$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: EdpntszBqrMKj0aGXOHGIv7GA9Tz6sRloU+V9pQ8N/8= Subject key identifier: 5F:6D:05:95:C3:F6:A4:4C:34:2A:DF:93:FF:0A:3B:16:42:F9:B6:26 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 18B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 1894 Signing time: Sat 04 Apr 2026 16:24:33 +0000 Manifest this update: Sat 04 Apr 2026 16:24:33 +0000 Manifest next update: Sat 11 Apr 2026 16:24:33 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: VqBd5NnUaMRr3BjRtBgBz2HmvGGjgheb4aL+1nD22Gc=) 2: B5018AB0F2F111F08D4F09A1476F56BC.roa (hash: tpT68E0M3mFJ+XcHkcNvjHUefCfKea/pcyuU4Yj5Ha8=) 3: 71FD6FA8F2E311F098475965426F56BC.roa (hash: 5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6327 (0x18b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Apr 4 16:24:33 2026 GMT Not After : Apr 11 16:24:33 2026 GMT Subject: CN=69d13b41-e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:ae:a9:9f:80:22:e8:ad:b3:65:e0:74:27: fc:79:9e:ef:21:f4:e6:2e:4d:1a:f7:dc:a3:c6:32: 77:ef:ef:cd:42:31:14:3f:a0:3a:a4:bb:bc:61:e8: 21:a0:73:76:1d:25:98:a6:3f:3e:0f:4d:bd:37:b7: 12:b5:94:48:97:eb:8b:1c:64:c4:95:ae:b4:e0:fc: e0:23:54:e1:46:7c:ae:ab:63:ca:b4:7f:6c:3a:ba: f1:f3:2e:c0:a3:3a:67:ae:14:f2:8f:51:11:f6:f0: d0:a3:36:9e:d9:fc:23:c9:d3:06:04:8d:44:a4:de: 28:87:f1:46:cc:c2:68:8a:d7:c8:0b:ef:64:78:dc: c2:2c:44:e3:a0:27:9e:9d:1a:a5:95:d3:ff:e3:d1: cf:da:c2:2a:01:cd:a1:d6:3d:92:0d:fe:c6:cc:33: c2:ff:60:47:cb:39:a6:f1:94:d9:3c:5e:9c:d4:5d: e3:f4:f5:ed:f1:f2:ea:33:82:bd:cf:af:78:4a:5c: 5d:9b:eb:87:46:81:66:e2:ff:0f:2c:30:7f:68:55: d8:f3:d6:7d:c8:fd:99:bf:d4:22:6f:9c:b6:f8:07: 24:60:83:fe:86:ff:be:a5:5a:0f:e5:bf:69:f6:ac: 9a:2b:ae:c2:45:c3:79:a8:64:fb:67:97:84:07:56: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:05:95:C3:F6:A4:4C:34:2A:DF:93:FF:0A:3B:16:42:F9:B6:26 X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:30:ef:41:cf:af:36:1b:b9:95:a1:b0:7b:bd:cb:55:31:ae: b5:04:e0:d6:cc:87:f6:4a:b2:f8:4a:fa:cc:bf:3d:09:30:bb: 0e:2b:4f:1b:02:ee:1c:a1:a3:62:42:b6:8c:31:37:e5:a0:ce: 4b:b3:5f:3e:0a:a9:f7:bd:14:13:24:66:19:73:6f:02:fb:4d: 94:ba:91:46:e7:7d:33:95:6c:00:97:66:6a:e6:68:3f:a4:e5: ec:e9:5f:26:ca:9a:04:a4:71:56:76:06:f5:89:9b:29:19:83: 30:8c:21:c9:0d:29:75:a5:bf:61:50:75:9c:63:cf:b5:43:c0: 08:bc:cf:4c:db:33:0a:80:7b:00:ff:8f:1a:e0:4f:ed:bd:03: 74:b9:c1:09:a2:da:45:ed:0b:63:c5:e6:37:59:9f:b6:f8:b6: 3f:be:98:9e:1a:d9:76:b8:c3:14:24:8b:c5:28:49:46:c1:21: 04:9e:98:3d:05:22:a6:52:7c:c7:76:59:85:b3:7f:0f:e9:7f: 22:a8:34:96:7a:c7:e6:34:fb:c2:60:63:96:6c:43:a9:5c:cc: fa:e4:aa:3f:2c:fa:23:1b:ff:de:d2:e7:01:ea:2d:b3:72:1d: a2:0e:38:91:11:31:1c:bf:3c:62:ce:96:21:a7:e3:eb:67:07: 6b:35:3f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjYwNDA0MTYyNDMzWhcNMjYwNDExMTYyNDMzWjAYMRYwFAYD VQQDEw02OWQxM2I0MS1lN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1KuqZ+AIuits2XgdCf8eZ7vIfTmLk0a99yjxjJ37+/NQjEUP6A6pLu8Yegh oHN2HSWYpj8+D029N7cStZRIl+uLHGTEla604PzgI1ThRnyuq2PKtH9sOrrx8y7A ozpnrhTyj1ER9vDQozae2fwjydMGBI1EpN4oh/FGzMJoitfIC+9keNzCLETjoCee nRqlldP/49HP2sIqAc2h1j2SDf7GzDPC/2BHyzmm8ZTZPF6c1F3j9PXt8fLqM4K9 z694Slxdm+uHRoFm4v8PLDB/aFXY89Z9yP2Zv9Qib5y2+AckYIP+hv++pVoP5b9p 9qyaK67CRcN5qGT7Z5eEB1by6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9tBZXD 9qRMNCrfk/8KOxZC+bYmMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjDvQc+vNhu5laGwe73LVTGutQTg1syH9kqy+Er6zL89CTC7DitPGwLuHKGj YkK2jDE35aDOS7NfPgqp970UEyRmGXNvAvtNlLqRRud9M5VsAJdmauZoP6Tl7Olf JsqaBKRxVnYG9YmbKRmDMIwhyQ0pdaW/YVB1nGPPtUPACLzPTNszCoB7AP+PGuBP 7b0DdLnBCaLaRe0LY8XmN1mftvi2P76YnhrZdrjDFCSLxShJRsEhBJ6YPQUiplJ8 x3ZZhbN/D+l/Iqg0lnrH5jT7wmBjlmxDqVzM+uSqPyz6Ixv/3tLnAeots3Idog44 kRExHL88Ys6WIafj62cHazU/nQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:27 2026 by rpki-client