$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: gQiz1UXwv8GfzuknqKmBU6Kvd5/ncESQkRBVCkYXIFM= Subject key identifier: AD:D3:68:C0:A8:CC:C8:F1:BF:1B:A0:DC:61:F7:D0:88:E0:FE:0F:E1 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0B5A Signing time: Sat 18 Apr 2026 16:32:22 +0000 Manifest this update: Sat 18 Apr 2026 16:32:22 +0000 Manifest next update: Sat 25 Apr 2026 16:32:22 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: ENgMqoLxaupzVjWRVUcMIzk8hIl9AwSQmCGwH7shFTc=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EU2N4gJVDh7rl8ft9+ApHPFL1rUzyfoQd0sEXkYo/7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Apr 18 16:32:22 2026 GMT Not After : Apr 25 16:32:22 2026 GMT Subject: CN=69e3b216-19a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:f8:fa:57:0f:6b:b6:9d:b9:d3:1f:4a:63: 18:05:83:09:16:ea:34:ea:79:f7:52:00:47:0a:87: 87:8a:ea:c7:cd:ab:66:73:62:58:ab:39:a2:82:29: 71:12:93:57:59:c1:da:23:6e:75:1b:61:c7:c3:9b: b9:16:96:2d:bb:dd:05:1e:46:3a:a6:65:6f:c3:cc: 93:95:67:87:e3:8e:da:c8:95:b0:de:cf:60:9e:8f: 57:82:c4:6b:a6:4d:90:71:e3:96:bc:13:2b:bb:27: 25:44:ad:d1:c4:19:c4:13:7b:96:0a:24:18:5e:3d: ff:3b:8c:5f:94:bb:2f:63:8d:b8:83:ab:88:60:f6: 01:0a:66:0a:80:29:99:1a:1c:32:5e:b7:49:44:cb: ea:1a:14:9c:59:d2:34:b1:d0:35:e0:68:b1:d5:da: 81:9a:07:27:cd:52:c1:63:0e:d6:d6:ac:c8:ed:ed: 0c:70:2f:bf:7c:36:8b:59:5b:4a:92:d4:af:1b:10: 97:d9:1e:7f:48:dd:40:5b:e3:3a:e2:9e:04:60:55: 65:bc:11:11:ec:14:ad:f5:fa:0c:8b:f3:05:bd:2e: 58:13:85:09:0a:07:cc:cb:ae:b6:a4:d9:2b:44:33: 92:d5:be:ed:d6:59:0c:ad:63:7f:97:57:c0:31:da: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:68:C0:A8:CC:C8:F1:BF:1B:A0:DC:61:F7:D0:88:E0:FE:0F:E1 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:4c:b5:96:99:9e:d0:2c:0c:bc:b2:98:d8:a3:e6:d8:93: f0:6b:f7:13:90:e7:ec:f1:67:ef:72:d0:c1:06:e4:fd:ee:85: 0a:d5:04:45:0f:cb:a6:fc:21:a8:ff:86:71:ea:3e:51:f1:c1: 37:e7:f8:83:44:54:4c:1a:5e:0d:6a:4c:54:ee:a1:3e:26:0a: 90:fa:9a:33:e1:7e:d4:fe:ef:74:bc:e4:b8:22:22:bc:3a:e2: f8:68:2b:e9:a1:9e:2a:4e:d3:a2:30:61:ec:13:cb:5d:20:bd: 60:5f:06:f8:2e:64:3c:50:ce:e4:da:98:7b:51:2a:25:0e:67: 23:86:7c:d1:dc:b3:cb:29:07:29:b4:bf:7d:1d:4b:3a:8d:31: 2b:13:32:7f:a7:b0:4a:3f:ad:17:68:78:fb:fd:b3:00:e4:9e: 20:76:c9:06:eb:e1:89:af:42:bb:1d:66:31:32:ec:f3:78:18: 88:6c:83:97:44:d1:e8:98:c0:d1:d3:ba:4b:ae:0d:73:eb:0f: bb:3f:8d:66:0b:3c:d6:02:2c:45:ee:7f:28:b7:f7:ec:3a:f8: 83:55:1e:75:88:22:a0:e9:a7:64:16:f3:d6:f2:9a:09:d5:b3: 44:21:f2:ec:3e:67:1b:e4:12:4d:f6:3f:53:53:ac:5e:86:ef: 0c:16:9f:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYwNDE4MTYzMjIyWhcNMjYwNDI1MTYzMjIyWjAYMRYwFAYD VQQDEw02OWUzYjIxNi0xOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Vr4+lcPa7adudMfSmMYBYMJFuo06nn3UgBHCoeHiurHzatmc2JYqzmigilx EpNXWcHaI251G2HHw5u5FpYtu90FHkY6pmVvw8yTlWeH447ayJWw3s9gno9XgsRr pk2QceOWvBMruyclRK3RxBnEE3uWCiQYXj3/O4xflLsvY424g6uIYPYBCmYKgCmZ GhwyXrdJRMvqGhScWdI0sdA14Gix1dqBmgcnzVLBYw7W1qzI7e0McC+/fDaLWVtK ktSvGxCX2R5/SN1AW+M64p4EYFVlvBER7BSt9foMi/MFvS5YE4UJCgfMy662pNkr RDOS1b7t1lkMrWN/l1fAMdpb/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3TaMCo zMjxvxug3GH30Ijg/g/hMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAksdMtZaZntAsDLyymNij5tiT8Gv3E5Dn7PFn73LQwQbk/e6FCtUERQ/Lpvwh qP+Gceo+UfHBN+f4g0RUTBpeDWpMVO6hPiYKkPqaM+F+1P7vdLzkuCIivDri+Ggr 6aGeKk7TojBh7BPLXSC9YF8G+C5kPFDO5NqYe1EqJQ5nI4Z80dyzyykHKbS/fR1L Oo0xKxMyf6ewSj+tF2h4+/2zAOSeIHbJBuvhia9Cux1mMTLs83gYiGyDl0TR6JjA 0dO6S64Nc+sPuz+NZgs81gIsRe5/KLf37Dr4g1UedYgioOmnZBbz1vKaCdWzRCHy 7D5nG+QSTfY/U1OsXobvDBafXA== -----END CERTIFICATE-----Generated at Sun Apr 19 00:56:39 2026 by rpki-client