$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: loTG1sfEajrB8F69fesrBIhtUZ+IfLMpQkqtLbKHJOg= Subject key identifier: BE:F8:27:8D:6F:8F:34:E1:29:D9:C5:79:A8:77:90:03:65:F4:01:51 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 2034 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1FE0 Signing time: Sat 04 Apr 2026 15:55:58 +0000 Manifest this update: Sat 04 Apr 2026 15:55:58 +0000 Manifest next update: Sat 11 Apr 2026 15:55:58 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: y9HlIfKr+/X16hhr2FQHLddQ/gAf8MAPtPaVXpYTrk4=) 2: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: j6Fn0yl9QruB/L8VIjM7Cvrv8dXDeLRII1Kg9BFfdqQ=) 3: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8244 (0x2034) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Apr 4 15:55:58 2026 GMT Not After : Apr 11 15:55:58 2026 GMT Subject: CN=69d1348e-b9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:1a:7f:da:41:93:74:99:99:66:af:7e:52: 81:58:f0:9b:f2:65:89:84:27:b4:d8:28:ac:4d:5c: 40:bb:47:27:0e:45:40:c5:ef:49:12:33:53:2e:16: f7:32:fb:72:cc:cf:bb:7b:ba:f4:a1:93:57:e1:11: 0c:35:25:b6:73:f0:8f:6b:92:70:21:ab:87:17:55: 1e:b4:6d:b8:07:a6:98:aa:f3:a3:c7:93:92:da:49: 4d:a8:65:27:37:da:1f:90:7b:74:00:bf:3f:1e:10: e9:6c:6e:61:98:5f:63:29:88:e7:94:5a:f9:95:93: f5:f7:c7:17:06:4e:7d:ff:d5:6e:e0:1e:bd:a3:3a: 10:db:58:08:59:ea:9e:e0:a2:97:c9:80:64:b7:f2: 54:55:e6:90:56:09:64:2c:21:f4:ac:c2:9e:67:25: 9e:a8:9c:b2:5f:45:c4:63:c8:13:ab:68:c1:2d:61: 35:73:15:68:69:57:ca:07:f7:04:0f:94:ad:e8:cc: 88:10:64:c7:67:0c:c8:b0:c6:f9:4e:16:46:9d:57: a7:39:e1:f3:5c:cb:dc:60:93:8f:2c:76:85:6a:eb: 95:c3:63:bb:7b:17:33:a7:68:8a:0f:75:56:57:f4: 51:2d:52:e3:c9:0c:d0:c6:c0:5d:ae:bd:7e:a9:7c: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F8:27:8D:6F:8F:34:E1:29:D9:C5:79:A8:77:90:03:65:F4:01:51 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4e:fc:d9:a2:35:1f:dc:62:73:22:db:3a:32:06:f0:a2:3e: 93:f3:80:b7:a9:c1:d4:6a:1e:35:42:ae:94:04:40:ff:f1:ff: 29:2e:b4:f8:ef:c5:6d:b8:45:4c:a6:08:83:93:8f:f9:8b:de: 28:80:27:be:0c:52:5f:db:e1:04:85:e7:40:cd:62:17:f3:12: cf:7b:4c:7c:91:21:04:ec:f8:2e:e1:c9:b5:43:37:40:f2:d1: fe:15:06:76:44:29:b4:73:0c:46:89:27:89:eb:74:fc:46:43: 13:52:67:75:19:68:fa:00:f2:7a:32:a5:be:10:86:db:06:63: b8:c7:3c:4e:6c:f7:c5:af:62:95:d9:17:91:26:62:53:58:b4: bc:fc:5f:c7:06:8c:b0:dc:81:f2:42:77:ac:77:97:ae:b5:b2: f9:f2:dc:bd:69:29:59:e6:e9:51:d2:ee:e3:62:b5:e6:aa:ca: 34:39:cf:af:5b:b3:fe:8a:1d:10:10:c7:26:da:26:5a:c2:e2: be:f5:87:34:0b:68:84:3c:a9:d4:bb:c0:2d:e7:e0:25:0f:dc: a5:5f:df:3b:e9:7d:86:6a:d3:f4:e1:f3:f6:69:19:78:e8:75: c9:4e:ea:bf:05:3e:dc:22:62:4b:65:1f:ed:13:30:5d:6f:f0: d9:17:96:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjYwNDA0MTU1NTU4WhcNMjYwNDExMTU1NTU4WjAYMRYwFAYD VQQDEw02OWQxMzQ4ZS1iOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsQaf9pBk3SZmWavflKBWPCb8mWJhCe02CisTVxAu0cnDkVAxe9JEjNTLhb3 MvtyzM+7e7r0oZNX4REMNSW2c/CPa5JwIauHF1UetG24B6aYqvOjx5OS2klNqGUn N9ofkHt0AL8/HhDpbG5hmF9jKYjnlFr5lZP198cXBk59/9Vu4B69ozoQ21gIWeqe 4KKXyYBkt/JUVeaQVglkLCH0rMKeZyWeqJyyX0XEY8gTq2jBLWE1cxVoaVfKB/cE D5St6MyIEGTHZwzIsMb5ThZGnVenOeHzXMvcYJOPLHaFauuVw2O7exczp2iKD3VW V/RRLVLjyQzQxsBdrr1+qXyD3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL74J41v jzThKdnFeah3kANl9AFRMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqk782aI1H9xicyLbOjIG8KI+k/OAt6nB1GoeNUKulARA//H/KS60+O/FbbhF TKYIg5OP+YveKIAnvgxSX9vhBIXnQM1iF/MSz3tMfJEhBOz4LuHJtUM3QPLR/hUG dkQptHMMRokniet0/EZDE1JndRlo+gDyejKlvhCG2wZjuMc8Tmz3xa9ildkXkSZi U1i0vPxfxwaMsNyB8kJ3rHeXrrWy+fLcvWkpWebpUdLu42K15qrKNDnPr1uz/ood EBDHJtomWsLivvWHNAtohDyp1LvALefgJQ/cpV/fO+l9hmrT9OHz9mkZeOh1yU7q vwU+3CJiS2Uf7RMwXW/w2ReWMQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:08 2026 by rpki-client