$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: bUTvwhMSm+kFbnLMMZLcRI98Tf+IwgUja9gb4AQOPr8= Subject key identifier: 7E:1B:D9:3A:8C:14:90:26:F1:32:A5:3F:91:72:AA:4A:AD:A5:B5:E1 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0ABE Signing time: Sat 04 Apr 2026 19:18:23 +0000 Manifest this update: Sat 04 Apr 2026 19:18:22 +0000 Manifest next update: Sat 11 Apr 2026 19:18:22 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: U+Qpv67Oup7n47zV3CGl/kZUaBArj6kmOX45uDCvWdk=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: j7HoHCdz64sq86gO6WNIo+MZn9FyOmtrk8UeOchCdv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Apr 4 19:18:22 2026 GMT Not After : Apr 11 19:18:22 2026 GMT Subject: CN=69d163ff-a99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:77:c1:c4:70:33:e0:ef:65:5e:f1:a6:3c: 6d:c9:90:b1:f8:03:33:fb:34:36:70:53:6c:5f:79: 37:23:d6:43:39:2b:cc:5d:1b:90:1f:44:b2:26:7c: 83:25:eb:f5:81:84:6b:b0:1c:41:67:d0:fa:a2:88: 57:3e:6d:f0:0c:ba:7f:80:83:cd:cf:ac:ff:43:43: 09:a1:42:c7:43:3b:87:e9:c2:74:1c:a5:6a:1a:23: b6:04:5f:2d:ea:2b:42:76:43:43:54:c5:7a:25:17: ac:4c:f3:27:15:01:7d:37:ec:0e:ec:ba:01:b2:be: 1d:2d:81:35:86:b1:26:ff:14:3d:ca:7e:a4:e5:9d: 9a:74:ef:9b:53:e2:27:2f:72:a9:19:53:b0:a9:27: 5a:a9:ac:5f:73:bc:a1:01:3b:d6:5a:39:29:1e:5c: 4d:3d:13:5a:ea:04:43:80:20:85:96:d5:41:79:2a: 20:ad:86:bc:fe:bc:af:3d:dd:be:9f:33:34:fd:e9: 6a:85:89:6b:ba:4d:d2:21:f7:5b:57:20:5b:52:c0: 7b:bc:cf:9e:8b:5a:73:26:e4:e8:4f:90:8c:85:d0: 82:2d:df:9f:2f:ce:d4:be:b8:92:a4:a4:62:91:03: b7:1d:88:34:f5:80:f1:d4:94:c4:3a:de:91:fd:ec: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:D9:3A:8C:14:90:26:F1:32:A5:3F:91:72:AA:4A:AD:A5:B5:E1 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b3:05:b8:75:c1:9e:ca:bd:d5:c2:5c:30:0e:ce:dd:1e:e5: d6:7d:8e:69:8b:84:2c:2e:a3:56:94:dd:dd:c6:53:2a:32:6a: 6b:e7:57:38:1b:5f:16:5a:58:e3:26:65:11:88:48:fd:ae:c2: d1:23:83:0e:6f:42:9b:3e:d3:cd:f5:06:72:32:57:23:44:71: 69:ee:67:b4:65:59:0e:08:43:05:59:ce:b3:58:73:41:55:1d: e9:08:85:5c:f3:d8:e9:94:cf:e7:94:5c:b6:09:f3:e7:6e:6f: ab:e7:ac:4d:0f:e0:8c:2e:27:26:1b:b9:67:2b:1a:58:65:ac: 88:23:a8:29:bf:c5:06:a2:e9:5e:ab:91:7e:fb:3f:aa:c5:72: 3f:00:e5:00:b0:df:4f:4f:25:ba:4b:ec:cc:15:8c:85:5a:ec: f5:c4:aa:38:0e:cf:45:73:38:4e:ac:94:a6:7b:70:26:0b:a0: a3:52:51:fa:c3:20:9b:92:67:44:c8:7b:5c:e1:60:14:66:32: 43:97:76:32:67:d8:33:7c:41:78:30:fb:8e:ff:6b:04:38:4f: 16:52:55:07:ec:28:b2:ec:ef:fe:69:b6:c1:ef:31:29:9b:9e: 66:2b:8c:3b:d2:c2:82:91:8f:d2:34:3c:8d:03:4f:6b:7d:29: bd:1f:d7:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjYwNDA0MTkxODIyWhcNMjYwNDExMTkxODIyWjAYMRYwFAYD VQQDEw02OWQxNjNmZi1hOTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3V3wcRwM+DvZV7xpjxtyZCx+AMz+zQ2cFNsX3k3I9ZDOSvMXRuQH0SyJnyD Jev1gYRrsBxBZ9D6oohXPm3wDLp/gIPNz6z/Q0MJoULHQzuH6cJ0HKVqGiO2BF8t 6itCdkNDVMV6JResTPMnFQF9N+wO7LoBsr4dLYE1hrEm/xQ9yn6k5Z2adO+bU+In L3KpGVOwqSdaqaxfc7yhATvWWjkpHlxNPRNa6gRDgCCFltVBeSogrYa8/ryvPd2+ nzM0/elqhYlruk3SIfdbVyBbUsB7vM+ei1pzJuToT5CMhdCCLd+fL87UvriSpKRi kQO3HYg09YDx1JTEOt6R/excxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4b2TqM FJAm8TKlP5FyqkqtpbXhMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMLMFuHXBnsq91cJcMA7O3R7l1n2OaYuELC6jVpTd3cZTKjJqa+dXOBtfFlpY 4yZlEYhI/a7C0SODDm9Cmz7TzfUGcjJXI0Rxae5ntGVZDghDBVnOs1hzQVUd6QiF XPPY6ZTP55Rctgnz525vq+esTQ/gjC4nJhu5ZysaWGWsiCOoKb/FBqLpXquRfvs/ qsVyPwDlALDfT08lukvszBWMhVrs9cSqOA7PRXM4TqyUpntwJgugo1JR+sMgm5Jn RMh7XOFgFGYyQ5d2MmfYM3xBeDD7jv9rBDhPFlJVB+wosuzv/mm2we8xKZueZiuM O9LCgpGP0jQ8jQNPa30pvR/XZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:37 2026 by rpki-client