$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: 3xvuVkTE8D9N98lhiSJWm+hL+5b6C49fPETfmxFdGs4= Subject key identifier: 19:46:62:2E:D5:42:11:30:6E:79:42:D2:FE:B9:8B:0C:E6:A8:86:D0 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 022D Signing time: Sun 05 Apr 2026 02:17:06 +0000 Manifest this update: Sun 05 Apr 2026 02:17:05 +0000 Manifest next update: Sun 12 Apr 2026 02:17:05 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: xa2WhdznGKB5upj1p5LUsB4ZixZCf3wpZAeTkLYlG7g=) 2: 5D1FFF4EB31211F0AE01876AC4F9AE02.roa (hash: ZrWrw2EJBImrP5sk4MH787VmfyYHG1GSi4LZ+u4YZFE=) 3: E24E0BA8B31111F098769D68C4F9AE02.roa (hash: Z4uX0CwfXiIbx8iLe7cTsjy3naNNIuiaJMhQ/djFFWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Apr 5 02:17:05 2026 GMT Not After : Apr 12 02:17:05 2026 GMT Subject: CN=69d1c621-0066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:56:22:0d:00:2c:ef:54:a2:63:68:c8:30: f0:38:4d:42:e6:97:56:2f:08:f7:10:f4:05:75:c8: 72:ef:1d:1d:d0:ae:e1:2c:d8:08:f9:23:9d:6c:04: 24:37:86:26:24:20:85:49:0b:b3:47:67:9f:f8:3e: 18:9a:27:d5:20:40:b5:8e:d9:ae:b2:37:f8:ce:28: a6:12:8e:f6:26:c4:98:d7:c3:50:c8:9d:77:b8:8d: b9:f7:11:21:e6:6e:8b:1c:97:98:47:4d:60:15:6e: 5b:36:05:6f:d1:d6:48:12:bb:c3:ea:73:58:70:f6: bb:4b:64:7e:79:1d:3f:7a:b9:ca:b3:2f:c4:9f:8c: 9c:db:71:6c:e9:d1:8e:8e:14:10:75:95:58:77:07: 81:ea:97:19:ab:d3:bc:49:e1:e1:b7:38:38:ab:7a: 5e:d5:d6:eb:e0:e9:fd:9a:b9:0e:06:96:f2:a7:b8: 33:2e:9a:22:8f:bb:2a:37:42:77:e0:38:73:c5:97: f1:06:95:8e:4b:d8:bb:43:80:5e:da:3f:11:1c:1d: 04:6a:5d:ca:fa:7f:45:fd:17:a7:cc:e9:35:94:8b: e6:9a:25:38:f4:50:07:87:0f:b6:be:16:b9:17:bd: 68:50:bd:16:dd:83:94:40:84:7c:2e:e9:32:1d:e4: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:46:62:2E:D5:42:11:30:6E:79:42:D2:FE:B9:8B:0C:E6:A8:86:D0 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:da:45:2b:35:89:ec:12:51:60:8a:48:54:66:4b:3f:53: 2e:e1:da:d7:04:99:6e:9d:d4:af:39:f3:c8:9a:2e:ea:6f:a9: 0b:7a:06:4a:88:ed:61:ee:d6:0f:cf:cc:ae:b8:0f:85:a3:97: 90:5c:47:c9:df:7c:1e:1f:6a:89:b7:1e:b2:5b:32:88:dd:80: 90:2a:11:80:05:fc:8d:5f:5e:51:08:f2:52:e6:bd:e3:5e:86: 2c:c5:2b:53:a5:53:59:95:eb:93:99:61:13:47:17:e6:36:03: 8e:37:f2:4c:a7:0e:7a:52:b7:72:34:f0:a7:f2:9f:d0:e8:90: 5f:83:b5:4c:72:1a:e6:3c:a3:ad:f8:33:91:3d:e4:32:b6:a3: db:7c:eb:dd:0a:25:5a:48:2f:90:55:38:bf:e4:5d:01:78:02: 73:39:c0:b4:e4:6a:db:63:28:c4:52:4a:d2:dc:cc:5b:92:74: a8:67:26:a1:76:38:3b:e1:d0:6b:91:ca:9c:dc:93:50:32:cd: f2:d8:af:2a:ac:63:d3:8f:0a:96:7a:66:4a:26:36:1c:9a:f7: 32:e4:80:5a:bf:80:86:16:5f:7a:fd:02:0f:c7:c4:ea:06:39: 37:8c:45:2d:ec:32:d0:72:31:8e:54:df:45:2a:d2:e8:4f:02: 4c:77:13:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjYwNDA1MDIxNzA1WhcNMjYwNDEyMDIxNzA1WjAYMRYwFAYD VQQDEw02OWQxYzYyMS0wMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrFWIg0ALO9UomNoyDDwOE1C5pdWLwj3EPQFdchy7x0d0K7hLNgI+SOdbAQk N4YmJCCFSQuzR2ef+D4YmifVIEC1jtmusjf4ziimEo72JsSY18NQyJ13uI259xEh 5m6LHJeYR01gFW5bNgVv0dZIErvD6nNYcPa7S2R+eR0/ernKsy/En4yc23Fs6dGO jhQQdZVYdweB6pcZq9O8SeHhtzg4q3pe1dbr4On9mrkOBpbyp7gzLpoij7sqN0J3 4DhzxZfxBpWOS9i7Q4Be2j8RHB0Eal3K+n9F/RenzOk1lIvmmiU49FAHhw+2vha5 F71oUL0W3YOUQIR8LukyHeQw2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBlGYi7V QhEwbnlC0v65iwzmqIbQMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA2baRSs1iewSUWCKSFRmSz9TLuHa1wSZbp3UrznzyJou6m+pC3oGSojtYe7W D8/MrrgPhaOXkFxHyd98Hh9qibceslsyiN2AkCoRgAX8jV9eUQjyUua9416GLMUr U6VTWZXrk5lhE0cX5jYDjjfyTKcOelK3cjTwp/Kf0OiQX4O1THIa5jyjrfgzkT3k Mraj23zr3QolWkgvkFU4v+RdAXgCcznAtORq22MoxFJK0tzMW5J0qGcmoXY4O+HQ a5HKnNyTUDLN8tivKqxj048KlnpmSiY2HJr3MuSAWr+AhhZfev0CD8fE6gY5N4xF Lewy0HIxjlTfRSrS6E8CTHcTqA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:11 2026 by rpki-client