3Q555LuDL3t5BHVFMb2dhMPk MDDPyMXDH/cIYw4Pf+2ZfYxO+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAGzDrP 1I21m9gf69k/+dxPDcX5MB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZpHcxMLbFSwOWjQb+gLJIR82P4PHTkgDgv6hT2uqJ3S1X9a8fNG03JUXmaq TtxOkjLXplgciZiN9QjJWYYQCdWjeA03HtTIFGad8wHYdN21VUOsqMqZvxoX2NFR oi4586F1KcAKLk8GD9gxm/wqKz928b6MqzzVLSAeDBBv/7zGlI4pjXwovSWma1vR aD9RJpLx6T6ulWMz2mljdc5aRVZf/25RKgNP4yd2+x1rEkOeJeUCmPLB0mkpHeQP QRWZsxkBeYlb4WCDZL0gqG9muReYVLJqE/nNOhI/Czmtxaroea0pEnsO69pxn1aw taz8RRY4bIoyx2bbQyY/RZTvlA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:34 2026 by rpki-client