$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: W7EC17SHxDDTQbAXc7Mar1vbo1ApRCsowk5H85rrRPM= Subject key identifier: 96:58:7A:9B:D5:9E:86:49:76:EB:99:A4:D3:91:18:13:BC:74:42:05 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 0291 Signing time: Sun 05 Apr 2026 01:16:14 +0000 Manifest this update: Sun 05 Apr 2026 01:16:13 +0000 Manifest next update: Sun 12 Apr 2026 01:16:13 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: 76INhwftUY0/ZrnGs0YpziJFNGPLJdU+85YV6TGy5Pw=) 2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: //LaDwZuynrCgMu5CfMjESDm6KeQCJ8rranq0x2DlD8=) 3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: /7MGslQwso9cFChdoF6CBy4SyQMQh62viBjTl25dnDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 5 01:16:13 2026 GMT Not After : Apr 12 01:16:13 2026 GMT Subject: CN=69d1b7de-4d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:c8:f4:91:1d:c3:9a:1f:59:36:56:23:18: ec:b5:29:32:ab:a1:db:84:52:77:68:e8:24:d7:80: ed:0d:1e:48:80:dc:e7:71:fa:1a:23:46:14:73:11: 30:e9:20:6a:91:91:b8:2b:1b:11:57:d6:84:c8:00: 50:aa:f7:5d:00:23:d2:c0:8b:fd:4e:cc:76:2c:e8: f8:15:b8:cf:48:cd:4e:01:ee:d9:97:7c:c6:a7:a2: 35:e1:80:16:4d:2d:0e:12:27:5b:dd:63:64:2c:53: 79:e5:74:88:48:b0:b7:f0:46:1b:d2:81:8d:5f:c8: 73:05:f1:b0:92:92:d2:25:e4:d7:0c:ff:fc:37:3e: a6:7c:d1:46:68:b9:34:07:2d:83:8e:18:05:a0:22: b3:f6:ec:c4:bb:38:31:af:d4:cf:3e:c3:6f:5d:68: 03:87:88:e9:98:7d:f9:e3:9d:12:62:b6:94:34:90: 97:cc:12:bb:76:e9:f1:88:b3:d6:57:41:d3:b7:8e: b1:24:6e:30:f6:e1:6e:18:bc:67:48:c5:74:11:de: 20:4c:01:80:3b:15:f8:14:fa:07:35:e2:27:6f:f4: d9:21:d4:0c:84:00:0e:ef:41:af:b5:70:39:d6:31: 52:31:aa:b8:03:5e:23:f6:9a:c5:df:df:2a:91:89: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:7A:9B:D5:9E:86:49:76:EB:99:A4:D3:91:18:13:BC:74:42:05 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3b:bd:50:6d:94:e2:db:51:93:1b:42:a6:1c:cf:48:e1:3c: 63:5a:97:78:2e:ea:0b:f6:b5:21:df:12:8c:bd:41:28:8e:a9: 74:46:90:dd:15:76:09:b9:37:40:6b:83:b9:99:ad:af:79:21: bf:2f:af:fb:0c:2d:09:8f:eb:7d:30:cc:f4:94:50:9c:80:26: 71:7a:46:80:78:db:48:d0:7e:6d:94:1c:c7:6d:c0:2b:af:06: 92:af:8d:3e:0e:78:ad:cd:3d:1a:34:24:90:e5:25:b3:0d:15: 1c:f2:28:7d:66:c1:42:68:11:f8:81:d4:30:b4:da:f6:0e:4d: 2e:8a:9c:fa:8b:51:39:d7:73:80:c9:61:61:33:69:ac:ed:e6: cf:24:8b:5c:a9:f5:b6:ca:2c:05:ab:85:45:ea:37:38:a4:b7: 46:fc:f6:63:5e:8d:1f:4d:ed:92:bc:db:66:2a:b3:49:8e:5e: 8d:17:de:00:07:35:30:89:03:10:ac:c3:e4:fb:5f:59:c0:0b: fb:fe:74:27:09:1a:8b:5c:0a:65:f3:93:95:6a:61:26:18:69: 67:d5:f9:6a:e6:40:05:54:0a:76:17:13:00:3f:53:21:88:de: 5a:7a:b6:07:21:e4:61:c9:bd:18:20:88:d7:62:ff:db:b9:32: 16:48:3a:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjYwNDA1MDExNjEzWhcNMjYwNDEyMDExNjEzWjAYMRYwFAYD VQQDEw02OWQxYjdkZS00ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIrI9JEdw5ofWTZWIxjstSkyq6HbhFJ3aOgk14DtDR5IgNzncfoaI0YUcxEw 6SBqkZG4KxsRV9aEyABQqvddACPSwIv9Tsx2LOj4FbjPSM1OAe7Zl3zGp6I14YAW TS0OEidb3WNkLFN55XSISLC38EYb0oGNX8hzBfGwkpLSJeTXDP/8Nz6mfNFGaLk0 By2DjhgFoCKz9uzEuzgxr9TPPsNvXWgDh4jpmH35450SYraUNJCXzBK7dunxiLPW V0HTt46xJG4w9uFuGLxnSMV0Ed4gTAGAOxX4FPoHNeInb/TZIdQMhAAO70GvtXA5 1jFSMaq4A14j9prF398qkYl/NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZYepvV noZJduuZpNORGBO8dEIFMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALDu9UG2U4ttRkxtCphzPSOE8Y1qXeC7qC/a1Id8SjL1BKI6pdEaQ3RV2Cbk3 QGuDuZmtr3khvy+v+wwtCY/rfTDM9JRQnIAmcXpGgHjbSNB+bZQcx23AK68Gkq+N Pg54rc09GjQkkOUlsw0VHPIofWbBQmgR+IHUMLTa9g5NLoqc+otROddzgMlhYTNp rO3mzySLXKn1tsosBauFReo3OKS3Rvz2Y16NH03tkrzbZiqzSY5ejRfeAAc1MIkD EKzD5PtfWcAL+/50Jwkai1wKZfOTlWphJhhpZ9X5auZABVQKdhcTAD9TIYjeWnq2 ByHkYcm9GCCI12L/27kyFkg6Cw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:07 2026 by rpki-client