$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: kuBwKTom/+reqPTyuGI6ovYipFEHeQ/PPSPXW+XoYnU= Subject key identifier: FE:59:1D:4F:B5:C9:16:5D:A4:3D:1C:84:E6:34:13:EB:E4:0E:12:B3 Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 85 Signing time: Sun 05 Apr 2026 07:02:36 +0000 Manifest this update: Sun 05 Apr 2026 07:02:36 +0000 Manifest next update: Sun 12 Apr 2026 07:02:36 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: UKdyrElhL2a5iOm7xZy1uIbHcxGEoEr2F6hMZrjjjj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Apr 5 07:02:36 2026 GMT Not After : Apr 12 07:02:36 2026 GMT Subject: CN=69d2090c-8244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:bb:c1:60:77:42:c5:74:bb:1c:f5:dd:e5: f8:d6:6b:2f:16:8f:35:23:36:68:14:58:73:47:3c: 32:0f:0c:73:71:9c:d0:0f:c7:ff:b9:76:4d:5b:86: 86:95:c7:0b:cb:c7:f0:19:45:03:9d:a3:c5:09:8d: a9:72:89:23:72:24:51:90:e1:e7:e2:94:b8:4c:15: 4c:7a:e8:2f:9f:0d:25:00:96:a6:d5:67:ab:b9:f0: 1a:0c:66:16:4d:c0:52:2c:6d:6d:7f:cd:6e:82:f1: 88:3a:4d:c2:c8:58:76:a1:24:8f:f7:b3:fa:94:5c: 70:bf:95:ee:e6:12:72:d1:0e:f1:8d:d7:49:fc:ac: fd:d0:82:27:a9:48:92:1b:a5:ba:20:17:63:bc:86: b7:0d:33:70:37:b3:85:0b:78:e2:fd:d0:6b:95:2b: 59:d8:62:b0:d2:f5:d8:4f:06:7a:b6:6b:13:7e:bc: 24:89:f4:ad:d4:f1:f8:bf:b2:4c:a7:c9:4f:cd:fd: 89:21:6c:06:60:b2:b0:5e:29:6d:57:91:a5:1b:1d: 1f:f4:36:8b:22:b0:3d:38:f1:b1:30:89:b0:7d:5b: 51:af:92:5d:e6:e5:f7:4f:ea:fb:d9:76:d2:10:b6: cc:f3:a2:11:58:44:5b:ff:c0:62:9e:27:8d:a9:dd: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:59:1D:4F:B5:C9:16:5D:A4:3D:1C:84:E6:34:13:EB:E4:0E:12:B3 X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4a:d6:24:50:e0:4d:c0:bf:1d:40:bd:fb:ec:04:12:ed:d4: 3c:10:cc:34:48:fb:07:57:38:63:01:f4:22:0b:08:d4:d1:3e: c4:f8:7e:f7:cf:ca:0b:d9:00:7a:82:f1:0d:0e:32:9c:ff:2a: dd:88:40:f9:cc:66:6b:fe:83:63:ae:bd:7c:a1:b2:26:62:f0: 7b:9f:b1:6a:2d:99:27:c2:50:00:10:56:4c:82:b3:27:9e:b7: 41:17:d9:e7:43:a5:84:4d:2d:72:5b:84:fa:53:ef:99:eb:69: ed:6c:fd:9d:ce:88:72:ae:dd:a5:c9:29:77:5b:57:78:27:09: 71:70:50:55:22:e1:54:df:6b:08:58:04:a0:51:d7:f6:f5:3f: 28:41:51:f4:9c:99:ae:4e:8f:8a:1e:9c:7c:84:ec:9c:ff:15: 9e:3c:8b:6d:6b:9b:0d:07:d1:24:48:e6:bd:0d:bb:05:c7:d1: 1c:c8:f1:48:47:a4:71:c5:91:c7:0e:c5:73:58:9d:93:09:41: 58:84:d1:96:c2:eb:56:5f:a8:75:5a:4e:bb:b7:53:3d:e1:48: 2b:8c:c1:be:c9:18:2d:b5:e1:fb:89:12:6a:b1:a1:55:eb:ee: 28:01:bb:00:8e:62:50:49:54:e5:79:48:63:e1:1d:e5:9c:dd: 2a:4e:68:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4OEMxMTAvBgNVBAUTKDI1QTE5NzU4MTZDRDlFODlGM0Q2RUE2QTc2MzAyMjQz QkVDMzQ1RUUwHhcNMjYwNDA1MDcwMjM2WhcNMjYwNDEyMDcwMjM2WjAYMRYwFAYD VQQDEw02OWQyMDkwYy04MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSm7wWB3QsV0uxz13eX41msvFo81IzZoFFhzRzwyDwxzcZzQD8f/uXZNW4aG lccLy8fwGUUDnaPFCY2pcokjciRRkOHn4pS4TBVMeugvnw0lAJam1WerufAaDGYW TcBSLG1tf81ugvGIOk3CyFh2oSSP97P6lFxwv5Xu5hJy0Q7xjddJ/Kz90IInqUiS G6W6IBdjvIa3DTNwN7OFC3ji/dBrlStZ2GKw0vXYTwZ6tmsTfrwkifSt1PH4v7JM p8lPzf2JIWwGYLKwXiltV5GlGx0f9DaLIrA9OPGxMImwfVtRr5Jd5uX3T+r72XbS ELbM86IRWERb/8BinieNqd0rYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5ZHU+1 yRZdpD0chOY0E+vkDhKzMB8GA1UdIwQYMBaAFCWhl1gWzZ6J89bqanYwIkO+w0Xu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDg4Qy80RjZENkY2MDZC ODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9KYUdYV0JiTm5vbnoxdXBxZGpBaVE3N0RS ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJlNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDg4Qy80RjZENkY2MDZCODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9KYUdYV0JiTm5v bnoxdXBxZGpBaVE3N0RSZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPkrWJFDgTcC/HUC9++wEEu3UPBDMNEj7B1c4YwH0IgsI1NE+xPh+98/KC9kA eoLxDQ4ynP8q3YhA+cxma/6DY669fKGyJmLwe5+xai2ZJ8JQABBWTIKzJ563QRfZ 50OlhE0tcluE+lPvmetp7Wz9nc6Icq7dpckpd1tXeCcJcXBQVSLhVN9rCFgEoFHX 9vU/KEFR9JyZrk6Pih6cfITsnP8VnjyLbWubDQfRJEjmvQ27BcfRHMjxSEekccWR xw7Fc1idkwlBWITRlsLrVl+odVpOu7dTPeFIK4zBvskYLbXh+4kSarGhVevuKAG7 AI5iUElU5XlIY+Ed5ZzdKk5oYA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:15 2026 by rpki-client