$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: QP2BHkqXPX76ay8RRO3YCLTHoxyfFkTuHh1D75ZNE2g= Subject key identifier: 35:9B:8D:0B:14:B1:CA:BB:BE:96:8E:74:AA:BC:3A:64:15:50:E7:F5 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 0189 Signing time: Sun 05 Apr 2026 04:08:05 +0000 Manifest this update: Sun 05 Apr 2026 04:08:04 +0000 Manifest next update: Sun 12 Apr 2026 04:08:04 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: XslYbd29i1pOiNPGA4Np1PPrwrGihATY0UkTxDRRT5Y=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: usejeAbfaCrnya4BmIxpNANwrvKrHGDPWrTfazFyZ+A=) 3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: rIc4xpour7cATeZsp1B1Ry8Mz3CLrgcG3IJVLB+LmQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Apr 5 04:08:04 2026 GMT Not After : Apr 12 04:08:04 2026 GMT Subject: CN=69d1e025-e1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:b4:15:01:e3:c9:a6:50:5d:a5:c6:f2:78: a9:0c:7d:ab:e7:01:fe:a6:aa:e9:44:ce:ac:2c:84: 44:41:83:b9:ce:be:b2:50:fc:02:99:91:9c:5a:ef: 91:6c:aa:b4:8c:c9:54:33:4f:33:74:92:c3:d7:88: b9:77:a8:f3:8d:a5:50:87:13:f2:1b:40:81:05:22: 1b:6d:73:17:15:76:93:e4:04:e2:a2:65:19:49:a7: 80:e5:d3:8f:06:07:66:91:d7:c5:76:ab:cd:17:1b: f9:ed:39:b7:a8:df:fb:18:89:70:29:17:d2:17:e4: 6f:22:52:3d:63:24:05:00:d8:33:b8:a2:9c:d8:c0: 91:7a:86:8a:07:bf:94:cb:c7:30:fc:40:f5:f1:40: 04:98:0c:ef:0c:c6:d5:74:cb:63:b3:69:d0:85:69: c9:b3:2a:92:27:24:9c:b1:a0:fe:04:09:2e:6d:b2: 3d:e7:c4:e0:2f:a5:ba:ba:d4:85:3e:b4:d9:ce:3a: d2:dc:68:cf:af:9a:ad:12:ee:93:c6:5d:6b:a4:ff: dd:de:43:f3:03:39:05:fe:bb:e9:d9:14:5e:60:4e: ab:de:72:81:e2:f1:7c:37:24:6d:e4:38:e3:f0:fd: dc:71:b2:52:b1:72:ea:58:d5:5f:4a:88:ac:41:84: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9B:8D:0B:14:B1:CA:BB:BE:96:8E:74:AA:BC:3A:64:15:50:E7:F5 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:8b:f8:a3:2f:67:f0:97:88:f9:78:be:08:90:53:da:17:cc: f0:67:63:59:30:86:81:63:af:7a:fb:ac:67:af:1b:e8:86:3c: 38:51:b7:84:73:d9:30:03:9e:6c:bd:ba:0c:38:69:7a:ef:fa: 45:b2:12:4d:26:26:d5:a3:44:61:cb:13:a2:b5:8c:34:2f:b7: 0c:3c:8c:12:2c:51:4c:51:7c:d8:cd:1f:ee:44:4d:69:0d:17: 70:c6:23:82:3c:97:de:61:f1:90:b2:c2:ea:60:35:44:e3:b7: 30:8f:9b:1b:30:8b:55:30:4c:83:c0:29:48:71:56:46:a9:8f: fb:5e:96:2f:cd:d8:c1:07:75:76:b5:71:d7:3e:9b:88:e6:6d: 6a:b9:90:76:ad:28:71:85:34:14:4a:90:a1:1e:4c:c4:d4:f2: 03:b2:34:58:f6:44:1b:d7:6e:c2:90:ca:d2:47:fa:89:c6:60: 7b:77:98:64:1f:c4:19:2a:1c:82:6c:89:84:02:ec:ff:f5:96: be:1f:77:43:b4:9e:86:cc:3a:cd:59:b6:4c:d5:78:36:ff:0b: a9:19:c7:6e:77:35:55:83:2b:f5:72:b6:60:a6:81:06:4e:c2: 9a:53:3d:c8:fd:a7:c0:20:23:00:32:d6:58:a7:a1:c6:04:3a: 14:41:74:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjYwNDA1MDQwODA0WhcNMjYwNDEyMDQwODA0WjAYMRYwFAYD VQQDEw02OWQxZTAyNS1lMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtga0FQHjyaZQXaXG8nipDH2r5wH+pqrpRM6sLIREQYO5zr6yUPwCmZGcWu+R bKq0jMlUM08zdJLD14i5d6jzjaVQhxPyG0CBBSIbbXMXFXaT5ATiomUZSaeA5dOP BgdmkdfFdqvNFxv57Tm3qN/7GIlwKRfSF+RvIlI9YyQFANgzuKKc2MCReoaKB7+U y8cw/ED18UAEmAzvDMbVdMtjs2nQhWnJsyqSJyScsaD+BAkubbI958TgL6W6utSF PrTZzjrS3GjPr5qtEu6Txl1rpP/d3kPzAzkF/rvp2RReYE6r3nKB4vF8NyRt5Djj 8P3ccbJSsXLqWNVfSoisQYQTWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWbjQsU scq7vpaOdKq8OmQVUOf1MB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEov4oy9n8JeI+Xi+CJBT2hfM8GdjWTCGgWOvevusZ68b6IY8OFG3hHPZMAOe bL26DDhpeu/6RbISTSYm1aNEYcsTorWMNC+3DDyMEixRTFF82M0f7kRNaQ0XcMYj gjyX3mHxkLLC6mA1ROO3MI+bGzCLVTBMg8ApSHFWRqmP+16WL83YwQd1drVx1z6b iOZtarmQdq0ocYU0FEqQoR5MxNTyA7I0WPZEG9duwpDK0kf6icZge3eYZB/EGSoc gmyJhALs//WWvh93Q7Sehsw6zVm2TNV4Nv8LqRnHbnc1VYMr9XK2YKaBBk7CmlM9 yP2nwCAjADLWWKehxgQ6FEF0NA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:48 2026 by rpki-client