$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: rcLz18H5i29ySo9Mymkqa1kxWq3d+wwwY0dAEJJMtYc= Subject key identifier: D4:42:69:26:C1:EA:A1:CE:E2:5A:3A:B5:AA:6A:68:F5:A3:8E:85:02 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0D9B Signing time: Sat 04 Apr 2026 17:48:01 +0000 Manifest this update: Sat 04 Apr 2026 17:48:01 +0000 Manifest next update: Sat 11 Apr 2026 17:48:01 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: pcPpUlr03jrhvAApdtMmWMkeJFZJVzQ6P2Dn0FmC6uI=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: pbKdsMeBsvOeSomjFM8j6Bm6hC7ndk/6YYGFv0c3ANY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Apr 4 17:48:01 2026 GMT Not After : Apr 11 17:48:01 2026 GMT Subject: CN=69d14ed1-7b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:b0:b9:3d:c6:4f:34:a7:e2:0d:bf:34:65: a6:0f:a4:4a:6c:0f:8d:8c:ff:3d:c9:8e:95:89:cd: cb:cb:0f:68:79:4b:46:57:9d:db:49:d8:b2:4b:f7: 1b:28:34:5f:f6:5b:42:26:6e:d0:de:29:79:f8:d8: 44:cf:4d:9b:d4:48:6a:ad:af:cb:15:7d:7a:47:77: f1:06:57:cf:cc:a1:62:7b:bb:f8:9c:0b:c7:09:50: aa:0c:7a:dd:6f:0b:21:b3:ac:86:0d:de:43:19:30: 61:a5:d5:79:50:d1:99:d2:87:48:a4:1f:6c:97:05: 80:37:51:f4:06:12:38:fd:88:12:44:01:58:c3:82: 14:78:d2:c0:ca:2a:bc:df:c8:f0:05:b1:dc:8a:c0: 03:de:4d:1c:ac:0b:89:34:36:a1:06:7e:63:58:a6: 29:b6:25:fb:d3:9a:8a:e1:2b:5a:fc:47:7b:0c:aa: 46:e2:85:ac:c1:00:9a:20:81:0c:99:99:7e:78:d1: 02:4f:bf:6b:64:07:cb:a3:9a:6b:8e:2f:c4:5a:8e: f6:af:fa:7f:d2:96:19:2e:71:a9:0d:4b:cd:46:9d: 02:5c:86:c3:09:c3:db:2f:94:cb:fd:79:37:e5:83: 0f:ed:cb:11:10:45:a6:de:4a:64:b0:ba:57:57:b2: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:69:26:C1:EA:A1:CE:E2:5A:3A:B5:AA:6A:68:F5:A3:8E:85:02 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:09:e5:56:24:aa:e7:22:54:73:b3:e8:1f:24:7a:65:3f:f7: bd:97:31:70:d4:a2:09:60:42:f0:7f:1a:71:29:eb:d9:a1:ea: 11:55:c0:f5:8e:d0:c3:27:6c:00:57:00:17:84:fe:60:aa:5d: af:b5:c0:d0:fd:de:91:07:55:ab:24:f2:fd:fc:82:be:a0:28: ed:1d:c0:64:3f:d3:98:0a:3f:ac:8b:e8:44:2f:cc:2b:24:bd: 97:1a:c1:7a:7a:1e:75:cd:51:e2:f9:e7:81:77:a0:fc:62:3e: 39:0f:8b:11:94:d9:79:c7:95:14:38:b3:54:71:03:30:b5:ce: f7:78:99:a2:8f:4e:86:ef:96:54:55:f1:35:a6:62:a2:d9:41: 4d:2c:d6:3f:bf:8b:51:19:43:13:ab:f2:be:cf:fc:a0:b4:17: 8d:28:ae:0c:6c:83:3a:74:00:b6:b1:bb:28:f7:47:f3:e4:ed: 26:c7:76:05:c0:21:2a:4a:9c:92:19:81:17:d5:75:d3:5d:fd: 3b:85:51:97:f7:6f:33:58:d3:29:f2:17:b2:9f:cf:6a:10:e3: c9:be:c9:04:c4:60:be:e5:b2:71:81:8b:22:77:04:70:c9:d6: 2a:62:ff:82:cb:77:1d:05:8e:f2:32:b0:9f:9a:bd:39:3e:92: 16:4c:59:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjYwNDA0MTc0ODAxWhcNMjYwNDExMTc0ODAxWjAYMRYwFAYD VQQDEw02OWQxNGVkMS03YjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCiwuT3GTzSn4g2/NGWmD6RKbA+NjP89yY6Vic3Lyw9oeUtGV53bSdiyS/cb KDRf9ltCJm7Q3il5+NhEz02b1Ehqra/LFX16R3fxBlfPzKFie7v4nAvHCVCqDHrd bwshs6yGDd5DGTBhpdV5UNGZ0odIpB9slwWAN1H0BhI4/YgSRAFYw4IUeNLAyiq8 38jwBbHcisAD3k0crAuJNDahBn5jWKYptiX705qK4Sta/Ed7DKpG4oWswQCaIIEM mZl+eNECT79rZAfLo5prji/EWo72r/p/0pYZLnGpDUvNRp0CXIbDCcPbL5TL/Xk3 5YMP7csREEWm3kpksLpXV7K71wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRCaSbB 6qHO4lo6tapqaPWjjoUCMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUQnlViSq5yJUc7PoHyR6ZT/3vZcxcNSiCWBC8H8acSnr2aHqEVXA9Y7Qwyds AFcAF4T+YKpdr7XA0P3ekQdVqyTy/fyCvqAo7R3AZD/TmAo/rIvoRC/MKyS9lxrB enoedc1R4vnngXeg/GI+OQ+LEZTZeceVFDizVHEDMLXO93iZoo9Ohu+WVFXxNaZi otlBTSzWP7+LURlDE6vyvs/8oLQXjSiuDGyDOnQAtrG7KPdH8+TtJsd2BcAhKkqc khmBF9V10139O4VRl/dvM1jTKfIXsp/PahDjyb7JBMRgvuWycYGLIncEcMnWKmL/ gst3HQWO8jKwn5q9OT6SFkxZ5Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:46 2026 by rpki-client