$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft File: jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft (raw, json) Hash identifier: DODT3ief45VYahMZletbElHZ0G94NPak+OaJktPHmng= Subject key identifier: 2A:06:1C:DD:A3:A6:45:84:4C:ED:56:D6:33:DE:E8:94:85:F8:0C:26 Authority key identifier: 8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 Certificate issuer: /CN=A91AA79A/serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft Manifest number: 18 Signing time: Sun 05 Apr 2026 08:21:36 +0000 Manifest this update: Sun 05 Apr 2026 08:21:36 +0000 Manifest next update: Sun 12 Apr 2026 08:21:36 +0000 Files and hashes: 1: jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl (hash: PhRK7Ql+owsZyHvCAGrb/Q2mTBoTKTy1qkmWHyqgRA0=) 2: 46D93BA221FC11F1BA59274E313D8C67.roa (hash: GqSunj644cEDwDivHoOLtbpzUoaRWgcKTA97y8p4xwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA79A, serialNumber=8ED3A4F993FF80202D82A04F514877BEF6F78AD0 Validity Not Before: Apr 5 08:21:36 2026 GMT Not After : Apr 12 08:21:36 2026 GMT Subject: CN=69d21b90-d9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:e8:d6:3a:47:30:7c:94:28:71:56:47:ee: 59:4b:db:d2:90:8f:ed:93:5e:c1:e2:db:4e:3d:b3: 3e:88:11:b5:9c:17:7c:ca:a9:2a:18:14:9f:7c:e9: d5:3d:dd:9f:6f:6f:d9:91:25:a5:f4:64:98:03:11: 7b:f6:56:46:e2:2a:31:1e:4d:0e:12:d9:0c:05:50: b4:59:ca:7d:c1:03:0e:dc:4b:f2:d5:8d:be:23:2b: 11:b0:d7:c6:b6:5b:44:1c:8d:a2:cd:61:7d:85:67: 9f:05:cd:35:36:3f:f3:f2:51:ba:fe:8b:a8:93:72: 14:00:b8:a9:bb:3a:f0:d8:ad:5c:a4:f8:17:53:18: 6d:f2:68:d1:99:b5:8c:b2:ae:45:6d:0e:e0:72:8e: e0:aa:b5:00:19:c8:fe:1f:70:26:44:8a:71:83:98: 72:b6:53:f6:6a:34:c0:29:ef:f9:41:e5:32:6b:f1: 62:57:b5:75:54:38:e5:76:4d:36:01:e1:07:2a:50: dc:80:7c:34:3d:a0:48:d7:82:0d:e9:7f:72:eb:2d: 55:d2:ff:95:90:13:b4:ff:c4:08:c6:35:fe:99:1c: f9:d9:a5:ef:a8:f8:89:2f:7e:c7:94:46:96:8f:28: ee:e6:a4:e1:d1:ad:9d:fe:1e:bb:69:95:79:a5:0a: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:1C:DD:A3:A6:45:84:4C:ED:56:D6:33:DE:E8:94:85:F8:0C:26 X509v3 Authority Key Identifier: keyid:8E:D3:A4:F9:93:FF:80:20:2D:82:A0:4F:51:48:77:BE:F6:F7:8A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jtOk-ZP_gCAtgqBPUUh3vvb3itA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA79A/D61F56B617A211F1A49C121D323D8C67/jtOk-ZP_gCAtgqBPUUh3vvb3itA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:6d:48:43:90:d2:0b:00:bf:dd:ee:7a:75:8c:e2:01:6d:7d: 18:0c:13:54:e4:66:0b:6b:d9:dd:65:d9:38:f2:7d:0a:d8:b5: 28:cf:4d:0d:d2:ed:dd:17:e5:a3:98:7c:5e:b4:d3:ed:0c:07: 04:17:95:d0:7b:bd:cf:b1:5b:6c:9b:95:3e:fb:10:06:48:22: 48:7a:95:55:38:08:bc:10:b9:e3:5f:43:25:fd:eb:05:f9:03: b8:78:00:58:3b:6c:6e:e7:99:89:c9:0d:71:64:28:8e:2d:9f: 2f:d2:d5:ba:2b:fd:36:5b:29:f5:9f:56:1a:e8:eb:57:7d:c9: 40:03:02:53:b2:f9:35:b7:41:a7:93:43:55:8c:54:1d:c4:14: d9:5e:63:8b:53:e1:ee:58:2b:10:da:bd:26:65:a2:c1:a0:ce: f7:b4:e0:7f:74:15:ed:00:78:b7:3f:ab:55:ba:55:f3:5e:33: 20:f0:10:af:08:6a:55:20:8d:43:26:b9:f0:be:db:e0:d0:15: df:4d:26:0c:40:d5:28:35:e3:26:06:98:a2:05:1f:5f:56:7e: df:4b:ee:36:9b:52:fa:7c:b4:e9:06:5b:24:bb:08:d2:b8:f2: 01:5a:9f:e2:f3:60:7a:0a:18:1b:6c:f1:a1:cb:1d:dd:af:ea: 36:2c:cf:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTc5QTExMC8GA1UEBRMoOEVEM0E0Rjk5M0ZGODAyMDJEODJBMDRGNTE0ODc3QkVG NkY3OEFEMDAeFw0yNjA0MDUwODIxMzZaFw0yNjA0MTIwODIxMzZaMBgxFjAUBgNV BAMTDTY5ZDIxYjkwLWQ5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVX+jWOkcwfJQocVZH7llL29KQj+2TXsHi2049sz6IEbWcF3zKqSoYFJ986dU9 3Z9vb9mRJaX0ZJgDEXv2VkbiKjEeTQ4S2QwFULRZyn3BAw7cS/LVjb4jKxGw18a2 W0QcjaLNYX2FZ58FzTU2P/PyUbr+i6iTchQAuKm7OvDYrVyk+BdTGG3yaNGZtYyy rkVtDuByjuCqtQAZyP4fcCZEinGDmHK2U/ZqNMAp7/lB5TJr8WJXtXVUOOV2TTYB 4QcqUNyAfDQ9oEjXgg3pf3LrLVXS/5WQE7T/xAjGNf6ZHPnZpe+o+IkvfseURpaP KO7mpOHRrZ3+HrtplXmlCmaLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKgYc3aOm RYRM7VbWM97olIX4DCYwHwYDVR0jBBgwFoAUjtOk+ZP/gCAtgqBPUUh3vvb3itAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNzlBL0Q2MUY1NkI2MTdB MjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NBdGdxQlBVVWgzdnZiM2l0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanRPay1aUF9nQ0F0Z3FCUFVVaDN2dmIzaXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NzlBL0Q2MUY1NkI2MTdBMjExRjFBNDlDMTIxRDMyM0Q4QzY3L2p0T2stWlBfZ0NB dGdxQlBVVWgzdnZiM2l0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDKbUhDkNILAL/d7np1jOIBbX0YDBNU5GYLa9ndZdk48n0K2LUoz00N0u3dF+Wj mHxetNPtDAcEF5XQe73PsVtsm5U++xAGSCJIepVVOAi8ELnjX0Ml/esF+QO4eABY O2xu55mJyQ1xZCiOLZ8v0tW6K/02Wyn1n1Ya6OtXfclAAwJTsvk1t0Gnk0NVjFQd xBTZXmOLU+HuWCsQ2r0mZaLBoM73tOB/dBXtAHi3P6tVulXzXjMg8BCvCGpVII1D Jrnwvtvg0BXfTSYMQNUoNeMmBpiiBR9fVn7fS+42m1L6fLTpBlskuwjSuPIBWp/i 82B6ChgbbPGhyx3dr+o2LM/o -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:11 2026 by rpki-client