$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: Z0J7cMOvARbx4cxJnX+uTcAg9TwJlca0x18fFCo5P1U= Subject key identifier: 06:3F:0A:53:EB:62:A1:39:D5:16:FA:C0:B5:7F:A1:7E:A0:81:B3:45 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 0553 Signing time: Sat 04 Apr 2026 23:13:00 +0000 Manifest this update: Sat 04 Apr 2026 23:12:59 +0000 Manifest next update: Sat 11 Apr 2026 23:12:59 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 08wS70gKisjix/ATgBxDlNDdrDp9aXFyLtBUsM20gHE=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: HVYsfOxlb2WAh2eGE9kwR0kPlhU1KxlVthyk27GCA3w=) 3: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (hash: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc=) 4: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: uWKrlH46xOMUPQf0I41m9PfK6LPIgrPit2IHhoLq4XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Apr 4 23:12:59 2026 GMT Not After : Apr 11 23:12:59 2026 GMT Subject: CN=69d19afc-3127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:2b:95:d1:49:06:14:fe:56:5c:71:7b:53: 10:f6:7c:d9:0a:6b:b8:ea:2d:37:2f:95:66:3a:05: 27:2e:55:3b:ee:bd:fe:c3:89:f6:ed:e5:a5:22:a2: ae:bb:2d:54:a0:18:8e:c7:14:f9:09:4d:b5:28:ce: 80:85:f0:f9:66:f5:5f:1e:31:e5:5b:cd:b7:77:84: 14:f7:06:ae:24:3c:8c:0f:8e:58:41:17:f8:8b:b0: e5:4c:5e:c2:2f:f8:e6:78:4e:2f:ef:e6:37:48:f7: d0:00:ce:e4:78:d0:2a:b0:48:30:b5:38:65:6c:f9: 77:8a:92:24:10:69:c1:40:9f:44:dc:ea:5e:16:fb: 67:34:66:b8:89:14:6a:ec:cb:15:da:b1:46:56:e2: 18:f8:e6:ba:60:a6:c0:1a:53:c8:22:dc:11:fe:09: e2:41:a2:79:88:4d:e9:23:cd:37:25:98:b0:d1:69: 9e:86:82:ec:bd:8a:0e:de:6b:c0:4a:37:73:67:21: 41:51:ac:62:c1:4f:19:4f:1b:4c:2e:a6:e9:d9:b7: ba:7d:86:d8:46:ba:12:96:e4:b2:b1:53:35:97:8d: b2:54:fc:f7:ce:89:46:fe:ba:41:1c:e0:cc:8c:a3: 3f:72:a9:b9:6a:bd:51:48:ce:ca:85:bc:72:27:fa: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:0A:53:EB:62:A1:39:D5:16:FA:C0:B5:7F:A1:7E:A0:81:B3:45 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6e:13:90:b4:fb:db:71:3d:a6:51:8b:b2:cd:a5:69:85:a2: 3a:3c:01:73:18:7a:c5:c7:47:78:6e:11:3c:4a:bd:ed:b8:4f: 09:f8:d8:5b:d6:2d:32:77:ec:04:c6:f3:cd:74:30:41:aa:de: fb:4b:ff:91:87:03:e7:d0:1c:1d:c6:24:b2:d4:1d:17:64:a3: f1:3a:10:91:e4:7d:9e:f0:ee:ad:28:4b:18:8e:a0:be:3b:3b: e7:28:82:c3:a1:e8:78:01:98:c5:8c:ae:13:4d:b1:2b:46:48: 5a:0e:8e:19:10:cc:1f:cf:19:83:4b:15:c7:7e:cc:48:25:b9: 9a:41:cb:8b:5b:87:a4:a6:b3:65:90:15:ef:3f:c6:e0:6c:6b: 55:8c:de:53:a8:04:ab:f1:ea:9e:c0:05:9a:60:1b:5a:72:87: ad:98:89:bc:47:bc:7a:88:0f:0e:4d:b9:97:cb:d9:d4:a6:c0: a6:7b:9e:20:b2:72:7b:94:6c:1e:32:6b:ac:42:92:82:52:99: 35:3b:95:7c:9d:2f:ca:43:13:14:ef:4e:03:59:6a:43:fb:90: 43:f0:73:6c:64:d3:34:cf:cd:d7:55:89:8a:b8:87:d6:5a:ae: d8:0a:9e:0d:ac:ed:03:c1:d6:b9:ad:b9:71:8f:f2:2d:a3:dd: d8:a4:b7:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjYwNDA0MjMxMjU5WhcNMjYwNDExMjMxMjU5WjAYMRYwFAYD VQQDEw02OWQxOWFmYy0zMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVQrldFJBhT+Vlxxe1MQ9nzZCmu46i03L5VmOgUnLlU77r3+w4n27eWlIqKu uy1UoBiOxxT5CU21KM6AhfD5ZvVfHjHlW823d4QU9wauJDyMD45YQRf4i7DlTF7C L/jmeE4v7+Y3SPfQAM7keNAqsEgwtThlbPl3ipIkEGnBQJ9E3OpeFvtnNGa4iRRq 7MsV2rFGVuIY+Oa6YKbAGlPIItwR/gniQaJ5iE3pI803JZiw0WmehoLsvYoO3mvA SjdzZyFBUaxiwU8ZTxtMLqbp2be6fYbYRroSluSysVM1l42yVPz3zolG/rpBHODM jKM/cqm5ar1RSM7KhbxyJ/qw3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAY/ClPr YqE51Rb6wLV/oX6ggbNFMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcG4TkLT723E9plGLss2laYWiOjwBcxh6xcdHeG4RPEq97bhPCfjYW9YtMnfs BMbzzXQwQare+0v/kYcD59AcHcYkstQdF2Sj8ToQkeR9nvDurShLGI6gvjs75yiC w6HoeAGYxYyuE02xK0ZIWg6OGRDMH88Zg0sVx37MSCW5mkHLi1uHpKazZZAV7z/G 4GxrVYzeU6gEq/HqnsAFmmAbWnKHrZiJvEe8eogPDk25l8vZ1KbApnueILJye5Rs HjJrrEKSglKZNTuVfJ0vykMTFO9OA1lqQ/uQQ/BzbGTTNM/N11WJiriH1lqu2Aqe DaztA8HWua25cY/yLaPd2KS3Yg== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:29 2026 by rpki-client