$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 6zSKjcmMyKJIck9pq49ywkS2OGWwVwDIjh+vVR6RCK0= Subject key identifier: C7:D4:BD:2B:E9:9D:FF:8F:AF:41:DA:E2:B2:28:1B:21:71:37:C7:49 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A88 Signing time: Thu 16 Apr 2026 19:29:02 +0000 Manifest this update: Thu 16 Apr 2026 19:29:02 +0000 Manifest next update: Thu 23 Apr 2026 19:29:02 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: LrLWtSi7nhrRvCWggGxypz/D07OfPx11FlgFGg+7TI0=) 2: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: rbdpNPf6mALUrM9CZMd+wHJqII9aB4Fnkkaau21r1uU=) 3: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: /2SJ2aiP+X6fJgagbjjpGARtX+HfT5QAQaxAWdIcMwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Apr 16 19:29:02 2026 GMT Not After : Apr 23 19:29:02 2026 GMT Subject: CN=69e1387e-da02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:80:a2:3e:78:45:c1:9b:e0:82:b1:96:01: 49:be:6a:09:d8:51:70:0a:6b:3c:8e:d3:7e:a4:b1: 91:31:be:0f:d3:1d:9f:a0:46:7e:48:a8:89:be:42: 7b:71:a8:14:b1:ff:6d:56:47:a2:81:99:62:cf:8f: 16:5f:2b:b5:21:b5:bf:72:dd:54:42:64:34:a8:4e: c0:94:3a:d8:c4:79:92:63:8b:b2:2c:7d:9d:80:d0: 4d:5a:15:14:7b:f9:d4:85:ce:fe:ac:a5:11:64:4b: 67:ce:51:c8:e5:d5:39:db:1d:c1:5c:6c:a0:f0:4b: 48:12:2b:83:8d:a5:3f:4a:76:eb:e8:09:ea:70:72: bc:3b:e6:05:01:ba:b3:a5:a5:39:c5:10:64:7a:60: 15:f0:c5:cf:5b:b4:55:22:2b:bb:b7:df:4b:e2:49: 47:9c:0e:43:58:17:56:13:28:08:9e:30:68:5c:d8: 07:a3:2c:8e:ee:ff:e2:0a:a5:c6:68:e9:54:eb:96: 0c:8d:72:27:9d:5c:c5:68:68:c7:f8:ac:a7:1b:ba: 47:8f:0b:14:fd:5f:10:12:ef:91:c4:0b:d0:c5:e6: 44:9a:7b:e0:ac:1c:6e:e0:ad:a3:62:84:ae:20:1c: 99:a4:63:94:f6:98:ca:f0:58:77:a2:b6:cf:67:ec: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:BD:2B:E9:9D:FF:8F:AF:41:DA:E2:B2:28:1B:21:71:37:C7:49 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:a3:29:1e:55:2e:a4:10:1f:1f:1c:be:43:2d:d6:bd:44: 62:59:b1:60:d1:4e:3c:42:e8:53:de:67:cd:50:ca:2e:8b:df: 8b:52:b5:08:28:34:94:3a:b3:6b:91:0d:97:81:d2:28:f8:c5: 1c:3e:d5:fb:3d:12:2a:a2:fc:86:da:d3:a0:bd:72:76:4f:d1: 28:d4:b9:7e:4e:04:65:2c:dd:0b:3c:19:0e:15:42:96:25:02: 7f:fd:82:11:20:d6:52:dd:ab:87:1b:ff:bd:2a:8d:72:a6:eb: 06:d1:ec:3a:24:b9:a2:f1:56:66:f3:d3:73:28:64:80:36:5b: 25:29:be:0d:8f:02:27:cb:fd:41:d8:8f:96:a6:77:16:b6:63: 70:46:14:6a:c4:70:ec:4f:c9:44:04:a2:21:c7:67:94:08:fd: 9b:92:40:b4:c4:92:7c:e0:1a:ed:96:75:31:57:e7:cc:d3:64: d1:22:b2:2a:b6:f8:b4:26:d3:57:0b:7b:16:c3:af:9b:0c:27: 76:9b:1f:cd:ba:06:b0:bf:35:8c:79:21:cd:f5:b2:65:36:25: e3:26:c8:55:96:d5:4f:78:32:6d:ee:c5:d3:38:d8:16:c0:ff: ab:ea:6c:4a:22:e3:1d:db:5a:ea:13:b8:5c:7f:8c:eb:59:f1: 8d:b3:7d:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjYwNDE2MTkyOTAyWhcNMjYwNDIzMTkyOTAyWjAYMRYwFAYD VQQDEw02OWUxMzg3ZS1kYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzquAoj54RcGb4IKxlgFJvmoJ2FFwCms8jtN+pLGRMb4P0x2foEZ+SKiJvkJ7 cagUsf9tVkeigZliz48WXyu1IbW/ct1UQmQ0qE7AlDrYxHmSY4uyLH2dgNBNWhUU e/nUhc7+rKURZEtnzlHI5dU52x3BXGyg8EtIEiuDjaU/Snbr6AnqcHK8O+YFAbqz paU5xRBkemAV8MXPW7RVIiu7t99L4klHnA5DWBdWEygInjBoXNgHoyyO7v/iCqXG aOlU65YMjXInnVzFaGjH+KynG7pHjwsU/V8QEu+RxAvQxeZEmnvgrBxu4K2jYoSu IByZpGOU9pjK8Fh3orbPZ+wJQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfUvSvp nf+Pr0Ha4rIoGyFxN8dJMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgzejKR5VLqQQHx8cvkMt1r1EYlmxYNFOPELoU95nzVDKLovfi1K1CCg0lDqz a5ENl4HSKPjFHD7V+z0SKqL8htrToL1ydk/RKNS5fk4EZSzdCzwZDhVCliUCf/2C ESDWUt2rhxv/vSqNcqbrBtHsOiS5ovFWZvPTcyhkgDZbJSm+DY8CJ8v9QdiPlqZ3 FrZjcEYUasRw7E/JRASiIcdnlAj9m5JAtMSSfOAa7ZZ1MVfnzNNk0SKyKrb4tCbT Vwt7FsOvmwwndpsfzboGsL81jHkhzfWyZTYl4ybIVZbVT3gybe7F0zjYFsD/q+ps SiLjHdta6hO4XH+M61nxjbN9Gw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:46 2026 by rpki-client