$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: EVRzvp/MzC+BOUZCO/AnCMhB+C0bHVZtD0nt60HitSE= Subject key identifier: AF:7D:A0:B9:3C:D9:EC:2E:F9:D2:D9:C3:DE:6E:8E:EC:89:61:F0:44 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 0142 Signing time: Sun 05 Apr 2026 04:42:12 +0000 Manifest this update: Sun 05 Apr 2026 04:42:11 +0000 Manifest next update: Sun 12 Apr 2026 04:42:11 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: fRU84ywj45FxfANIR6FLvEO0KsqDB5kpERhpa5l2a+I=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 4wQRTSw2OhfPX3cX/N9IwTaFMJyIxBXNPos7xtpMpfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Apr 5 04:42:11 2026 GMT Not After : Apr 12 04:42:11 2026 GMT Subject: CN=69d1e823-a366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:0c:68:50:69:d2:c7:f3:71:30:a6:99:66: 59:d8:fa:9a:e6:24:96:9f:e0:69:5f:1f:b6:36:dd: 1b:1a:e3:b2:e9:18:8b:fd:8b:f5:39:96:63:81:9f: ab:15:bd:44:66:15:84:6b:63:ed:be:42:1c:0d:59: 21:c6:fa:79:85:a8:4f:e4:9d:12:e9:5d:6f:19:f4: ec:f4:29:38:13:6b:37:f8:ce:ae:10:f0:3a:c0:6b: f7:98:15:68:57:86:84:5a:d2:c5:4f:1b:07:79:0c: 01:1e:b8:a2:93:f0:6c:24:fc:9e:50:c7:e0:5e:c3: c6:3a:b4:d9:da:d8:9d:83:45:a9:22:cf:7b:46:ab: 7c:5b:71:6b:80:de:2a:9e:1d:bc:0c:89:d4:f3:bf: eb:a1:07:44:69:7e:7e:c9:cf:df:85:c5:54:b0:a9: 9f:b6:c1:66:80:44:1c:77:c8:44:d0:0a:29:06:01: 30:0b:46:df:71:04:25:cb:da:48:78:0a:ad:c0:af: 0e:c6:8b:15:34:26:94:5e:80:39:27:ed:37:97:40: 0e:20:26:bd:34:b0:98:5f:73:79:bd:09:c0:a6:96: a5:b1:db:d9:e1:83:dd:05:1e:b8:14:8c:d1:bf:29: 0b:6d:fd:23:1b:ec:dc:1a:7a:22:4f:74:b2:2f:24: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7D:A0:B9:3C:D9:EC:2E:F9:D2:D9:C3:DE:6E:8E:EC:89:61:F0:44 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:66:0b:fe:bb:77:27:11:81:6c:eb:b0:29:da:0e:17:c3:d6: 9b:42:32:e6:b7:9c:ec:5c:67:51:b3:75:74:27:bc:89:f0:4e: 00:c9:35:7e:31:84:f3:a1:09:9c:62:ff:10:c6:ab:11:5e:72: ba:e4:a9:c6:e3:31:97:4c:f9:03:bc:62:27:8d:88:99:e1:61: 17:6b:76:bd:ae:aa:08:a9:38:ab:4d:87:8a:92:8f:9f:f4:9d: 0c:e5:50:c6:5e:38:cb:fd:c7:3a:f8:a9:be:d9:31:fb:32:d5: e2:4a:0e:e8:a8:1f:32:f6:d0:4f:26:34:c0:93:76:c2:9c:48: 46:3f:16:35:80:10:24:79:18:a0:31:64:4c:ff:4e:1e:3d:a0: 37:9e:01:0f:ce:c0:ee:48:89:8d:ba:20:76:97:19:79:66:f6: ad:2c:24:ee:c2:08:c1:be:c2:a6:32:14:bc:d9:aa:27:4e:62: c9:6e:d7:9a:6c:c2:e5:02:54:0f:83:3e:eb:56:46:9d:50:a5: 31:6c:03:7e:6b:9f:2c:96:23:7e:93:c1:d6:fc:6c:4d:eb:67: 4e:d1:58:55:58:a7:80:71:51:d5:f5:8f:0a:47:36:ad:63:96: a2:9b:0e:47:7a:22:51:dc:31:16:33:b3:3b:5c:31:3e:7f:a8: 56:fd:19:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjYwNDA1MDQ0MjExWhcNMjYwNDEyMDQ0MjExWjAYMRYwFAYD VQQDEw02OWQxZTgyMy1hMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP0MaFBp0sfzcTCmmWZZ2Pqa5iSWn+BpXx+2Nt0bGuOy6RiL/Yv1OZZjgZ+r Fb1EZhWEa2PtvkIcDVkhxvp5hahP5J0S6V1vGfTs9Ck4E2s3+M6uEPA6wGv3mBVo V4aEWtLFTxsHeQwBHriik/BsJPyeUMfgXsPGOrTZ2tidg0WpIs97Rqt8W3FrgN4q nh28DInU87/roQdEaX5+yc/fhcVUsKmftsFmgEQcd8hE0AopBgEwC0bfcQQly9pI eAqtwK8OxosVNCaUXoA5J+03l0AOICa9NLCYX3N5vQnAppalsdvZ4YPdBR64FIzR vykLbf0jG+zcGnoiT3SyLyRp0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK99oLk8 2ewu+dLZw95ujuyJYfBEMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKGYL/rt3JxGBbOuwKdoOF8PWm0Iy5rec7FxnUbN1dCe8ifBOAMk1fjGE86EJ nGL/EMarEV5yuuSpxuMxl0z5A7xiJ42ImeFhF2t2va6qCKk4q02HipKPn/SdDOVQ xl44y/3HOvipvtkx+zLV4koO6KgfMvbQTyY0wJN2wpxIRj8WNYAQJHkYoDFkTP9O Hj2gN54BD87A7kiJjbogdpcZeWb2rSwk7sIIwb7CpjIUvNmqJ05iyW7XmmzC5QJU D4M+61ZGnVClMWwDfmufLJYjfpPB1vxsTetnTtFYVVingHFR1fWPCkc2rWOWopsO R3oiUdwxFjOzO1wxPn+oVv0Z8g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:02 2026 by rpki-client