$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: V1yhm/rURKfDtWKzXk8xO9WcLUpEm4VMIahpQ5HiYQE= Subject key identifier: BF:32:E7:F3:09:86:76:EF:A8:40:A4:A1:A1:55:08:10:EE:90:6A:97 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 025A Signing time: Sun 05 Apr 2026 01:48:03 +0000 Manifest this update: Sun 05 Apr 2026 01:48:03 +0000 Manifest next update: Sun 12 Apr 2026 01:48:03 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: BEK4J3OAxK/XSCQh9knb79/gbBO+QKdveU8kQa2w5wg=) 2: 660CF80498C711ED81343D33C4F9AE02.roa (hash: 8U4Uf80/OAxTrV2ftWLJpLvo7ffxfI5RfEjHBvwsn7k=) 3: 6722D08898C711ED81343D33C4F9AE02.roa (hash: d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: xApx4i0OfbuhIT4DYm6zHS1IKgNvPDZO0S+xq3g5g+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Apr 5 01:48:03 2026 GMT Not After : Apr 12 01:48:03 2026 GMT Subject: CN=69d1bf53-8d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:6b:2a:2b:82:6b:fa:97:f8:ad:bb:a5:64: c5:d4:6c:ab:a2:f5:45:f1:b6:20:2b:e7:1b:40:21: 56:28:52:65:64:ad:4d:b1:ba:83:09:8e:a6:46:a8: b3:83:64:12:99:43:0d:0c:59:cc:e5:e8:71:5d:92: ec:e5:93:22:ee:2a:f0:45:69:dc:82:5b:db:76:fb: df:8e:8d:9e:80:33:0d:47:a0:40:f0:d3:99:12:cf: 4c:bb:f1:09:80:51:64:f4:83:8b:10:dc:ba:e1:cf: f0:be:7e:01:d1:9b:c0:60:4f:59:c1:26:e5:42:04: 96:a9:0b:b1:50:99:57:49:e5:ef:81:66:b7:da:d7: bc:57:b5:cd:59:64:0d:c7:14:9b:cd:d3:e7:19:28: 6b:1b:f2:f4:b7:4d:55:b2:c6:0c:3d:3f:9b:f4:e8: f2:45:c1:a6:54:18:ba:b7:ee:ca:f6:c6:6a:0d:db: c7:1d:71:cd:8c:0e:aa:b7:50:15:9d:57:7c:89:f5: 68:30:ad:65:02:27:b8:db:31:1a:a9:f1:ef:ad:30: 96:d5:e3:ff:c4:ff:3c:62:82:97:66:3f:05:2e:14: 19:ff:06:83:2b:95:b2:50:c9:34:44:6f:a2:49:9c: 36:55:33:da:61:8a:b7:af:06:bc:a9:ce:f6:e0:47: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:E7:F3:09:86:76:EF:A8:40:A4:A1:A1:55:08:10:EE:90:6A:97 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:26:08:b4:26:ad:b2:c7:9f:47:45:52:00:96:22:6a:f8: 8c:cf:c6:6b:6d:9b:46:cd:28:38:35:eb:73:6c:cf:4f:6d:10: 7f:80:8a:fa:cd:37:00:fe:56:20:75:be:5c:32:46:35:a3:92: aa:23:e8:04:35:8f:b3:6c:cb:a2:38:9e:d6:7f:00:f0:d9:d0: c0:31:23:d1:08:af:e7:4e:09:7d:59:7e:c0:1e:66:0a:51:60: 4d:32:eb:91:3c:da:9c:a3:72:28:1a:83:15:5a:10:7b:7d:54: 40:61:53:ff:9e:d4:9b:93:19:d5:3c:b1:f3:03:2b:3f:5e:85: f5:e7:15:30:99:9e:b1:52:8a:c6:c2:c7:f9:1f:c8:bb:ec:72: 95:4d:1e:a0:cd:50:fe:94:7a:79:ad:a0:bc:93:f9:dd:08:38: 0e:de:83:d4:c9:7f:98:f0:09:a2:5b:25:e0:3a:8d:e3:10:68: 41:11:0b:ef:c3:4a:9b:d3:e7:68:16:e5:eb:54:a2:ca:f1:b3: 10:68:b7:b1:01:b8:2d:79:41:e6:79:5c:bd:a0:ab:fa:b6:3c: c7:88:ef:2f:11:7d:74:dc:9e:34:ac:03:70:68:3d:da:ac:84: a0:55:e5:c0:0a:b7:07:a4:06:d4:e4:08:cc:0c:e2:be:52:a6: 69:db:2f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjYwNDA1MDE0ODAzWhcNMjYwNDEyMDE0ODAzWjAYMRYwFAYD VQQDEw02OWQxYmY1My04ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jNrKiuCa/qX+K27pWTF1GyrovVF8bYgK+cbQCFWKFJlZK1NsbqDCY6mRqiz g2QSmUMNDFnM5ehxXZLs5ZMi7irwRWncglvbdvvfjo2egDMNR6BA8NOZEs9Mu/EJ gFFk9IOLENy64c/wvn4B0ZvAYE9ZwSblQgSWqQuxUJlXSeXvgWa32te8V7XNWWQN xxSbzdPnGShrG/L0t01VssYMPT+b9OjyRcGmVBi6t+7K9sZqDdvHHXHNjA6qt1AV nVd8ifVoMK1lAie42zEaqfHvrTCW1eP/xP88YoKXZj8FLhQZ/waDK5WyUMk0RG+i SZw2VTPaYYq3rwa8qc724Ec2pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8y5/MJ hnbvqECkoaFVCBDukGqXMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfU4mCLQmrbLHn0dFUgCWImr4jM/Ga22bRs0oODXrc2zPT20Qf4CK+s03AP5W IHW+XDJGNaOSqiPoBDWPs2zLojie1n8A8NnQwDEj0Qiv504JfVl+wB5mClFgTTLr kTzanKNyKBqDFVoQe31UQGFT/57Um5MZ1Tyx8wMrP16F9ecVMJmesVKKxsLH+R/I u+xylU0eoM1Q/pR6ea2gvJP53Qg4Dt6D1Ml/mPAJolsl4DqN4xBoQREL78NKm9Pn aBbl61SiyvGzEGi3sQG4LXlB5nlcvaCr+rY8x4jvLxF9dNyeNKwDcGg92qyEoFXl wAq3B6QG1OQIzAzivlKmadsvnQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:01 2026 by rpki-client