$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: KybXJ0+jG7s+jFZEqF87sGNhLcGIDiRLA2wqcQU0gRQ= Subject key identifier: 9C:AE:D8:48:BD:F5:BD:89:EA:2A:D8:BC:83:F6:4B:32:E5:5B:8C:1C Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 1797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 1786 Signing time: Sat 04 Apr 2026 16:29:45 +0000 Manifest this update: Sat 04 Apr 2026 16:29:44 +0000 Manifest next update: Sat 11 Apr 2026 16:29:44 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: 8Dkj/w6ICW+cd9VZUaHmFYZEFVC6pPXwuo+lW14U/CM=) 2: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (hash: 9clXsEeVc8Rrec1VecieWHsCO3PFs56kSy/Kdhg94ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6039 (0x1797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Apr 4 16:29:44 2026 GMT Not After : Apr 11 16:29:44 2026 GMT Subject: CN=69d13c79-40c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:72:7e:1b:59:ed:79:51:74:07:2c:ac:80: 39:29:fd:0b:c6:1f:e3:71:48:11:2b:a1:32:94:4f: f5:db:9b:51:99:42:a0:92:4c:c4:79:ff:08:c3:d9: 64:21:19:54:89:60:2d:d9:bd:cf:41:27:83:20:60: 49:b7:97:d1:31:d9:d5:37:9a:15:7d:c7:d7:a3:3c: db:b0:f7:50:02:dd:b2:1a:cf:61:0d:5b:d9:05:52: 2f:05:02:c7:09:27:f0:13:30:6a:72:64:2c:fd:0a: 47:bc:97:e2:9d:b0:d0:1a:9a:49:94:cf:61:c0:e5: 7e:ab:74:93:31:26:2e:38:9d:80:69:b9:9e:3d:c4: 9b:d5:6f:7c:ea:7c:6b:52:a7:6f:70:c0:8f:45:6c: c9:51:4c:26:29:02:1c:32:f8:a3:6c:96:f0:c4:cb: c9:a9:a6:83:b0:94:c9:f1:dc:e2:4f:94:06:54:34: 86:82:f9:4a:02:2c:cd:c9:e5:ef:fe:a9:2e:20:72: c8:ca:c3:c5:51:d3:69:3a:03:ff:b0:1d:ff:1e:3d: 14:85:6a:7d:27:13:e0:ed:e2:88:7f:af:1a:d3:68: 37:46:9e:ad:de:7a:f1:f0:48:91:e6:d2:17:54:3f: 2d:f8:df:6d:ed:c3:2b:f1:47:eb:a5:7c:e6:21:ec: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:D8:48:BD:F5:BD:89:EA:2A:D8:BC:83:F6:4B:32:E5:5B:8C:1C X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:20:c6:ca:f0:20:c0:ff:fa:4c:64:e8:dd:75:bf:12:ea:6a: bb:9d:76:e7:1f:5a:7a:14:31:3b:49:6b:6c:17:b9:f2:cd:b2: 5f:69:d5:78:61:47:53:85:9b:4c:21:9b:47:1f:79:12:56:5f: 0a:6e:e2:21:76:05:7d:cd:58:aa:1e:45:bc:f3:07:99:f4:06: ac:d6:f2:9f:90:cd:7b:e9:37:a5:7e:0c:4c:97:7d:b5:89:c2: c1:7d:50:a1:0f:4b:aa:22:59:98:93:e9:7d:a6:a9:67:7e:b6: fc:70:5c:31:1c:54:2a:ed:bd:22:08:3d:5a:8a:e7:2e:ee:00: a7:9b:2f:f6:13:44:ad:e3:7c:b0:59:df:f2:b2:fb:34:f2:11: 72:31:69:af:64:cc:58:b7:e4:02:6a:17:0b:9a:f8:b0:42:c0: 35:c6:a5:d9:d8:44:bb:2f:b2:d0:24:8f:ee:f5:ad:31:14:52: 73:1a:27:30:e0:76:db:f5:9f:b3:7f:b7:a1:d2:c1:e1:c8:7c: 1f:dd:82:b6:fb:c0:a0:a6:85:79:7e:0d:3b:48:a8:1a:af:0e: 92:83:6b:fa:fe:95:0d:e0:a0:01:83:d5:63:48:51:13:c0:0d: 72:92:98:67:2d:86:65:5e:20:f2:dc:18:c6:76:4d:79:b6:26: 14:6b:ec:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjYwNDA0MTYyOTQ0WhcNMjYwNDExMTYyOTQ0WjAYMRYwFAYD VQQDEw02OWQxM2M3OS00MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2p1yfhtZ7XlRdAcsrIA5Kf0Lxh/jcUgRK6EylE/125tRmUKgkkzEef8Iw9lk IRlUiWAt2b3PQSeDIGBJt5fRMdnVN5oVfcfXozzbsPdQAt2yGs9hDVvZBVIvBQLH CSfwEzBqcmQs/QpHvJfinbDQGppJlM9hwOV+q3STMSYuOJ2AabmePcSb1W986nxr UqdvcMCPRWzJUUwmKQIcMvijbJbwxMvJqaaDsJTJ8dziT5QGVDSGgvlKAizNyeXv /qkuIHLIysPFUdNpOgP/sB3/Hj0UhWp9JxPg7eKIf68a02g3Rp6t3nrx8EiR5tIX VD8t+N9t7cMr8UfrpXzmIewJ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyu2Ei9 9b2J6irYvIP2SzLlW4wcMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyDGyvAgwP/6TGTo3XW/Eupqu5125x9aehQxO0lrbBe58s2yX2nVeGFHU4Wb TCGbRx95ElZfCm7iIXYFfc1Yqh5FvPMHmfQGrNbyn5DNe+k3pX4MTJd9tYnCwX1Q oQ9LqiJZmJPpfaapZ362/HBcMRxUKu29Igg9WornLu4Ap5sv9hNEreN8sFnf8rL7 NPIRcjFpr2TMWLfkAmoXC5r4sELANcal2dhEuy+y0CSP7vWtMRRScxonMOB22/Wf s3+3odLB4ch8H92CtvvAoKaFeX4NO0ioGq8OkoNr+v6VDeCgAYPVY0hRE8ANcpKY Zy2GZV4g8twYxnZNebYmFGvspw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:21 2026 by rpki-client