$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: pYK4u/Ki9qmKc6/qv7lJwkMhEExfCcsb08FLLsgMb9s= Subject key identifier: F5:08:98:00:7D:E9:CE:30:AF:42:DD:B2:8B:66:3F:8E:6C:97:AC:95 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 0462 Signing time: Fri 17 Apr 2026 00:06:39 +0000 Manifest this update: Fri 17 Apr 2026 00:06:39 +0000 Manifest next update: Fri 24 Apr 2026 00:06:39 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: KFaconLqNBPvx7DXwlRYg/y1weKDzHKdY3GMtPLXj6E=) 2: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 1pKGI4YxA6Kap59sCnfzUKmyKcKdcizdZQf+vovFFnk=) 3: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 6jrH7luWVFa/EBIKOSXO0MpS17prp6l8m7pIdmNPjD8=) 4: 0B5742C234AD11F1851A1E75B8833773.roa (hash: mrkKKc0cU8SDUFTCBDWltPPNG2EiLfGGhf70i5GAtLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Apr 17 00:06:39 2026 GMT Not After : Apr 24 00:06:39 2026 GMT Subject: CN=69e1798f-9285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:ae:c2:41:c8:9d:dd:3e:37:5f:78:57:46: 80:fa:8b:b9:0c:bb:01:45:f5:a2:0a:cf:be:d3:37: 74:f7:ae:56:9a:27:d9:6b:a4:e8:5f:d9:10:d6:b2: 42:93:99:23:43:68:38:d2:de:14:b2:a4:9f:fa:ae: 05:f6:68:a2:55:e1:55:ef:dd:82:70:93:2a:42:69: a0:86:1e:6f:14:ab:5d:49:f9:0f:54:ac:b8:cc:49: a3:5d:bf:78:af:23:4f:c5:2f:a4:31:fc:4f:5d:ce: 20:37:0d:8b:97:8a:db:34:df:c8:a3:72:a3:f1:a2: a9:41:81:30:d7:e9:21:07:a5:25:9a:1c:8b:05:cf: e9:2f:47:49:34:75:97:2b:c6:59:a7:c2:2a:51:c5: 5d:0d:55:7a:80:2b:6a:75:46:b4:25:e8:06:1b:51: 15:87:0a:91:b8:03:ea:34:7a:b0:51:6b:92:3e:af: 85:59:aa:d7:73:9b:d9:4e:2f:4f:cd:1a:87:83:17: 94:8b:1f:df:70:1f:2a:d4:61:3a:a7:fe:a4:de:6c: 93:fb:d5:23:a3:0c:7a:ce:88:28:8d:ee:fe:85:b9: e4:4c:4b:71:30:77:69:29:a1:b8:fa:cb:ad:35:a6: ab:c4:ca:41:50:06:3e:84:73:10:73:bb:7e:e8:fc: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:08:98:00:7D:E9:CE:30:AF:42:DD:B2:8B:66:3F:8E:6C:97:AC:95 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:63:0d:f8:7f:6e:a0:91:2d:9d:cb:2d:df:2d:30:b7:c6: 73:2a:5e:88:e1:67:24:9d:50:8d:79:04:e7:f1:e1:07:fe:9d: 83:f3:5f:ad:ac:3d:51:46:2f:bf:33:6e:3c:f8:0d:e3:45:9b: 0c:dd:2b:ad:f0:ac:b3:5d:2f:a8:41:6a:f3:26:08:5e:12:ad: 56:10:60:f3:f2:cf:ef:3c:2e:01:b7:90:43:82:c8:6b:53:a6: 3f:80:d3:a9:de:f2:1b:aa:53:14:92:6d:af:d5:d8:f3:e0:7e: 08:f4:ee:37:61:51:3e:50:be:e5:a2:81:e2:6e:5f:22:00:22: 17:83:4d:e1:83:1d:f8:30:41:3d:35:43:59:32:e0:26:5e:19: 84:0e:80:7f:46:60:f1:88:4a:58:36:9c:c9:d8:4d:71:ec:25: 38:cd:e3:d0:20:7b:a5:2a:8f:60:93:5f:41:8a:61:ef:7d:17: d2:d2:4a:70:7d:5d:98:b0:09:b8:45:3b:7b:c7:2b:e3:f9:e5: 7d:de:9c:84:21:06:0e:f0:df:be:7a:10:74:0f:d6:48:9e:3d: 44:47:ec:90:a1:89:b1:a5:64:aa:22:bc:fe:3d:98:df:ea:a8: 09:14:eb:bc:2b:3c:2c:3d:e2:73:64:1b:2b:ba:74:b4:46:d6: e1:9d:ef:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjYwNDE3MDAwNjM5WhcNMjYwNDI0MDAwNjM5WjAYMRYwFAYD VQQDEw02OWUxNzk4Zi05Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4uuwkHInd0+N194V0aA+ou5DLsBRfWiCs++0zd0965WmifZa6ToX9kQ1rJC k5kjQ2g40t4UsqSf+q4F9miiVeFV792CcJMqQmmghh5vFKtdSfkPVKy4zEmjXb94 ryNPxS+kMfxPXc4gNw2Ll4rbNN/Io3Kj8aKpQYEw1+khB6UlmhyLBc/pL0dJNHWX K8ZZp8IqUcVdDVV6gCtqdUa0JegGG1EVhwqRuAPqNHqwUWuSPq+FWarXc5vZTi9P zRqHgxeUix/fcB8q1GE6p/6k3myT+9Ujowx6zogoje7+hbnkTEtxMHdpKaG4+sut NaarxMpBUAY+hHMQc7t+6Px51wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUImAB9 6c4wr0LdsotmP45sl6yVMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtb1jDfh/bqCRLZ3LLd8tMLfGcypeiOFnJJ1QjXkE5/HhB/6dg/Nfraw9UUYv vzNuPPgN40WbDN0rrfCss10vqEFq8yYIXhKtVhBg8/LP7zwuAbeQQ4LIa1OmP4DT qd7yG6pTFJJtr9XY8+B+CPTuN2FRPlC+5aKB4m5fIgAiF4NN4YMd+DBBPTVDWTLg Jl4ZhA6Af0Zg8YhKWDacydhNcewlOM3j0CB7pSqPYJNfQYph730X0tJKcH1dmLAJ uEU7e8cr4/nlfd6chCEGDvDfvnoQdA/WSJ49REfskKGJsaVkqiK8/j2Y3+qoCRTr vCs8LD3ic2QbK7p0tEbW4Z3vrw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:43:44 2026 by rpki-client