$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: MjHKTtvP/SeoaUm6bjlFCxS+peGgM7MvoD3P8MDlgrA= Subject key identifier: A8:5F:9E:77:8F:B0:CD:2C:5D:07:FC:B9:AB:C2:56:B7:2D:A9:16:E9 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0327 Signing time: Sun 05 Apr 2026 00:51:29 +0000 Manifest this update: Sun 05 Apr 2026 00:51:29 +0000 Manifest next update: Sun 12 Apr 2026 00:51:29 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: LvW9TCHRXQB5K+flOlTWO9XPeuHBHnQNpjzl65V/v6o=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: nElsT+N/MIrrr9qtcoSmG1v+rPEG+QrKjb++ePTIoWo=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: LAY/2oYEWNptyjPMrgoY8aWftbMtB6LPjdcoOOw1Kqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Apr 5 00:51:29 2026 GMT Not After : Apr 12 00:51:29 2026 GMT Subject: CN=69d1b211-a25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:49:19:bd:2c:6a:d6:7f:a7:6a:66:73:48: ea:cf:13:45:74:1a:e2:50:c8:2e:35:2d:84:e6:e1: 57:77:88:04:2b:f6:ae:ca:31:fc:97:24:77:62:41: 4b:15:a3:be:15:7e:89:bb:c4:27:e6:71:a4:56:aa: 33:8a:b3:bd:8a:56:3d:b4:c1:a1:9e:a6:53:8d:02: 52:f0:6b:2d:a6:88:d9:24:0d:9a:f5:33:f2:d3:0e: e9:e4:a9:4f:4b:92:c8:2c:bd:3d:e2:15:38:04:0d: a7:9e:12:1e:8a:cf:fe:bf:4e:47:78:95:98:98:86: 1a:4a:20:05:46:17:9a:36:e8:e3:cd:ce:1f:f5:b7: 6d:ba:a2:9f:ea:2d:cf:73:f9:86:a4:e4:be:02:ac: f9:8e:86:42:61:d6:4f:7a:da:97:40:a2:db:c8:11: 00:74:06:30:64:00:56:e7:05:83:a6:49:b4:64:50: e0:95:b4:54:52:8c:08:22:16:77:ec:4c:2d:1e:53: 4c:7e:f0:b4:7a:01:62:21:86:1b:e5:eb:c0:60:3b: a5:57:2a:15:fc:77:35:41:a0:29:77:d1:b0:5e:ad: 41:e2:18:4c:56:b9:d6:22:d2:52:54:47:45:7f:3f: ef:51:d1:a6:e4:74:f8:a3:af:54:67:39:3c:bc:4c: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:9E:77:8F:B0:CD:2C:5D:07:FC:B9:AB:C2:56:B7:2D:A9:16:E9 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:3d:f4:9d:6b:d9:70:eb:a2:66:8a:8c:22:b3:c6:87:a8:c4: 82:f8:ea:c4:9c:61:9f:d7:09:fe:5f:28:55:49:54:f3:31:59: 4d:dd:6b:3b:be:f1:b8:72:d1:5b:47:dd:62:52:dc:6e:bf:59: 85:71:c2:2b:3b:3a:fc:dd:58:37:21:9d:06:41:f1:0c:bc:75: dc:24:6e:44:ac:ab:4f:2f:c6:76:ba:5b:3a:39:aa:75:72:0a: ea:d7:48:6f:5d:92:9f:d0:6d:40:da:5f:a3:0e:98:44:6a:f7: 45:bf:c9:11:8e:28:e1:44:6a:04:77:39:94:e4:fa:09:c7:a0: 34:71:4f:59:2f:17:df:83:91:17:39:46:fa:9e:a9:42:4e:3e: 0a:18:63:3e:3d:59:b1:d7:98:ed:16:ec:e4:7a:c0:03:db:e3: 67:9f:97:8d:3a:7b:2b:96:47:c0:e8:95:46:ff:42:05:64:00: 09:9c:50:55:0c:a8:d3:ee:57:a3:4b:16:b1:56:52:1d:08:7e: 03:00:d2:89:8d:8a:dd:d3:2c:68:a2:8a:1a:0e:ae:15:ee:55: a5:5a:45:bf:dd:02:cf:4e:d9:a7:32:86:92:18:24:0d:3e:b5: 3f:ba:84:98:43:a2:1a:fa:de:ef:fa:00:27:8f:ed:79:ad:06: 9c:75:b3:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwNDA1MDA1MTI5WhcNMjYwNDEyMDA1MTI5WjAYMRYwFAYD VQQDEw02OWQxYjIxMS1hMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurdJGb0satZ/p2pmc0jqzxNFdBriUMguNS2E5uFXd4gEK/auyjH8lyR3YkFL FaO+FX6Ju8Qn5nGkVqozirO9ilY9tMGhnqZTjQJS8GstpojZJA2a9TPy0w7p5KlP S5LILL094hU4BA2nnhIeis/+v05HeJWYmIYaSiAFRheaNujjzc4f9bdtuqKf6i3P c/mGpOS+Aqz5joZCYdZPetqXQKLbyBEAdAYwZABW5wWDpkm0ZFDglbRUUowIIhZ3 7EwtHlNMfvC0egFiIYYb5evAYDulVyoV/Hc1QaApd9GwXq1B4hhMVrnWItJSVEdF fz/vUdGm5HT4o69UZzk8vExSYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhfnneP sM0sXQf8uavCVrctqRbpMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4z30nWvZcOuiZoqMIrPGh6jEgvjqxJxhn9cJ/l8oVUlU8zFZTd1rO77xuHLR W0fdYlLcbr9ZhXHCKzs6/N1YNyGdBkHxDLx13CRuRKyrTy/GdrpbOjmqdXIK6tdI b12Sn9BtQNpfow6YRGr3Rb/JEY4o4URqBHc5lOT6CcegNHFPWS8X34ORFzlG+p6p Qk4+ChhjPj1ZsdeY7Rbs5HrAA9vjZ5+XjTp7K5ZHwOiVRv9CBWQACZxQVQyo0+5X o0sWsVZSHQh+AwDSiY2K3dMsaKKKGg6uFe5VpVpFv90Cz07ZpzKGkhgkDT61P7qE mEOiGvre7/oAJ4/tea0GnHWzaQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:09 2026 by rpki-client