$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: YjPfv5R0tQiDrirPeRFNzJpDCSeIAji2CSEFZSN+fiw= Subject key identifier: 99:BA:F0:63:26:31:71:B0:C4:24:20:FA:C8:47:8A:D1:0A:28:B4:AB Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 0319 Signing time: Fri 17 Apr 2026 01:04:33 +0000 Manifest this update: Fri 17 Apr 2026 01:04:32 +0000 Manifest next update: Fri 24 Apr 2026 01:04:32 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: ywrlwNNVQuWtrJj6LwY2sfYpmdn+gSEl5qIu4KAlKPk=) 2: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE=) 3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk=) 4: B502B0AE799311EE87452E15C4F9AE02.roa (hash: 1mXamlMRo+ynaPA8W7H/iitEtpOpPxGXkmBb/9Xr46Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Apr 17 01:04:32 2026 GMT Not After : Apr 24 01:04:32 2026 GMT Subject: CN=69e18720-1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:b1:c4:72:65:dc:0c:d3:39:96:bd:22:ca: 5e:12:cb:4c:c2:0e:a5:98:a7:10:ae:75:ef:35:c8: d9:1d:d2:82:f5:81:56:33:5f:9c:12:b2:7a:53:d0: 07:26:b9:0a:e8:a8:9a:84:b2:1a:73:96:cc:63:c2: 28:9e:55:37:f3:5a:66:e5:ad:d1:d6:be:c1:5e:70: 3c:9b:3e:00:6d:4c:3b:d3:45:d6:27:8b:89:74:4d: 1c:21:56:36:b1:12:8c:1d:d9:d9:f0:2a:4a:53:98: 97:fc:d0:2f:f5:ca:7a:eb:25:62:89:8a:83:e1:19: 1d:74:27:4f:0b:46:3e:c2:19:97:65:94:83:cd:b0: 3b:9a:10:4a:77:fa:55:8c:9a:4a:e8:44:5b:e3:b1: 05:1c:d7:73:98:61:94:c2:68:80:a5:46:db:79:f4: 9c:44:0e:1f:c5:d7:e4:f1:46:bf:ea:75:21:57:2d: 14:12:40:c5:cf:b0:bd:52:7f:9b:0b:18:7b:48:e1: c8:9c:00:3f:f6:33:f7:28:02:c4:cb:09:1e:0d:de: ca:d2:96:da:83:b8:ae:7e:3b:f1:77:a4:44:b4:ff: e7:13:57:3e:10:83:78:38:b7:28:fb:06:5d:bd:4b: 0e:b1:c0:2a:1d:87:6d:7a:99:10:13:2d:2e:43:c7: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:F0:63:26:31:71:B0:C4:24:20:FA:C8:47:8A:D1:0A:28:B4:AB X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:82:27:4c:d2:c1:b8:b7:ac:b6:41:01:76:02:36:bf:03:56: 75:ce:9a:30:76:9e:97:59:3e:c4:b8:c6:91:74:00:93:1f:2f: 27:2a:a8:01:94:36:d1:bc:95:df:cb:2d:ce:12:39:c3:05:0b: 00:25:6d:8b:ee:4c:d0:e7:8b:3b:06:92:e0:22:26:24:88:ad: 50:55:27:05:76:c6:a8:94:b9:1b:bc:61:b6:fc:56:af:5e:c4: e4:be:9c:17:05:02:d7:00:83:68:85:ad:5c:e7:53:98:9d:05: 5e:17:3c:6b:59:10:51:8e:27:d4:58:59:d9:02:08:47:01:6c: e2:c8:d9:ae:14:5f:aa:ca:44:d0:b9:c5:f8:d4:ef:71:4b:42: 6b:f7:dc:9f:87:19:03:ad:9f:33:1a:5a:f9:f5:4d:53:9d:37: 25:3b:19:b6:55:8b:1f:22:f3:f2:5f:77:ef:24:9f:24:65:71: 71:51:14:d7:44:c9:db:1d:43:57:6a:53:12:d7:a2:c8:d3:2f: 9a:1e:70:ad:7d:c7:5e:7a:d8:3f:43:cf:d3:63:0e:ae:f4:32: 1a:0b:d9:ad:25:a6:a4:e9:d0:20:e0:d9:ae:ca:c4:00:5a:64: 95:de:84:e9:71:89:97:47:2e:74:90:ac:a9:f6:d7:2a:24:23: 91:dd:f5:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjYwNDE3MDEwNDMyWhcNMjYwNDI0MDEwNDMyWjAYMRYwFAYD VQQDEw02OWUxODcyMC0xNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCexxHJl3AzTOZa9IspeEstMwg6lmKcQrnXvNcjZHdKC9YFWM1+cErJ6U9AH JrkK6KiahLIac5bMY8IonlU381pm5a3R1r7BXnA8mz4AbUw700XWJ4uJdE0cIVY2 sRKMHdnZ8CpKU5iX/NAv9cp66yViiYqD4RkddCdPC0Y+whmXZZSDzbA7mhBKd/pV jJpK6ERb47EFHNdzmGGUwmiApUbbefScRA4fxdfk8Ua/6nUhVy0UEkDFz7C9Un+b Cxh7SOHInAA/9jP3KALEywkeDd7K0pbag7iufjvxd6REtP/nE1c+EIN4OLco+wZd vUsOscAqHYdtepkQEy0uQ8dHPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm68GMm MXGwxCQg+shHitEKKLSrMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVoInTNLBuLestkEBdgI2vwNWdc6aMHael1k+xLjGkXQAkx8vJyqoAZQ20byV 38stzhI5wwULACVti+5M0OeLOwaS4CImJIitUFUnBXbGqJS5G7xhtvxWr17E5L6c FwUC1wCDaIWtXOdTmJ0FXhc8a1kQUY4n1FhZ2QIIRwFs4sjZrhRfqspE0LnF+NTv cUtCa/fcn4cZA62fMxpa+fVNU503JTsZtlWLHyLz8l937ySfJGVxcVEU10TJ2x1D V2pTEteiyNMvmh5wrX3HXnrYP0PP02MOrvQyGgvZrSWmpOnQIODZrsrEAFpkld6E 6XGJl0cudJCsqfbXKiQjkd31Rw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:25 2026 by rpki-client