$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json) Hash identifier: E8N+BDoiRRCDgY6+c0mfxmLszkYaqfBYIl1v/pjjKyg= Subject key identifier: D2:2A:A0:37:E5:50:F2:3C:61:53:94:3D:90:B5:D4:9B:A8:63:B4:C5 Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft Manifest number: 018D Signing time: Sun 05 Apr 2026 04:00:23 +0000 Manifest this update: Sun 05 Apr 2026 04:00:22 +0000 Manifest next update: Sun 12 Apr 2026 04:00:22 +0000 Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: akGITK1MPSLqL0NHM4G7Bvbj0ltiFnOwloPYtz9Xn1I=) 2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=) 3: E608220401A611F1B4D1E4C1696F56BC.roa (hash: wawCQ6JRiOixGpvfc0LMo+4eb9Efwa6i/GrCB4BU3/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Validity Not Before: Apr 5 04:00:22 2026 GMT Not After : Apr 12 04:00:22 2026 GMT Subject: CN=69d1de57-83c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:a4:f5:26:e1:ff:db:17:03:7b:61:f0:3d: 38:61:09:aa:7f:bb:d6:ef:5a:06:d9:50:7f:37:ca: 52:99:02:9b:80:c8:65:d8:8e:3a:c5:34:bd:2e:41: 50:d1:ad:e1:0c:fd:d4:d0:5c:a9:5a:28:87:1b:81: 02:5d:85:c3:2f:70:93:51:29:d0:dc:b3:7b:ba:6e: 0e:69:1d:80:b3:fe:73:c8:56:94:1c:04:74:33:e9: 96:ba:df:98:e0:46:dc:53:0e:b9:f9:11:13:0a:73: 02:27:5a:b6:a0:f4:23:0f:b0:3b:db:63:12:6c:69: 84:d9:84:85:15:80:31:79:af:55:28:c0:b1:22:0c: 2b:68:07:fb:50:2c:d0:dd:7b:2f:26:61:ad:b5:c0: 35:6c:36:89:1b:f5:58:3d:65:14:59:9b:a3:78:77: 82:ae:b2:a3:ee:cf:28:e4:a8:ce:65:b1:28:1a:ca: 7a:19:2d:05:f6:5d:ff:6c:17:31:57:47:cc:53:fd: 6d:38:e0:25:d3:c7:5c:6e:35:77:a4:67:85:30:c4: 17:2d:eb:4e:8a:20:74:6e:64:91:61:0e:52:6b:84: 9d:22:e3:97:da:44:4d:6c:8e:84:68:f8:1e:39:a2: a0:df:22:3b:64:3f:d1:d0:81:bc:8a:7d:23:74:0b: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:A0:37:E5:50:F2:3C:61:53:94:3D:90:B5:D4:9B:A8:63:B4:C5 X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:08:b0:72:52:7e:6b:f0:bd:a3:bd:56:fa:68:11:1b:b5:58: 22:35:dc:a5:39:cd:99:16:ca:77:7c:5e:14:05:e9:3d:1b:e8: aa:88:42:3c:6b:7c:0f:b6:02:7c:51:82:7c:0c:68:2e:d4:3a: 30:43:ac:72:6d:eb:a9:67:da:8a:7a:12:bb:32:7b:18:9d:bd: 85:6e:91:86:54:67:43:77:d3:a3:7b:ab:cf:6c:55:f3:9a:36: 91:97:6c:03:c8:d8:8d:7d:2b:f6:6a:fb:df:e5:60:35:5f:c4: f1:1d:81:cf:4c:b0:3a:6f:00:6d:1e:76:fd:2b:6d:a6:18:f0: 2f:5f:46:7d:1c:bb:b3:3d:a7:ef:f2:0f:24:96:40:95:4c:e0: fd:80:3b:b3:0b:4e:14:93:13:bf:ea:47:c1:ec:20:9f:fd:d4: cc:61:66:d4:cd:55:7c:13:0b:cb:a6:00:63:92:90:06:4a:50: 33:8e:c6:e0:75:73:f6:53:18:df:f0:95:fe:ab:12:d8:79:03: c4:18:df:3a:0d:71:35:93:3e:ee:4b:bf:85:98:7d:eb:73:76: 99:dc:e3:84:0f:af:96:cd:ff:1f:96:ca:ed:9f:01:fd:42:7e: 6a:fa:27:7a:3a:8e:82:81:b1:3c:ca:ae:7f:f2:59:40:85:3b: 84:dd:77:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw MEJENjhFMzIwHhcNMjYwNDA1MDQwMDIyWhcNMjYwNDEyMDQwMDIyWjAYMRYwFAYD VQQDEw02OWQxZGU1Ny04M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqWk9Sbh/9sXA3th8D04YQmqf7vW71oG2VB/N8pSmQKbgMhl2I46xTS9LkFQ 0a3hDP3U0FypWiiHG4ECXYXDL3CTUSnQ3LN7um4OaR2As/5zyFaUHAR0M+mWut+Y 4EbcUw65+RETCnMCJ1q2oPQjD7A722MSbGmE2YSFFYAxea9VKMCxIgwraAf7UCzQ 3XsvJmGttcA1bDaJG/VYPWUUWZujeHeCrrKj7s8o5KjOZbEoGsp6GS0F9l3/bBcx V0fMU/1tOOAl08dcbjV3pGeFMMQXLetOiiB0bmSRYQ5Sa4SdIuOX2kRNbI6EaPge OaKg3yI7ZD/R0IG8in0jdAvPaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIqoDfl UPI8YVOUPZC11JuoY7TFMB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1 M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjg2RC82RjA1ODIwRUU1M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RF MXNseUJrNlJ4cThBdldqakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAngiwclJ+a/C9o71W+mgRG7VYIjXcpTnNmRbKd3xeFAXpPRvoqohCPGt8D7YC fFGCfAxoLtQ6MEOscm3rqWfainoSuzJ7GJ29hW6RhlRnQ3fTo3urz2xV85o2kZds A8jYjX0r9mr73+VgNV/E8R2Bz0ywOm8AbR52/SttphjwL19GfRy7sz2n7/IPJJZA lUzg/YA7swtOFJMTv+pHwewgn/3UzGFm1M1VfBMLy6YAY5KQBkpQM47G4HVz9lMY 3/CV/qsS2HkDxBjfOg1xNZM+7ku/hZh963N2mdzjhA+vls3/H5bK7Z8B/UJ+avon ejqOgoGxPMquf/JZQIU7hN13hg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:10 2026 by rpki-client